$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/d8afb246-c7bc-3470-94c1-0059d5af1af6.roa File: d8afb246-c7bc-3470-94c1-0059d5af1af6.roa (raw, json) Hash identifier: nVTj+XQUDuqeAhmjULNhDbZsKJmgxs30UVTrUnbTtWk= Subject key identifier: BC:7B:60:FC:F6:09:50:71:5C:F0:86:6C:67:0D:E4:69:43:8C:05:9D Certificate issuer: /CN=5ad08772-ee15-4587-860d-5bbe7077c592 Certificate serial: 010D0C9F4328584D24E11D76710647CD2DDC5080 Authority key identifier: 8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/d8afb246-c7bc-3470-94c1-0059d5af1af6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 20473 IP address blocks: 2620:13d:2030::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1d:76:71:06:47:cd:2d:dc:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad08772-ee15-4587-860d-5bbe7077c592 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ff88600c-1dda-4442-a23d-4c8a4b0144a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2e:4a:40:2f:63:e6:63:49:ed:8c:81:5f:a4: 43:a4:98:e6:dd:75:82:d1:ae:08:90:1d:2e:8b:51: 93:a4:dc:00:09:f9:d3:9e:ef:af:0a:42:05:2f:71: 18:fb:cc:b1:65:fc:78:4f:60:08:14:84:a8:02:5e: 7b:da:38:f1:27:c5:c4:b7:d2:43:10:20:6d:0e:62: b1:e4:c2:02:1e:f6:8d:9f:a5:22:69:20:f4:97:86: 34:d2:f7:c8:41:60:ec:c4:22:9a:43:bd:a5:e7:c5: 37:c0:fe:ba:8a:5a:31:c1:f3:c6:7f:8f:17:e8:a5: 3c:97:a0:29:81:35:d4:b0:c9:44:a9:e0:40:33:25: 6f:c2:b7:62:7f:45:a9:47:7a:aa:1a:a1:ad:4d:2b: f7:3b:5f:98:a6:48:23:da:fc:5e:51:e4:f7:db:40: aa:b8:51:cf:14:88:b9:57:3f:2f:13:85:2f:ea:55: 53:48:61:7b:08:a4:da:b2:ee:4c:98:c4:d5:08:27: 22:88:10:4d:e3:29:4f:b0:c5:b7:ed:87:07:33:99: 59:59:6d:ea:ed:b4:c2:2d:87:63:9b:af:d9:59:e0: 17:16:73:0f:82:5e:9e:ee:77:e6:d1:62:28:bf:2e: 50:d6:52:f6:ec:90:c5:5a:f0:1f:4d:3b:1d:3b:88: 61:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:60:FC:F6:09:50:71:5C:F0:86:6C:67:0D:E4:69:43:8C:05:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/d8afb246-c7bc-3470-94c1-0059d5af1af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl X509v3 Authority Key Identifier: keyid:8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer sbgp-ipAddrBlock: critical IPv6: 2620:13d:2030::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e5:2e:bc:27:27:2f:88:8f:67:ac:e7:c2:3b:2f:e4:10:8e: 50:ce:24:9c:a8:14:57:6e:d0:e2:76:a3:20:dc:1e:2c:86:22: a0:7a:a2:08:47:ff:73:35:70:ee:09:66:ff:87:24:04:68:7b: 36:c2:77:95:2e:d2:c9:c3:8a:df:1f:f9:16:4f:40:18:af:43: ef:bc:c3:f7:bb:ce:b4:05:7e:87:02:60:a4:31:df:e4:63:18: a3:90:99:2e:dc:80:ea:6f:79:fa:63:86:f2:85:83:7c:80:71: 78:10:4f:42:1d:df:4b:5a:12:25:0a:29:e1:3b:5c:5e:b1:fb: 2a:bc:ef:cf:d0:9c:ee:51:8b:e6:b9:c2:ff:e2:a1:14:34:63: fd:94:d3:6f:bd:1e:9f:b3:fa:29:37:a2:cb:ce:74:f4:cc:0e: a7:04:a1:07:0d:d2:a7:fb:cb:e9:d5:ce:f9:7b:2b:cc:7f:6c: 37:a6:ab:01:49:04:37:e9:89:fc:a9:f4:5e:43:0d:88:90:11: e5:da:af:e2:31:4a:b7:96:48:a6:d1:b6:15:8d:27:48:eb:3d: 45:08:33:f9:4b:c0:f0:30:6a:c6:7d:82:0d:49:73:8b:03:10: 12:01:c7:c9:24:f9:66:c9:4c:c9:81:41:59:fc:a7:69:0e:67: c0:b9:c8:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4R12cQZHzS3cUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg3NzItZWUxNS00NTg3LTg2MGQtNWJiZTcwNzdj NTkyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmY4ODYwMGMtMWRkYS00NDQyLWEyM2QtNGM4YTRiMDE0NGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC5KQC9j5mNJ7YyBX6RDpJjm3XWC0a4IkB0u i1GTpNwACfnTnu+vCkIFL3EY+8yxZfx4T2AIFISoAl572jjxJ8XEt9JDECBtDmKx 5MICHvaNn6UiaSD0l4Y00vfIQWDsxCKaQ72l58U3wP66iloxwfPGf48X6KU8l6Ap gTXUsMlEqeBAMyVvwrdif0WpR3qqGqGtTSv3O1+Ypkgj2vxeUeT320CquFHPFIi5 Vz8vE4Uv6lVTSGF7CKTasu5MmMTVCCciiBBN4ylPsMW37YcHM5lZWW3q7bTCLYdj m6/ZWeAXFnMPgl6e7nfm0WIovy5Q1lL27JDFWvAfTTsdO4hhjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLx7YPz2CVBxXPCGbGcN5GlDjAWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWQw ODc3Mi1lZTE1LTQ1ODctODYwZC01YmJlNzA3N2M1OTIvZDhhZmIyNDYtYzdiYy0z NDcwLTk0YzEtMDA1OWQ1YWYxYWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFkMDg3NzItZWUxNS00NTg3LTg2 MGQtNWJiZTcwNzdjNTkyLzVhZDA4NzcyLWVlMTUtNDU4Ny04NjBkLTViYmU3MDc3 YzU5Mi5jcmwwHwYDVR0jBBgwFoAUjhrkDzJr93kBGLsu5YsmLq9OyI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YWQwODc3Mi1lZTE1LTQ1ODctODYwZC01YmJl NzA3N2M1OTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABPSAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjlLrwnJy+Ij2es58I7L+QQjlDOJJyoFFdu0OJ2oyDcHiyGIqB6 oghH/3M1cO4JZv+HJARoezbCd5Uu0snDit8f+RZPQBivQ++8w/e7zrQFfocCYKQx 3+RjGKOQmS7cgOpvefpjhvKFg3yAcXgQT0Id30taEiUKKeE7XF6x+yq878/QnO5R i+a5wv/ioRQ0Y/2U02+9Hp+z+ik3osvOdPTMDqcEoQcN0qf7y+nVzvl7K8x/bDem qwFJBDfpifyp9F5DDYiQEeXar+IxSreWSKbRthWNJ0jrPUUIM/lLwPAwasZ9gg1J c4sDEBIBx8kk+WbJTMmBQVn8p2kOZ8C5yPc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:13 2026 by rpki-client