$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa File: 89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa (raw, json) Hash identifier: 37xsFXgbtGT8KjDcx/Jpc1KWHsFp2kVqUhHjijC/hSo= Subject key identifier: 4C:9A:A5:60:38:D6:C2:5F:02:E0:53:EB:EB:09:3B:E6:E7:25:EA:3F Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584D492A5E51791D9230D6E69740 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14717 IP address blocks: 2607:fd90::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5e:51:79:1d:92:30:d6:e6:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=573e8dc3-1c98-40f7-a591-524386e0e2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:03:a0:17:41:f5:1f:58:fa:87:64:cd:10: 57:2c:57:a7:50:47:39:de:a9:a0:16:38:20:4c:33: 78:db:a1:6e:05:19:be:a6:4a:5e:e0:fd:73:4b:a2: 93:90:6b:b2:cf:fe:0c:15:96:09:f8:83:0b:84:c5: 01:d8:01:e1:34:d2:d7:6f:50:40:b8:2e:4a:d0:6f: c7:dc:1e:c4:29:c2:6f:e6:9b:08:2e:6b:9d:9d:63: ae:87:63:29:b6:24:77:11:1a:c0:ea:6c:7b:f6:fe: f1:32:aa:ab:5e:46:1f:2f:e5:75:f4:c0:d9:e7:35: b6:07:a2:39:1d:3e:11:29:06:77:d0:ae:0d:fa:80: e7:26:63:a5:fe:8c:16:1f:3d:1f:4c:35:58:be:ec: e2:10:88:76:bb:ff:9a:02:6a:b3:c9:65:22:69:d8: cb:a7:0b:d5:82:9a:2a:0c:91:11:ce:38:94:2f:69: 73:a0:57:f2:68:62:98:cf:c2:cc:19:d8:24:2d:57: a3:17:3a:08:de:a0:a7:97:25:24:c9:7b:49:0a:d6: 10:72:5d:9e:34:28:0e:b5:58:00:ba:ad:fa:3d:ae: 9e:70:73:20:5b:04:ba:56:65:c6:ba:a0:4d:ca:d5: de:c1:2d:f7:c2:80:95:b8:d5:08:7d:89:c7:cf:c3: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9A:A5:60:38:D6:C2:5F:02:E0:53:EB:EB:09:3B:E6:E7:25:EA:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/89ceb73c-b3f7-3cf3-a707-a581e53afddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd90::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4d:54:6b:0a:ea:b1:e9:e9:dd:3e:34:e7:e4:8e:2d:75:d6: a3:7a:f7:76:4c:8b:6a:88:cd:11:5d:66:25:14:5a:ff:d0:3f: 2d:4d:11:f1:8a:b5:f6:e9:da:ec:e2:a9:c5:0b:f6:22:28:bd: 29:6f:35:34:1e:26:62:49:78:f7:da:21:c4:99:40:74:1e:ff: 2c:96:b5:34:c8:73:e1:d3:9d:7d:42:83:bb:eb:59:7a:d5:24: 7c:28:30:81:78:24:c0:95:e3:7b:97:48:a1:1d:3c:d6:cd:b9: ca:94:28:29:22:18:52:97:4f:40:29:66:d2:fd:1b:29:9a:f0: fd:90:9c:97:cf:62:c5:be:9f:b6:b9:13:88:98:08:5b:b2:c8: 3d:dd:1d:64:62:df:97:c2:ea:fb:28:63:f8:ac:04:56:1c:59: f1:bf:b4:7e:90:66:f9:be:21:4b:99:2e:5d:ca:d4:a7:86:83: 1e:9b:28:f6:b9:fa:88:8b:2e:d1:10:dd:fc:af:ca:8d:49:5b: 63:ee:ec:8f:0a:1f:23:7a:ed:b7:fe:bf:35:73:df:28:cd:80: 65:4c:f1:1a:85:9f:20:88:07:de:dc:88:f9:34:63:a2:d7:83: 82:2a:56:2a:b2:d2:c6:f4:a1:3f:a4:ab:95:3f:5e:ae:da:a0: 12:e5:1a:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKl5ReR2SMNbml0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NTczZThkYzMtMWM5OC00MGY3LWE1OTEtNTI0Mzg2ZTBlMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6sDoBdB9R9Y+odkzRBXLFenUEc53qmgFjgg TDN426FuBRm+pkpe4P1zS6KTkGuyz/4MFZYJ+IMLhMUB2AHhNNLXb1BAuC5K0G/H 3B7EKcJv5psILmudnWOuh2MptiR3ERrA6mx79v7xMqqrXkYfL+V19MDZ5zW2B6I5 HT4RKQZ30K4N+oDnJmOl/owWHz0fTDVYvuziEIh2u/+aAmqzyWUiadjLpwvVgpoq DJERzjiUL2lzoFfyaGKYz8LMGdgkLVejFzoI3qCnlyUkyXtJCtYQcl2eNCgOtVgA uq36Pa6ecHMgWwS6VmXGuqBNytXewS33woCVuNUIfYnHz8M7BQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEyapWA41sJfAuBT6+sJO+bnJeo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvODljZWI3M2MtYjNmNy0z Y2YzLWE3MDctYTU4MWU1M2FmZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgTVRrCuqx6endPjTn5I4tddajevd2TItqiM0RXWYlFFr/0D8tTRHx irX26drs4qnFC/YiKL0pbzU0HiZiSXj32iHEmUB0Hv8slrU0yHPh0519QoO761l6 1SR8KDCBeCTAleN7l0ihHTzWzbnKlCgpIhhSl09AKWbS/RspmvD9kJyXz2LFvp+2 uROImAhbssg93R1kYt+Xwur7KGP4rARWHFnxv7R+kGb5viFLmS5dytSnhoMemyj2 ufqIiy7REN38r8qNSVtj7uyPCh8jeu23/r81c98ozYBlTPEahZ8giAfe3Ij5NGOi 14OCKlYqstLG9KE/pKuVP16u2qAS5RqX -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:32 2026 by rpki-client