$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa File: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (raw, json) Hash identifier: TabJ82EJz2UPDb7Ji6q8BqkitEsckIAYuqR7xUmBe2w= Subject key identifier: 6A:2D:DF:8D:2A:1E:3B:63:FD:20:0C:87:FE:D1:53:2F:88:EC:7A:C5 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584D2BDA1F91FA94BC73DDD9DF00 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 398203 IP address blocks: 2605:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:1f:91:fa:94:bc:73:dd:d9:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=df6b2531-b0ca-41fa-bd75-5ac050378c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d3:b8:db:18:72:ee:14:d7:a2:e9:18:20:c7: 82:ab:9f:31:fa:66:e2:b8:fb:f6:7d:46:36:41:9e: ec:f2:57:5b:57:bb:5e:05:11:37:e6:31:bd:a9:37: b5:b8:ae:70:93:f4:86:72:26:19:b8:7f:12:69:b3: 71:bf:16:b6:ce:03:88:f5:dc:e2:58:33:01:ba:ef: 17:41:af:2d:31:a2:3e:43:ff:c7:71:3b:36:95:46: aa:2f:2c:90:c1:11:06:49:5c:d0:0e:4b:22:58:f7: 3e:a6:01:fc:fd:e4:3a:a9:28:78:09:22:34:42:5e: 3b:c0:a8:73:c4:b0:8d:b8:ea:c9:40:95:1a:b7:d6: e2:a5:13:f7:fb:d4:7f:cf:aa:24:01:7a:e3:f3:45: 96:ec:eb:0c:c7:cd:26:27:31:a2:e5:8c:14:af:66: fc:3f:65:82:df:ee:5d:1d:10:19:ef:4c:74:05:6c: c1:16:52:5f:47:3b:8c:37:c1:8d:9c:31:ec:80:49: 67:1f:1d:7b:7c:3d:1d:87:b5:09:03:10:36:79:cb: 4a:dd:2c:3c:07:ff:a8:38:c6:0b:45:52:ec:6a:f9: 0b:05:b8:ba:80:e5:57:68:12:92:a7:97:e1:2b:d6: 09:4c:f7:4f:32:23:9f:97:ae:d1:b1:83:27:7f:cd: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2D:DF:8D:2A:1E:3B:63:FD:20:0C:87:FE:D1:53:2F:88:EC:7A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv6: 2605:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:de:29:bd:fb:9c:c7:31:d5:fd:3b:a4:cb:71:37:92:05:1b: 8f:f9:90:2d:7d:e8:d0:45:e4:1a:4a:01:8f:39:9a:c7:9d:b6: 2d:42:bd:10:1e:b4:2a:79:ee:ec:71:4e:46:25:f2:ec:04:66: 7d:e1:a8:a8:3d:5e:34:70:79:ca:8c:dc:a3:bc:a2:eb:86:6b: c6:6a:0a:97:6c:80:22:b9:46:48:fb:df:9b:dc:7a:24:b2:3e: fa:ef:ed:70:de:7c:72:78:ac:d5:56:b2:cf:68:59:7e:c6:b0: 62:7c:5d:b4:c9:91:3f:27:8d:b3:9f:6a:c2:c7:7f:5d:a8:25: d2:24:23:e2:2b:d3:37:2d:d7:f6:f5:74:ba:7d:74:7b:c2:24: 0f:a1:77:6a:02:bf:fb:4a:46:d3:89:5e:92:f0:fe:78:21:de: 4e:d6:21:9e:00:fb:bb:01:dc:4b:ce:4c:cc:fc:3d:04:f2:5c: 6e:a2:a0:72:0a:da:85:de:c8:9f:7d:ab:57:59:a8:ac:ac:f0: 2f:7a:4c:08:84:65:4a:fa:ad:ee:e5:ef:72:de:c0:d7:82:b2: e5:1a:8a:49:b1:e3:82:69:46:b0:36:17:95:3c:f5:27:dc:d6: ef:11:31:8e:04:59:13:96:cb:32:78:49:f5:df:d5:6c:94:31: 37:1f:e4:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0r2h+R+pS8c93Z3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGY2YjI1MzEtYjBjYS00MWZhLWJkNzUtNWFjMDUwMzc4YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNO42xhy7hTXoukYIMeCq58x+mbiuPv2fUY2 QZ7s8ldbV7teBRE35jG9qTe1uK5wk/SGciYZuH8SabNxvxa2zgOI9dziWDMBuu8X Qa8tMaI+Q//HcTs2lUaqLyyQwREGSVzQDksiWPc+pgH8/eQ6qSh4CSI0Ql47wKhz xLCNuOrJQJUat9bipRP3+9R/z6okAXrj80WW7OsMx80mJzGi5YwUr2b8P2WC3+5d HRAZ70x0BWzBFlJfRzuMN8GNnDHsgElnHx17fD0dh7UJAxA2ectK3Sw8B/+oOMYL RVLsavkLBbi6gOVXaBKSp5fhK9YJTPdPMiOfl67RsYMnf81O5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGot340qHjtj/SAMh/7RUy+I7HrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvMzQyYmUwZTQtNmIyNi0z MjI5LTg4MDgtMjg2ODEyYzNhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAr3im9+5zHMdX9O6TLcTeSBRuP+ZAtfejQReQaSgGPOZrHnbYtQr0Q HrQqee7scU5GJfLsBGZ94aioPV40cHnKjNyjvKLrhmvGagqXbIAiuUZI+9+b3Hok sj767+1w3nxyeKzVVrLPaFl+xrBifF20yZE/J42zn2rCx39dqCXSJCPiK9M3Ldf2 9XS6fXR7wiQPoXdqAr/7SkbTiV6S8P54Id5O1iGeAPu7AdxLzkzM/D0E8lxuoqBy CtqF3siffatXWaisrPAvekwIhGVK+q3u5e9y3sDXgrLlGopJseOCaUawNheVPPUn 3NbvETGOBFkTlssyeEn139VslDE3H+Sg -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:31 2026 by rpki-client