$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa File: 7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa (raw, json) Hash identifier: u1cVwRbYJUe70w/TnTv7jZmtAHrU8B27osEq2dC+hUA= Subject key identifier: 8F:36:A8:52:CF:79:06:D3:97:A5:29:32:CA:5E:3C:B0:BE:10:5C:D1 Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584D2A74E012ED1E0746549A1000 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 13356 IP address blocks: 2604:5ec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e0:12:ed:1e:07:46:54:9a:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d82f568d-a332-4ac7-ab7f-f2d038b2c55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:25:38:65:f5:b9:4c:12:e5:fb:bc:e5:9c: 1d:bf:bd:45:d8:f2:5d:9e:e3:90:aa:81:c4:53:07: 3c:73:7f:d7:98:66:2e:c0:47:18:2b:33:05:31:88: 61:f1:0b:22:50:bb:82:c1:a7:17:29:ad:68:67:7d: e9:c8:59:39:76:f6:57:90:1e:ae:ff:62:6d:31:8c: 7a:ea:2b:ef:49:8d:e6:92:9e:2f:49:dc:52:aa:0f: 5c:10:51:ef:80:a2:3d:9e:6d:06:4e:f0:df:1d:d3: 47:99:a2:4d:a4:8e:67:be:9b:82:1a:d1:db:3e:95: 1c:38:af:6f:94:3c:16:97:18:a4:66:8f:56:62:84: f1:3e:20:44:fe:1a:36:a3:c5:87:5e:7a:e0:db:e4: 63:f1:f6:8b:96:16:79:0d:16:f4:92:ea:5c:07:3f: 40:0d:7c:0e:95:41:65:c1:ed:3a:9b:06:89:d6:f0: 95:28:51:a9:d0:eb:38:58:7a:c8:26:99:01:cb:63: 41:bc:50:55:e3:b6:6b:ef:6e:69:e8:ce:b4:48:e9: c5:b1:46:84:46:06:de:d1:c4:d7:79:23:a6:1f:72: fe:3a:00:52:5b:06:80:dc:42:cf:73:cd:9e:5f:d2: 9b:e5:d6:32:28:8d:2d:4e:90:58:8e:94:3d:10:40: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:36:A8:52:CF:79:06:D3:97:A5:29:32:CA:5E:3C:B0:BE:10:5C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9a:f2:9f:44:8f:d0:dd:55:80:1a:c2:67:b8:68:f8:b6:d4: 2d:89:68:5d:7b:84:d3:6d:f2:a6:ce:18:26:ae:0e:be:d3:01: 0b:86:fa:6c:b0:55:11:75:77:82:fb:7f:08:16:e2:75:66:89: 2c:29:e7:b4:af:ad:fc:8c:20:e9:55:40:28:3e:82:cb:f9:d9: bf:82:5e:a0:ed:ea:66:27:da:45:d9:e2:2e:73:74:90:89:cf: 72:84:87:f9:19:62:d8:30:93:4c:c3:2c:78:6b:ad:ae:8d:5b: 8c:b9:00:bf:7c:7f:18:90:e4:54:93:ec:44:77:25:ac:b9:53: 5e:da:8a:01:ee:22:ef:80:3e:96:4d:36:85:4d:8c:8d:7d:8b: f9:7c:69:fb:82:66:58:e2:e4:8f:43:bc:e7:77:3d:e3:69:6e: 4c:68:61:78:3b:a8:f6:45:dd:73:bf:bc:68:41:95:c2:eb:d5: d7:20:8d:26:a0:f9:a0:b2:58:69:30:23:54:ef:f7:9c:97:3b: 46:27:5a:e0:4a:df:ff:08:87:7a:76:78:98:a6:b7:da:88:93: 36:c8:26:38:79:e1:db:26:a5:a2:fa:bc:7e:81:33:3d:0a:d5: 38:56:79:dd:c1:24:d4:53:d3:bc:99:13:49:5a:e8:d6:ce:66: ae:56:c4:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0qdOAS7R4HRlSaEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDgyZjU2OGQtYTMzMi00YWM3LWFiN2YtZjJkMDM4YjJjNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNQlOGX1uUwS5fu85Zwdv71F2PJdnuOQqoHE Uwc8c3/XmGYuwEcYKzMFMYhh8QsiULuCwacXKa1oZ33pyFk5dvZXkB6u/2JtMYx6 6ivvSY3mkp4vSdxSqg9cEFHvgKI9nm0GTvDfHdNHmaJNpI5nvpuCGtHbPpUcOK9v lDwWlxikZo9WYoTxPiBE/ho2o8WHXnrg2+Rj8faLlhZ5DRb0kupcBz9ADXwOlUFl we06mwaJ1vCVKFGp0Os4WHrIJpkBy2NBvFBV47Zr725p6M60SOnFsUaERgbe0cTX eSOmH3L+OgBSWwaA3ELPc82eX9Kb5dYyKI0tTpBYjpQ9EEBfnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI82qFLPeQbTl6UpMspePLC+EFzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvN2Y2MzBkMmUtZDkxMi0z OTEyLTlkMmYtOGY3NDdhNjdhNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZmvKfRI/Q3VWAGsJnuGj4ttQtiWhde4TTbfKmzhgmrg6+0wELhvps sFURdXeC+38IFuJ1ZoksKee0r638jCDpVUAoPoLL+dm/gl6g7epmJ9pF2eIuc3SQ ic9yhIf5GWLYMJNMwyx4a62ujVuMuQC/fH8YkORUk+xEdyWsuVNe2ooB7iLvgD6W TTaFTYyNfYv5fGn7gmZY4uSPQ7zndz3jaW5MaGF4O6j2Rd1zv7xoQZXC69XXII0m oPmgslhpMCNU7/eclztGJ1rgSt//CId6dniYprfaiJM2yCY4eeHbJqWi+rx+gTM9 CtU4VnndwSTUU9O8mRNJWujWzmauVsRg -----END CERTIFICATE-----Generated at Sat Mar 28 13:23:40 2026 by rpki-client