$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa File: d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa (raw, json) Hash identifier: YIVW0AUZUp+bw4TSLwYmaDNVN/hpiHYllbnMs5BzyT8= Subject key identifier: F2:8B:28:DE:23:47:7E:E0:5E:74:88:29:31:8B:41:9C:1E:9C:E6:A7 Certificate issuer: /CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Certificate serial: 010D0C9F4328584D59EAB140127EFA9F56906080 Authority key identifier: 5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 29 IP address blocks: 2604:b200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b1:40:12:7e:fa:9f:56:90:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=675593d5-5ec7-4ba7-9134-6761cde6b601 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=77d70243-365a-4d91-a5f1-e8ad3af2b5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:ad:27:08:6e:96:d2:0e:f2:f9:0a:40:ae: 93:08:ba:ef:d4:e8:70:d9:f6:0f:be:67:44:a2:92: 2e:c5:36:30:b6:e8:84:3e:b1:7f:40:80:1b:3e:ba: 3a:3a:c0:78:0d:25:c3:4e:a8:20:3c:be:fa:d5:62: 21:95:6a:f1:82:e4:9d:a6:75:0a:c9:92:1b:95:f8: ef:06:a6:14:9a:ad:fc:2c:80:b1:26:b4:2f:51:cb: ba:91:bf:ed:bc:83:6e:ce:b8:87:1e:a8:5d:19:50: fa:ef:14:35:6d:ed:55:a5:6b:4d:c0:a9:e8:c0:3f: 18:9b:fb:6a:41:95:83:58:25:43:15:e3:72:08:7b: 4d:6a:ed:75:5f:46:c6:2d:0b:3f:f1:c1:bc:37:e2: de:64:c5:1f:4d:c2:76:71:80:9a:3f:22:41:eb:96: e3:b1:b9:89:d6:15:fc:8c:28:33:c8:b7:5f:a2:7d: e5:92:6c:60:b1:fd:66:31:da:84:d0:ad:21:08:8c: cc:07:b2:61:57:65:ef:f3:eb:84:31:90:b3:49:74: b4:d1:6a:37:62:00:83:13:aa:9b:ad:21:44:e7:99: cd:54:9f:f8:3d:82:f7:61:20:12:b5:a0:08:b8:6d: 13:45:f6:56:f2:81:fc:2b:6d:97:ca:67:28:ef:9e: 7c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:28:DE:23:47:7E:E0:5E:74:88:29:31:8B:41:9C:1E:9C:E6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/d7af7fbc-69d1-3d52-9c1d-40c968ff258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601/675593d5-5ec7-4ba7-9134-6761cde6b601.crl X509v3 Authority Key Identifier: keyid:5A:29:B6:77:6F:8B:88:CB:8D:E2:0D:DA:80:10:D0:2F:E2:44:DA:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/675593d5-5ec7-4ba7-9134-6761cde6b601.cer sbgp-ipAddrBlock: critical IPv6: 2604:b200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c3:a4:bd:a4:6e:e0:14:8f:4d:78:a4:22:41:21:e4:ed:0c: 72:ba:4c:49:28:ba:66:c9:f7:d9:0a:b7:4d:a5:00:a7:47:93: 7f:a8:5f:30:9f:4a:c3:52:ad:43:c7:98:b4:00:cf:4d:b3:05: 20:37:f6:2f:b8:68:54:99:84:8e:31:99:f5:8b:13:d2:1d:f6: 1c:cb:56:e2:3b:4e:8c:fe:46:c1:a4:9a:71:53:bc:e6:34:bb: 55:5d:22:59:e9:4e:47:0c:53:05:9f:cc:89:6f:a1:ca:12:72: 63:22:58:cd:00:35:19:bc:88:9f:46:28:5f:1d:b4:61:c8:42: a7:a8:2a:ec:9a:b1:5a:40:fa:67:7a:0c:aa:2e:bd:5d:8c:ee: b3:79:ea:13:f4:7e:51:f9:47:10:b5:d7:b2:e6:b6:4c:94:89: 2a:70:7f:56:00:1e:77:bc:34:2e:ab:e5:80:a2:8b:3a:58:73: c8:7e:e1:db:86:8e:0f:15:c8:0c:24:bd:a7:72:2f:b1:af:0f: 53:b9:eb:2b:0e:0a:5b:bf:01:1b:9f:1e:f3:2a:d3:e2:73:d4: a5:05:02:32:b1:79:db:97:97:3b:87:9e:c1:c0:da:7a:f4:28: d3:c7:fc:31:d0:dd:d4:39:67:dd:a7:2d:72:8a:fb:d3:e2:5d: b6:2c:8d:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Z6rFAEn76n1aQYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc1NTkzZDUtNWVjNy00YmE3LTkxMzQtNjc2MWNkZTZi NjAxMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzdkNzAyNDMtMzY1YS00ZDkxLWE1ZjEtZThhZDNhZjJiNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3atJwhultIO8vkKQK6TCLrv1Ohw2fYPvmdE opIuxTYwtuiEPrF/QIAbPro6OsB4DSXDTqggPL761WIhlWrxguSdpnUKyZIblfjv BqYUmq38LICxJrQvUcu6kb/tvINuzriHHqhdGVD67xQ1be1VpWtNwKnowD8Ym/tq QZWDWCVDFeNyCHtNau11X0bGLQs/8cG8N+LeZMUfTcJ2cYCaPyJB65bjsbmJ1hX8 jCgzyLdfon3lkmxgsf1mMdqE0K0hCIzMB7JhV2Xv8+uEMZCzSXS00Wo3YgCDE6qb rSFE55nNVJ/4PYL3YSAStaAIuG0TRfZW8oH8K22Xymco75586QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPKLKN4jR37gXnSIKTGLQZwenOanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1 OTNkNS01ZWM3LTRiYTctOTEzNC02NzYxY2RlNmI2MDEvZDdhZjdmYmMtNjlkMS0z ZDUyLTljMWQtNDBjOTY4ZmYyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjc1NTkzZDUtNWVjNy00YmE3LTkx MzQtNjc2MWNkZTZiNjAxLzY3NTU5M2Q1LTVlYzctNGJhNy05MTM0LTY3NjFjZGU2 YjYwMS5jcmwwHwYDVR0jBBgwFoAUWim2d2+LiMuN4g3agBDQL+JE2sMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82NzU1OTNkNS01ZWM3LTRiYTctOTEzNC02NzYx Y2RlNmI2MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSyADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGw6S9pG7gFI9NeKQiQSHk7QxyukxJKLpmyffZCrdNpQCnR5N/qF8w n0rDUq1Dx5i0AM9NswUgN/YvuGhUmYSOMZn1ixPSHfYcy1biO06M/kbBpJpxU7zm NLtVXSJZ6U5HDFMFn8yJb6HKEnJjIljNADUZvIifRihfHbRhyEKnqCrsmrFaQPpn egyqLr1djO6zeeoT9H5R+UcQtdey5rZMlIkqcH9WAB53vDQuq+WAoos6WHPIfuHb ho4PFcgMJL2nci+xrw9TuesrDgpbvwEbnx7zKtPic9SlBQIysXnbl5c7h57BwNp6 9CjTx/wx0N3UOWfdpy1yivvT4l22LI1t -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:09 2026 by rpki-client