$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa File: 17556c0a-f699-393f-934b-8c8b0db969e9.roa (raw, json) Hash identifier: SnbrDAGSJ/6T9MKc4BXS2q3CHAb5UHPHh/BxJ3Y7+n0= Subject key identifier: 35:D1:53:A8:20:83:FE:38:1E:5B:C6:48:E1:A2:85:E3:27:70:72:E3 Certificate issuer: /CN=e9e45e6b-55e8-483f-8afb-10fedd49d809 Certificate serial: 010D0C9F4328584D39CF89513015ADAE7F5F33E0 Authority key identifier: E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 18683 IP address blocks: 2604:b680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:89:51:30:15:ad:ae:7f:5f:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e45e6b-55e8-483f-8afb-10fedd49d809 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=c3f61803-3baf-4598-9431-077ddbb71c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:18:8c:2b:e7:f7:e1:1e:f4:d0:35:89:12:0d: 19:d9:55:3b:2f:d1:3f:31:16:f1:59:ca:36:61:1a: 0b:be:ed:2b:5a:d7:59:87:8b:0a:5f:01:07:bd:8f: 58:29:7a:4a:79:5e:66:bb:a8:00:9f:b7:bf:f6:a6: 95:5f:de:bf:c9:72:e7:d2:b8:5c:ce:d1:f6:1f:28: 6e:6b:5e:0a:e6:6c:07:28:32:e6:c5:f4:a7:f7:d7: c8:8b:63:a1:a7:a6:49:27:4c:f3:d5:8b:04:bb:8a: ab:c6:32:a1:97:f0:8c:67:ab:2c:cc:37:d7:7a:a9: cf:ca:e9:15:13:57:f5:b6:75:8f:15:ad:2e:a5:62: 63:ed:06:26:38:fa:e6:85:f9:f0:7a:ed:61:0d:aa: 8d:d1:9e:37:95:60:f0:f7:b9:ac:00:92:76:b4:04: 1f:78:76:af:9a:4f:da:cd:73:ea:ee:48:31:aa:4c: 7a:7b:a9:b5:7e:aa:f5:84:8a:b8:93:de:58:b1:d9: b7:28:0a:41:ca:a4:fd:b6:99:eb:33:31:e7:0b:25: 34:74:20:5f:df:76:98:17:40:60:8a:7a:19:f8:c8: 27:15:ad:53:ac:a5:88:f9:dc:bd:6c:88:61:52:36: 94:23:71:fd:6d:2e:2c:67:d2:f8:66:9e:ef:ec:a9: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D1:53:A8:20:83:FE:38:1E:5B:C6:48:E1:A2:85:E3:27:70:72:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl X509v3 Authority Key Identifier: keyid:E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer sbgp-ipAddrBlock: critical IPv6: 2604:b680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:41:61:37:71:8d:81:f9:e3:ab:f7:59:80:fa:b5:2d:9f:55: 6f:90:55:c2:6f:78:c8:72:88:df:70:ef:84:fe:52:27:b7:16: 85:92:87:a9:ae:e3:6e:a6:0d:50:f8:3a:a0:f5:f3:33:32:37: 60:72:63:33:01:0e:5f:51:42:12:54:12:8f:dc:d2:4d:5e:90: ff:6f:c3:e9:5d:63:9e:3f:94:53:49:a9:66:cd:37:c7:0a:ba: e6:77:74:ff:c6:bb:c8:40:fa:c0:33:83:ce:8a:b4:e3:d5:e8: 2b:8f:a8:58:c7:b4:33:f6:82:d9:d6:63:cb:f8:09:be:44:16: c5:b0:cd:08:82:a4:66:54:cd:bc:fa:48:e3:c1:6c:3d:ba:fd: 22:b8:72:66:2f:27:ee:28:da:69:18:94:0d:54:20:03:e8:11: 75:02:a0:2f:e1:a1:43:f8:4b:74:f3:6b:c4:10:36:b2:68:47: a7:8d:fc:1f:51:40:6c:fc:88:29:9f:04:50:39:87:f0:39:6e: 45:94:f6:94:35:cc:18:20:75:a4:b7:d3:cb:63:8e:58:aa:ce: e8:6a:7b:f6:74:f3:38:d9:75:93:02:8d:29:b5:2d:04:9b:e9: e5:89:07:30:44:b5:5e:e4:fa:f9:af:38:9b:92:a6:0b:f5:09: 3b:31:d9:ac -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE05z4lRMBWtrn9fM+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTllNDVlNmItNTVlOC00ODNmLThhZmItMTBmZWRkNDlk ODA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YzNmNjE4MDMtM2JhZi00NTk4LTk0MzEtMDc3ZGRiYjcxYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxiMK+f34R700DWJEg0Z2VU7L9E/MRbxWco2 YRoLvu0rWtdZh4sKXwEHvY9YKXpKeV5mu6gAn7e/9qaVX96/yXLn0rhcztH2Hyhu a14K5mwHKDLmxfSn99fIi2Ohp6ZJJ0zz1YsEu4qrxjKhl/CMZ6sszDfXeqnPyukV E1f1tnWPFa0upWJj7QYmOPrmhfnweu1hDaqN0Z43lWDw97msAJJ2tAQfeHavmk/a zXPq7kgxqkx6e6m1fqr1hIq4k95Ysdm3KApByqT9tpnrMzHnCyU0dCBf33aYF0Bg inoZ+MgnFa1TrKWI+dy9bIhhUjaUI3H9bS4sZ9L4Zp7v7KmvuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDXRU6ggg/44HlvGSOGiheMncHLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOWU0 NWU2Yi01NWU4LTQ4M2YtOGFmYi0xMGZlZGQ0OWQ4MDkvMTc1NTZjMGEtZjY5OS0z OTNmLTkzNGItOGM4YjBkYjk2OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTllNDVlNmItNTVlOC00ODNmLThh ZmItMTBmZWRkNDlkODA5L2U5ZTQ1ZTZiLTU1ZTgtNDgzZi04YWZiLTEwZmVkZDQ5 ZDgwOS5jcmwwHwYDVR0jBBgwFoAU5cQKChfprJZ/uin1clpxVJ4EDRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOWU0NWU2Yi01NWU4LTQ4M2YtOGFmYi0xMGZl ZGQ0OWQ4MDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS2gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAQWE3cY2B+eOr91mA+rUtn1VvkFXCb3jIcojfcO+E/lIntxaFkoep ruNupg1Q+Dqg9fMzMjdgcmMzAQ5fUUISVBKP3NJNXpD/b8PpXWOeP5RTSalmzTfH Crrmd3T/xrvIQPrAM4POirTj1egrj6hYx7Qz9oLZ1mPL+Am+RBbFsM0IgqRmVM28 +kjjwWw9uv0iuHJmLyfuKNppGJQNVCAD6BF1AqAv4aFD+Et082vEEDayaEenjfwf UUBs/IgpnwRQOYfwOW5FlPaUNcwYIHWkt9PLY45Yqs7oanv2dPM42XWTAo0ptS0E m+nliQcwRLVe5Pr5rzibkqYL9Qk7Mdms -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:42 2026 by rpki-client