$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa File: 86f557d8-087d-3afd-a352-3f7763892440.roa (raw, json) Hash identifier: sM41xnT4Yl+bbszX3TcF4jDGSTZmAcQxLiCXe6jGe74= Subject key identifier: 76:46:3A:62:F1:5D:8C:3B:58:03:6D:9F:2C:BF:A5:38:70:42:5D:50 Certificate issuer: /CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Certificate serial: 010D0C9F4328584D2D3F7DDE5E5495C524FA0CC0 Authority key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 40271 IP address blocks: 2620:11a:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7d:de:5e:54:95:c5:24:fa:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=81b2458a-c38d-4004-8d1f-eb695be1bb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:f0:dd:9c:8b:6b:79:c0:30:62:df:3c:e2: c2:ad:cd:dc:ec:65:ef:a3:5f:a3:7c:b1:71:03:9b: 07:e0:90:93:ae:a4:15:c6:c6:ff:31:5e:af:b8:f1: 45:38:6c:43:44:3c:85:01:52:21:6e:0f:66:74:1d: 0f:67:dc:44:10:4f:19:ab:f0:c7:aa:b0:47:7e:7e: 9b:fe:01:42:b8:90:c3:d8:25:1b:57:7a:21:4c:09: c9:1a:b4:9d:26:1b:c7:cc:43:e0:16:25:05:0e:d4: 47:e4:91:b9:57:83:9b:71:c5:ce:55:cb:27:4d:65: 69:e6:1d:d9:a5:6b:ab:95:f4:f0:25:ce:cc:19:c9: 02:b8:f0:b8:9c:19:31:40:a1:32:2c:06:74:49:88: 1a:bf:57:fa:69:c1:86:cf:e5:c5:3e:ba:3f:24:a3: 9a:e8:07:a1:27:2d:88:85:3a:44:12:e1:ab:4a:c9: a6:ca:3c:e5:b5:07:e7:4c:c2:13:b2:46:0e:cf:7e: 2c:7e:70:44:f3:2e:6a:6a:55:fe:89:12:16:d2:c9: e1:1c:98:f0:ed:79:92:7b:cd:f2:bb:87:97:3d:8c: 4e:6b:c7:23:6a:16:1e:6d:a1:7b:7c:da:cd:c2:c9: 09:e5:85:a8:f5:c1:fd:ae:b2:2c:93:18:11:9e:ce: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:3A:62:F1:5D:8C:3B:58:03:6D:9F:2C:BF:A5:38:70:42:5D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/86f557d8-087d-3afd-a352-3f7763892440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.crl X509v3 Authority Key Identifier: keyid:FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:b002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7a:c4:73:14:7a:7a:62:62:d0:a1:85:b2:a4:3a:35:c7:e5: dc:57:fd:68:73:97:85:5d:b9:fa:18:d5:93:12:72:fd:ba:85: a8:2e:84:37:b2:3b:9b:e3:c9:9c:98:e8:a7:1c:ef:ee:31:5c: 7a:c7:16:60:b7:53:d4:17:52:46:7c:a0:1d:ae:f6:04:2a:f1: cf:8d:95:4f:c5:ad:20:31:2a:f0:43:a6:d7:9d:ee:44:52:43: 34:04:6c:f4:eb:4e:51:bc:63:74:54:7c:b0:e8:73:3e:20:3a: ad:8f:eb:dc:6c:2b:1e:ec:5e:23:b8:82:6c:f6:24:e0:b7:52: e9:d1:d2:5d:94:61:6a:c2:72:af:69:bd:f9:b8:fe:c8:2a:72: 89:0d:1d:d7:5d:a0:aa:61:1e:45:95:38:cd:34:19:dc:31:94: e2:5f:dc:c4:4d:27:91:41:c6:8b:c3:67:5d:46:b0:62:75:06: 94:80:74:9a:76:99:4c:5e:5d:48:53:99:43:18:ef:b5:4f:d8: 7e:ba:13:af:9e:0e:6f:77:ef:72:86:cb:50:2f:ce:ba:a5:5c: 4f:34:4c:ac:86:87:d3:11:ad:f9:b4:6c:9b:00:a8:bc:8a:0d: fb:dd:b4:e8:53:ea:a4:2f:23:71:ab:01:dc:c2:a5:59:08:7c: 8f:b3:e4:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0tP33eXlSVxST6DMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2Nm NTIyMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ODFiMjQ1OGEtYzM4ZC00MDA0LThkMWYtZWI2OTViZTFiYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns7w3ZyLa3nAMGLfPOLCrc3c7GXvo1+jfLFx A5sH4JCTrqQVxsb/MV6vuPFFOGxDRDyFAVIhbg9mdB0PZ9xEEE8Zq/DHqrBHfn6b /gFCuJDD2CUbV3ohTAnJGrSdJhvHzEPgFiUFDtRH5JG5V4ObccXOVcsnTWVp5h3Z pWurlfTwJc7MGckCuPC4nBkxQKEyLAZ0SYgav1f6acGGz+XFPro/JKOa6AehJy2I hTpEEuGrSsmmyjzltQfnTMITskYOz34sfnBE8y5qalX+iRIW0snhHJjw7XmSe83y u4eXPYxOa8cjahYebaF7fNrNwskJ5YWo9cH9rrIskxgRns7OvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZGOmLxXYw7WANtnyy/pThwQl1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5 ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvODZmNTU3ZDgtMDg3ZC0z YWZkLWEzNTItM2Y3NzYzODkyNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRjOWUwY2UtMGYxMi00YmM4LTk4 OWMtNWQzMzJhN2NmNTIyLzE0YzllMGNlLTBmMTItNGJjOC05ODljLTVkMzMyYTdj ZjUyMi5jcmwwHwYDVR0jBBgwFoAU/fpf04LJWseB5rKwVLTJ0fActTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMz MmE3Y2Y1MjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGrAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJ6xHMUenpiYtChhbKkOjXH5dxX/Whzl4VdufoY1ZMScv26hagu hDeyO5vjyZyY6Kcc7+4xXHrHFmC3U9QXUkZ8oB2u9gQq8c+NlU/FrSAxKvBDpted 7kRSQzQEbPTrTlG8Y3RUfLDocz4gOq2P69xsKx7sXiO4gmz2JOC3UunR0l2UYWrC cq9pvfm4/sgqcokNHdddoKphHkWVOM00GdwxlOJf3MRNJ5FBxovDZ11GsGJ1BpSA dJp2mUxeXUhTmUMY77VP2H66E6+eDm9373KGy1AvzrqlXE80TKyGh9MRrfm0bJsA qLyKDfvdtOhT6qQvI3GrAdzCpVkIfI+z5M4= -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:15 2026 by rpki-client