$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa File: 1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json) Hash identifier: J3Lp77w42i1OOES+PvS+IQHrx8HlNB2ry79fI3MZ94A= Subject key identifier: D1:83:83:90:87:31:63:6C:AF:E0:8E:BA:57:A5:95:C0:23:B7:25:B4 Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Certificate serial: 010D0C9F4328584D0647ACD70FD1BA13B45994C0 Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 897 IP address blocks: 2620:ab:a000::/48 maxlen: 48 2620:ab:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ac:d7:0f:d1:ba:13:b4:59:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=989ff36c-1212-40fe-b65c-7f98577f7481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:83:a7:fc:24:65:eb:05:9f:f3:48:f0:bc: e3:1b:58:cf:d6:d4:3f:dd:9a:8f:64:55:2f:0e:51: 9b:3e:b4:be:23:3b:9c:47:f2:cc:9f:80:04:50:a7: 80:79:31:35:91:34:f8:04:32:ec:fe:5a:a3:a4:e7: d4:a7:ff:53:b2:5a:82:b6:a8:ed:8d:b8:ea:1a:17: 90:50:c8:da:27:59:ca:29:d6:9c:e1:ed:d5:55:76: 4b:46:5b:b7:f6:09:f3:cc:b4:22:cc:6b:ef:de:26: d1:c9:12:8a:26:89:f0:e7:35:57:f6:23:41:ef:27: 61:b0:04:6c:ca:bd:97:8a:35:89:60:01:b1:63:a2: 2b:01:d9:f8:50:97:c7:90:0f:90:d8:f7:10:2d:7f: 6d:82:00:f4:24:6b:c3:4c:d4:17:14:9c:e8:64:8f: 8f:ad:ad:48:81:88:44:4d:a7:df:cd:02:30:49:db: 65:ed:b0:a8:55:6a:1e:77:9d:cd:03:02:c0:cd:40: 08:4a:85:c5:73:27:be:ce:c5:ac:51:a6:89:ff:97: 60:25:5f:4d:d6:a9:96:75:1d:a0:11:5e:a2:24:c5: e2:a1:97:46:10:ef:75:02:98:95:e0:88:95:3a:27: 20:db:ff:3f:6c:fb:e4:3b:67:80:3b:cd:0b:11:1f: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:83:90:87:31:63:6C:AF:E0:8E:BA:57:A5:95:C0:23:B7:25:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl X509v3 Authority Key Identifier: keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer sbgp-ipAddrBlock: critical IPv6: 2620:ab:a000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:35:8b:0e:d2:b3:54:ee:0c:dd:a6:0d:83:b3:f7:72:82: e3:8d:00:e2:05:b6:50:b5:62:ca:3f:36:bd:8e:2d:30:98:95: 31:56:3a:b5:e2:e6:1f:ed:42:79:9f:e5:4d:f7:8f:d2:bd:65: 06:e7:9c:6d:57:7f:28:41:3a:c7:9c:57:4c:ca:a3:cc:06:f6: 50:26:16:dc:56:37:44:04:69:1a:64:02:bf:08:5c:99:a3:7e: 24:36:b3:17:09:8a:79:fc:53:50:f9:be:32:e0:36:e0:d4:4c: 1e:3a:d1:fd:14:f6:26:08:08:ed:7f:43:8b:3e:39:89:55:4a: 21:ba:a6:81:e9:55:5d:18:3e:fe:dc:2a:30:dc:c0:f5:e2:4e: 98:f8:17:b0:f0:d4:a9:b3:c3:ac:bc:7f:1c:5d:e7:df:d2:0f: 47:42:85:76:9f:31:ac:a9:04:f0:d7:ce:d0:56:df:06:7f:52: cf:ae:48:7f:9d:5b:8e:38:0b:a4:48:74:5e:ca:26:a2:db:a5: 17:78:2e:f0:f0:f9:3d:94:fd:43:38:55:1c:42:58:c9:6b:93: 05:a6:8a:9c:df:5a:88:38:11:e3:a4:b1:f1:82:cd:d0:c6:42: ee:86:58:19:56:fc:24:30:0b:48:09:ff:22:59:18:24:7f:f7: fb:c3:69:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR6zXD9G6E7RZlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi ZmYxMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTg5ZmYzNmMtMTIxMi00MGZlLWI2NWMtN2Y5ODU3N2Y3NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3WDp/wkZesFn/NI8LzjG1jP1tQ/3ZqPZFUv DlGbPrS+IzucR/LMn4AEUKeAeTE1kTT4BDLs/lqjpOfUp/9TslqCtqjtjbjqGheQ UMjaJ1nKKdac4e3VVXZLRlu39gnzzLQizGvv3ibRyRKKJonw5zVX9iNB7ydhsARs yr2XijWJYAGxY6IrAdn4UJfHkA+Q2PcQLX9tggD0JGvDTNQXFJzoZI+Pra1IgYhE TaffzQIwSdtl7bCoVWoed53NAwLAzUAISoXFcye+zsWsUaaJ/5dgJV9N1qmWdR2g EV6iJMXioZdGEO91ApiV4IiVOicg2/8/bPvkO2eAO80LER8tQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGDg5CHMWNsr+COulellcAjtyW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2 YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvMWIxMjM4ZWItZTJiOS0z MTM2LWIzMmYtNWIzMTAwNmNjOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2 MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0 YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAakNYsO0rNU7gzdpg2Ds/dyguONAOIFtlC1Yso/Nr2OLTCYlTFW OrXi5h/tQnmf5U33j9K9ZQbnnG1XfyhBOsecV0zKo8wG9lAmFtxWN0QEaRpkAr8I XJmjfiQ2sxcJinn8U1D5vjLgNuDUTB460f0U9iYICO1/Q4s+OYlVSiG6poHpVV0Y Pv7cKjDcwPXiTpj4F7Dw1Kmzw6y8fxxd59/SD0dChXafMaypBPDXztBW3wZ/Us+u SH+dW444C6RIdF7KJqLbpRd4LvDw+T2U/UM4VRxCWMlrkwWmipzfWog4EeOksfGC zdDGQu6GWBlW/CQwC0gJ/yJZGCR/9/vDaSY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:17 2026 by rpki-client