$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa File: b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json) Hash identifier: xHeo4oGarY3k11ic3YqE8Zr8Q4RMyrY6FZ5TNmkdrmQ= Subject key identifier: 5E:F4:2A:B2:16:0B:0A:B2:77:5E:05:00:34:66:85:5A:2F:9E:84:E5 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D3DFFB12A011B81C827EBD9C0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 13807 IP address blocks: 2607:fdf0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b1:2a:01:1b:81:c8:27:eb:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=63c7a8aa-1df1-4a8a-89d0-30cdfad4a256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:77:aa:78:5b:22:5b:73:37:c2:fc:a6:9b: 24:e1:7d:d7:55:55:e7:1c:34:bc:21:14:df:0b:19: f2:39:cf:3e:27:6a:35:a7:61:ed:03:26:c0:47:bd: 55:60:7d:a6:60:52:c2:37:16:a0:7f:7c:05:03:ff: 02:be:a9:4d:34:aa:f4:7e:17:3e:2f:c2:78:f2:d7: c6:a2:96:f0:2a:15:6d:c0:d3:81:66:56:bc:c9:9e: ab:00:01:30:9d:16:e3:d8:15:46:6a:d6:de:58:12: 1f:e5:f6:df:2d:fa:eb:a4:4e:d4:25:cf:44:13:e9: ed:a7:16:be:97:fb:fb:9b:eb:d4:01:67:d0:6a:a3: 6c:bb:5e:00:84:52:c0:cc:55:cb:32:c9:59:e2:37: fa:90:8d:fd:96:5b:34:5c:ae:2f:c0:bc:3e:ac:9f: 57:c5:7b:40:28:d8:a4:81:52:35:1a:2f:77:87:f4: e7:58:09:ee:3b:e4:db:c7:a9:a6:2e:63:7f:2e:e7: 36:8c:1e:c8:aa:8b:14:01:94:33:54:d3:44:e4:3d: 31:08:b5:f9:37:14:eb:d2:16:ba:08:60:76:9e:8b: 8c:ef:e8:ce:73:f4:a4:99:27:40:c0:30:4b:23:23: 3c:0a:5b:95:1a:86:b3:8f:a4:1c:84:da:50:11:ed: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:2A:B2:16:0B:0A:B2:77:5E:05:00:34:66:85:5A:2F:9E:84:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2607:fdf0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:71:07:16:03:1a:96:92:be:b8:25:f7:71:cb:6c:29:75:b8: 66:05:52:35:ae:ef:7f:3d:60:83:e9:24:70:b5:36:93:54:a0: e7:9e:61:1c:56:a7:e3:35:5d:40:37:8d:d7:93:2a:70:5d:b3: 32:84:22:c7:32:78:f1:57:68:1d:f0:7a:d1:5e:23:c5:41:5b: 4e:97:c9:e3:9d:32:ff:41:e9:21:01:12:a6:cb:37:bf:f7:f7: 06:ee:a5:ef:d0:fe:39:fb:b3:49:7a:79:ce:a7:a4:e3:f3:7f: e7:0d:b9:fa:a1:c5:3d:94:a6:78:21:c9:31:2a:71:23:0c:a5: 45:e9:8e:ac:5d:cf:3e:e0:70:69:32:7b:f6:7d:af:76:d7:15: 82:62:50:0c:7c:7c:33:e5:2a:63:be:69:73:3a:83:1c:1c:2f: 3d:b9:d6:31:35:94:7e:30:0f:81:3e:7f:46:30:e0:fb:c2:1a: 43:60:b0:c6:74:ea:f3:46:82:95:d0:27:4e:0c:7f:4f:b3:bc: 5f:dd:f8:3c:1a:50:6c:7a:f9:c6:6c:3a:96:4f:25:cc:3b:73: d9:3c:e1:ef:16:3b:a0:4e:08:d3:67:39:8d:fd:8e:80:a3:85: d8:aa:29:13:53:44:27:03:bd:9a:e4:94:f5:1d:d9:07:ed:a9: 52:62:a2:2b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/7EqARuByCfr2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjNjN2E4YWEtMWRmMS00YThhLTg5ZDAtMzBjZGZhZDRhMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBl3qnhbIltzN8L8ppsk4X3XVVXnHDS8IRTf CxnyOc8+J2o1p2HtAybAR71VYH2mYFLCNxagf3wFA/8CvqlNNKr0fhc+L8J48tfG opbwKhVtwNOBZla8yZ6rAAEwnRbj2BVGatbeWBIf5fbfLfrrpE7UJc9EE+ntpxa+ l/v7m+vUAWfQaqNsu14AhFLAzFXLMslZ4jf6kI39lls0XK4vwLw+rJ9XxXtAKNik gVI1Gi93h/TnWAnuO+Tbx6mmLmN/Luc2jB7IqosUAZQzVNNE5D0xCLX5NxTr0ha6 CGB2nouM7+jOc/SkmSdAwDBLIyM8CluVGoazj6QchNpQEe3R6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF70KrIWCwqyd14FADRmhVovnoTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYjUxZTAxY2MtOWUxNy0z MWMwLTkzMTEtYWY4ZTFlMGUyYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf98DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtcQcWAxqWkr64Jfdxy2wpdbhmBVI1ru9/PWCD6SRwtTaTVKDnnmEc VqfjNV1AN43XkypwXbMyhCLHMnjxV2gd8HrRXiPFQVtOl8njnTL/QekhARKmyze/ 9/cG7qXv0P45+7NJennOp6Tj83/nDbn6ocU9lKZ4IckxKnEjDKVF6Y6sXc8+4HBp Mnv2fa921xWCYlAMfHwz5SpjvmlzOoMcHC89udYxNZR+MA+BPn9GMOD7whpDYLDG dOrzRoKV0CdODH9Ps7xf3fg8GlBsevnGbDqWTyXMO3PZPOHvFjugTgjTZzmN/Y6A o4XYqikTU0QnA72a5JT1HdkH7alSYqIr -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:42 2026 by rpki-client