$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/8356f673-29cb-34e7-b622-9a4a569ce20e.roa File: 8356f673-29cb-34e7-b622-9a4a569ce20e.roa (raw, json) Hash identifier: 9yoXMeP4xngg3KACM8v4oYFmvT7aH1YjNIQZJ6LMmxc= Subject key identifier: 89:D6:87:A0:ED:28:95:FD:3A:93:C3:CC:F8:73:F5:DB:03:B3:93:61 Certificate issuer: /CN=945d092c-cdd6-43ab-83ae-c3c597895e5a Certificate serial: 010D0C9F4328584D418765FD586BCAB17B053DA0 Authority key identifier: C5:28:C0:2B:09:33:62:CA:C8:A4:83:B4:E9:B5:7E:18:CC:FB:44:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/8356f673-29cb-34e7-b622-9a4a569ce20e.roa Signing time: Sun 22 Mar 2026 19:21:56 +0000 ROA not before: Sun 22 Mar 2026 19:21:56 +0000 ROA not after: Sat 20 Jun 2026 19:21:56 +0000 asID: 14107 IP address blocks: 2604:2400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/945d092c-cdd6-43ab-83ae-c3c597895e5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/945d092c-cdd6-43ab-83ae-c3c597895e5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:41:87:65:fd:58:6b:ca:b1:7b:05:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945d092c-cdd6-43ab-83ae-c3c597895e5a Validity Not Before: Mar 22 19:21:56 2026 GMT Not After : Jun 20 19:21:56 2026 GMT Subject: CN=fe3c2050-0862-4bdc-8ff1-34557037b87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:1f:56:42:44:52:85:1e:b1:48:80:b1:53: 57:e5:ad:4e:38:03:63:83:a8:4b:97:59:d9:91:00: fd:33:d9:08:24:f8:88:b4:02:64:02:4b:bf:5d:81: 97:72:fa:29:ee:1b:07:11:94:de:bf:89:9a:58:56: fb:e8:59:16:8a:de:95:14:ce:fd:c2:60:c5:43:f0: 4e:03:c2:c3:4a:e6:02:5b:92:fc:7c:54:74:e5:29: de:92:5c:d4:35:2b:c5:db:df:a8:c7:cb:4c:5c:76: 7a:c5:22:9b:92:f5:2d:35:a1:fe:db:72:97:ac:fc: f8:38:c5:41:ac:3e:de:88:a3:91:5b:61:c3:4e:b1: f6:93:e4:8f:75:f1:44:db:ad:1d:15:7e:10:97:54: 6a:a1:eb:37:78:42:ac:f4:36:e4:71:26:87:87:e5: 5c:6b:03:8e:a0:f2:2a:f6:f5:c8:21:d7:16:da:52: 3d:6f:ba:77:d8:9d:1d:3d:6e:a4:be:42:02:e3:b5: 69:0f:ad:13:22:b5:32:8a:d2:eb:c0:cf:46:02:5c: 82:70:fc:c2:37:12:df:ff:7e:0c:ed:1d:c8:35:ad: 05:a4:e2:4a:0a:62:ac:49:73:85:29:4d:3e:81:45: 99:bb:69:03:cc:69:df:57:ba:d0:d2:eb:7a:e9:23: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:87:A0:ED:28:95:FD:3A:93:C3:CC:F8:73:F5:DB:03:B3:93:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/8356f673-29cb-34e7-b622-9a4a569ce20e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/945d092c-cdd6-43ab-83ae-c3c597895e5a.crl X509v3 Authority Key Identifier: keyid:C5:28:C0:2B:09:33:62:CA:C8:A4:83:B4:E9:B5:7E:18:CC:FB:44:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a.cer sbgp-ipAddrBlock: critical IPv6: 2604:2400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7e:cd:75:ee:c2:5c:13:96:8f:56:97:6e:f6:de:a1:5b:05: 21:89:5b:31:a0:f4:4f:09:49:33:95:23:ae:46:87:4e:00:a8: 4f:aa:d5:ba:99:a0:ad:1f:32:8a:f7:14:eb:4c:3f:5e:b4:e0: 88:47:ab:22:01:bb:9d:00:bd:19:db:9e:08:77:33:41:08:23: ed:db:7c:44:2a:f9:a0:c7:88:a2:d0:68:1a:c4:df:62:fb:4c: f6:57:5d:e5:5c:9d:05:76:24:bc:54:76:54:10:38:50:67:2c: 76:5f:17:04:00:0c:7f:85:61:47:f9:76:59:fa:0a:6f:03:ec: 73:5f:16:ac:51:c0:bd:1a:9c:a1:9c:ce:2b:3c:b8:f9:cd:1f: 71:b6:16:e3:83:76:fd:76:1b:34:ff:04:18:82:31:ca:c0:9a: 11:48:0e:e9:cc:c0:49:8b:73:b5:fc:82:ff:02:0f:7c:be:e3: 66:65:56:0e:37:0e:25:ab:3a:6a:98:01:d8:13:fc:99:c5:e3: 92:8b:5a:ff:f4:b1:f8:69:c0:aa:7b:d8:53:30:b1:e2:57:20: 9a:11:7c:2e:fd:ed:34:4f:05:82:bd:d7:85:13:15:f3:0f:dd: 84:0c:21:df:41:c1:b9:d2:51:1a:0c:6b:a0:95:d5:2d:be:f3: fd:a1:37:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Bh2X9WGvKsXsFPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1ZDA5MmMtY2RkNi00M2FiLTgzYWUtYzNjNTk3ODk1 ZTVhMB4XDTI2MDMyMjE5MjE1NloXDTI2MDYyMDE5MjE1NlowLzEtMCsGA1UEAxMk ZmUzYzIwNTAtMDg2Mi00YmRjLThmZjEtMzQ1NTcwMzdiODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshgfVkJEUoUesUiAsVNX5a1OOANjg6hLl1nZ kQD9M9kIJPiItAJkAku/XYGXcvop7hsHEZTev4maWFb76FkWit6VFM79wmDFQ/BO A8LDSuYCW5L8fFR05SneklzUNSvF29+ox8tMXHZ6xSKbkvUtNaH+23KXrPz4OMVB rD7eiKORW2HDTrH2k+SPdfFE260dFX4Ql1Rqoes3eEKs9DbkcSaHh+VcawOOoPIq 9vXIIdcW2lI9b7p32J0dPW6kvkIC47VpD60TIrUyitLrwM9GAlyCcPzCNxLf/34M 7R3INa0FpOJKCmKsSXOFKU0+gUWZu2kDzGnfV7rQ0ut66SM13QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFInWh6DtKJX9OpPDzPhz9dsDs5NhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85NDVk MDkyYy1jZGQ2LTQzYWItODNhZS1jM2M1OTc4OTVlNWEvODM1NmY2NzMtMjljYi0z NGU3LWI2MjItOWE0YTU2OWNlMjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTQ1ZDA5MmMtY2RkNi00M2FiLTgz YWUtYzNjNTk3ODk1ZTVhLzk0NWQwOTJjLWNkZDYtNDNhYi04M2FlLWMzYzU5Nzg5 NWU1YS5jcmwwHwYDVR0jBBgwFoAUxSjAKwkzYsrIpIO06bV+GMz7RLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS85NDVkMDkyYy1jZGQ2LTQzYWItODNhZS1jM2M1 OTc4OTVlNWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQkADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJfs117sJcE5aPVpdu9t6hWwUhiVsxoPRPCUkzlSOuRodOAKhPqtW6 maCtHzKK9xTrTD9etOCIR6siAbudAL0Z254IdzNBCCPt23xEKvmgx4ii0GgaxN9i +0z2V13lXJ0FdiS8VHZUEDhQZyx2XxcEAAx/hWFH+XZZ+gpvA+xzXxasUcC9Gpyh nM4rPLj5zR9xthbjg3b9dhs0/wQYgjHKwJoRSA7pzMBJi3O1/IL/Ag98vuNmZVYO Nw4lqzpqmAHYE/yZxeOSi1r/9LH4acCqe9hTMLHiVyCaEXwu/e00TwWCvdeFExXz D92EDCHfQcG50lEaDGugldUtvvP9oTdD -----END CERTIFICATE-----Generated at Wed Mar 25 21:18:03 2026 by rpki-client