$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: gFrsMgePZaMtavoqf9eJZ9ct1BpgcYGBltOnySytC50= Subject key identifier: E0:A2:03:E3:93:B9:29:B6:98:FB:A5:50:66:9F:26:3A:F0:8B:B6:28 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584D40CA5D869264225B19A9D280 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5d:86:92:64:22:5b:19:a9:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=c59a06a3-0ddf-418e-9ccc-7095cf39e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d7:43:b9:da:08:55:e2:d0:b2:d5:03:25:77: 68:10:cb:6b:c2:4a:1b:6c:6f:4e:4e:f4:13:bb:f7: f8:54:7c:5a:e5:86:64:a1:f1:95:5f:7c:6e:cb:aa: 68:49:65:03:75:70:56:9f:1f:d0:14:2d:f1:18:db: 24:dc:94:97:78:0c:ce:6c:76:d1:c5:e5:e3:93:d1: 66:d2:fd:ea:e3:36:0e:e8:b6:3a:2c:69:e4:27:5a: 5f:69:5f:43:f1:8b:96:46:a9:f9:08:dc:1e:a0:75: 15:ea:d5:9c:eb:d1:d8:cf:29:85:4a:74:08:63:a4: 31:50:5a:08:05:bf:62:21:f2:67:24:8e:f5:3e:c9: 8c:f8:ad:65:95:aa:3d:a5:87:e2:67:3f:65:6a:a2: f2:1a:09:30:4c:f6:a2:92:12:10:b0:21:68:24:b3: f0:4d:bc:50:01:63:ed:b0:bb:62:bd:38:46:c0:51: f9:95:76:fc:8c:5a:69:14:88:de:ce:78:bf:a6:b3: 3b:c6:20:71:61:b0:ce:25:d0:4f:1b:84:6d:48:de: 76:49:e5:f1:c6:1a:fb:45:82:9a:77:86:5a:38:64: db:ab:58:c4:21:75:38:51:29:5f:b3:ab:a6:92:6e: df:9e:65:ac:85:43:a4:9b:79:4e:c4:c1:0d:be:4d: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A2:03:E3:93:B9:29:B6:98:FB:A5:50:66:9F:26:3A:F0:8B:B6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:67:78:fe:9a:d3:31:c3:50:22:81:a8:28:9e:a8:9a:da:0e: 13:38:fc:87:f7:b1:60:01:8a:e1:39:85:c9:03:3e:96:1b:93: ab:ae:54:63:9c:3d:7d:a3:bd:60:88:f0:d2:85:f0:ba:35:77: 6a:62:c4:f5:b6:27:6d:e7:9f:aa:3e:98:fa:71:62:69:77:1b: 15:8b:af:5c:63:c6:52:61:58:a9:06:6f:19:21:04:8e:b4:c0: bd:7e:9c:45:df:a3:3e:80:4f:47:ea:42:65:ec:05:40:81:cf: 23:1f:e4:5e:d7:00:16:12:40:8d:21:f6:3e:ee:54:1e:06:1d: 79:f9:80:bf:79:4d:24:d6:73:f6:65:1d:3c:d1:a4:2f:6d:69: 9e:44:77:18:53:b5:af:47:4a:f5:c0:c9:4f:8d:03:8e:41:65: ac:80:68:85:07:94:79:58:6a:90:da:69:86:7e:d7:7c:94:6f: 97:ba:66:f6:54:55:cb:d7:4c:ef:7f:8a:cc:45:1b:f5:b7:e4: c7:bb:cb:32:f8:e5:af:7d:ce:0d:00:64:b0:29:89:9c:50:c7: 95:11:ed:4c:b4:3c:40:58:cc:74:31:8c:bf:fc:45:3b:39:d7: 8f:ae:1d:ab:ca:17:a2:da:cf:62:cc:8d:3e:a7:48:38:f2:c1: 47:88:91:3e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Ayl2GkmQiWxmp0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YzU5YTA2YTMtMGRkZi00MThlLTljY2MtNzA5NWNmMzllMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmddDudoIVeLQstUDJXdoEMtrwkobbG9OTvQT u/f4VHxa5YZkofGVX3xuy6poSWUDdXBWnx/QFC3xGNsk3JSXeAzObHbRxeXjk9Fm 0v3q4zYO6LY6LGnkJ1pfaV9D8YuWRqn5CNweoHUV6tWc69HYzymFSnQIY6QxUFoI Bb9iIfJnJI71PsmM+K1llao9pYfiZz9laqLyGgkwTPaikhIQsCFoJLPwTbxQAWPt sLtivThGwFH5lXb8jFppFIjezni/prM7xiBxYbDOJdBPG4RtSN52SeXxxhr7RYKa d4ZaOGTbq1jEIXU4USlfs6umkm7fnmWshUOkm3lOxMENvk2BJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOCiA+OTuSm2mPulUGafJjrwi7YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDQZ3j+mtMxw1Aigagonqia2g4TOPyH97FgAYrhOYXJAz6WG5OrrlRj nD19o71giPDShfC6NXdqYsT1tidt55+qPpj6cWJpdxsVi69cY8ZSYVipBm8ZIQSO tMC9fpxF36M+gE9H6kJl7AVAgc8jH+Re1wAWEkCNIfY+7lQeBh15+YC/eU0k1nP2 ZR080aQvbWmeRHcYU7WvR0r1wMlPjQOOQWWsgGiFB5R5WGqQ2mmGftd8lG+Xumb2 VFXL10zvf4rMRRv1t+THu8sy+OWvfc4NAGSwKYmcUMeVEe1MtDxAWMx0MYy//EU7 OdePrh2ryhei2s9izI0+p0g48sFHiJE+ -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:30 2026 by rpki-client