$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa File: 87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa (raw, json) Hash identifier: PkkBvAXav1YMaT5AdIjkBDF/8E/CtpHWlosdxlwBZ7U= Subject key identifier: 18:BA:89:36:5A:59:36:41:78:6F:FF:C3:D5:EB:80:70:3C:09:22:1E Certificate issuer: /CN=86375a98-0294-4970-a5b8-3fec0469382c Certificate serial: 010D0C9F4328584D39CF82B181A38EEB1B5016C0 Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 3783 IP address blocks: 2607:3540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:82:b1:81:a3:8e:eb:1b:50:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=12dd1371-59d3-4462-9b27-58fdf965ea39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:77:d7:5e:77:ec:9f:46:19:0f:db:73:2b:14: a1:86:87:bf:1d:19:04:6d:3d:c3:0b:c9:16:b1:35: 8f:70:14:c9:67:97:73:fe:18:65:46:78:5f:5b:6b: eb:8d:dc:fa:62:ca:61:c0:27:47:4c:30:21:6f:91: 9e:eb:2d:7f:cf:a9:3c:1e:a6:5f:b7:85:31:40:7e: 3a:d1:b8:0b:76:cb:e6:33:96:95:46:81:ec:74:e3: f6:60:ef:ad:aa:9f:20:f6:c5:74:00:62:3d:d6:0b: 4b:2e:45:e8:3a:27:02:68:04:07:01:36:9b:07:0e: 5e:fc:4f:90:35:46:2e:fd:91:ea:12:f8:55:7a:e6: 02:7e:8c:3d:57:35:52:33:79:17:21:4d:b2:92:b9: d5:29:26:ea:c4:ac:c8:86:65:88:22:05:ea:f6:a2: 97:36:34:9b:60:fb:3e:41:09:34:87:18:1b:2b:38: 49:1d:9e:32:40:2c:d8:3f:68:f4:80:5c:cf:ed:66: b5:35:ab:66:2b:57:2b:20:be:71:21:97:32:cb:64: 75:12:77:44:a6:73:f2:48:57:dd:40:87:de:f7:7d: e0:0b:76:6a:72:e6:67:74:79:17:29:ae:0c:03:ba: dc:9e:13:c4:72:99:0d:b8:de:6c:91:67:8c:75:4f: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:89:36:5A:59:36:41:78:6F:FF:C3:D5:EB:80:70:3C:09:22:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl X509v3 Authority Key Identifier: keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer sbgp-ipAddrBlock: critical IPv6: 2607:3540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:45:1c:7b:49:e2:fe:5d:1f:47:ca:a1:5a:7f:bc:05:de:56: 92:fc:d2:64:ea:c0:92:b0:9a:77:82:12:91:ec:24:37:15:c2: e3:43:e1:98:b1:86:aa:08:15:41:bf:fe:f9:fd:7f:99:57:9e: 03:af:cf:4b:aa:1b:be:93:a2:40:18:be:33:c1:74:d8:de:82: d8:c3:79:e0:0e:f7:d8:bf:b9:98:47:41:d3:a7:6a:b2:3f:35: 04:02:55:ed:e6:8d:fa:9e:00:ea:fa:47:81:8f:6c:b4:2f:6a: 18:58:40:3c:86:c5:56:41:58:bf:6d:7a:38:d5:b1:96:b3:40: 02:f8:6c:cd:c6:86:3f:9e:88:e7:66:49:20:90:a1:12:a2:96: 2e:3b:63:45:fa:93:f5:bc:d7:c4:e5:ff:21:8b:41:f0:eb:9f: 37:d8:0a:55:a6:01:48:7b:88:ac:1b:02:1c:ab:f8:65:e1:6e: 9f:e4:f8:d7:3f:0a:ed:af:75:35:e3:1e:c6:5c:9a:c9:a4:68: 59:82:f1:e0:8e:d8:57:81:f9:3f:f4:ad:54:48:fe:1f:00:7c: 7b:bc:4d:83:b9:da:98:0e:09:f2:33:12:2b:1e:81:d9:7f:fb: b1:34:56:17:8b:cf:c7:b2:29:9c:a3:aa:b7:ac:0f:48:24:a9: 4a:78:fe:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE05z4KxgaOO6xtQFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzNzVhOTgtMDI5NC00OTcwLWE1YjgtM2ZlYzA0Njkz ODJjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MTJkZDEzNzEtNTlkMy00NDYyLTliMjctNThmZGY5NjVlYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXfXXnfsn0YZD9tzKxShhoe/HRkEbT3DC8kW sTWPcBTJZ5dz/hhlRnhfW2vrjdz6YsphwCdHTDAhb5Ge6y1/z6k8HqZft4UxQH46 0bgLdsvmM5aVRoHsdOP2YO+tqp8g9sV0AGI91gtLLkXoOicCaAQHATabBw5e/E+Q NUYu/ZHqEvhVeuYCfow9VzVSM3kXIU2ykrnVKSbqxKzIhmWIIgXq9qKXNjSbYPs+ QQk0hxgbKzhJHZ4yQCzYP2j0gFzP7Wa1NatmK1crIL5xIZcyy2R1EndEpnPySFfd QIfe933gC3ZqcuZndHkXKa4MA7rcnhPEcpkNuN5skWeMdU8V6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBi6iTZaWTZBeG//w9XrgHA8CSIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NjM3 NWE5OC0wMjk0LTQ5NzAtYTViOC0zZmVjMDQ2OTM4MmMvODdkOGRiODItNjEwZS0z Yjk3LWE2YjktZDhlNWQ0ZjVhNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODYzNzVhOTgtMDI5NC00OTcwLWE1 YjgtM2ZlYzA0NjkzODJjLzg2Mzc1YTk4LTAyOTQtNDk3MC1hNWI4LTNmZWMwNDY5 MzgyYy5jcmwwHwYDVR0jBBgwFoAUSef92bELoj16dZ4IOa03utMYAUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NjM3NWE5OC0wMjk0LTQ5NzAtYTViOC0zZmVj MDQ2OTM4MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbRRx7SeL+XR9HyqFaf7wF3laS/NJk6sCSsJp3ghKR7CQ3FcLjQ+GY sYaqCBVBv/75/X+ZV54Dr89Lqhu+k6JAGL4zwXTY3oLYw3ngDvfYv7mYR0HTp2qy PzUEAlXt5o36ngDq+keBj2y0L2oYWEA8hsVWQVi/bXo41bGWs0AC+GzNxoY/nojn ZkkgkKESopYuO2NF+pP1vNfE5f8hi0Hw65832ApVpgFIe4isGwIcq/hl4W6f5PjX Pwrtr3U14x7GXJrJpGhZgvHgjthXgfk/9K1USP4fAHx7vE2DudqYDgnyMxIrHoHZ f/uxNFYXi8/Hsimco6q3rA9IJKlKeP5p -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:45 2026 by rpki-client