$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/3585bafd-6d40-32f2-a6a4-ce56a687d76f.roa File: 3585bafd-6d40-32f2-a6a4-ce56a687d76f.roa (raw, json) Hash identifier: pNq5L4LsTHZbYGJqs0vo38sE9tO9RuWO1R/5afMJ/Ek= Subject key identifier: 84:BA:43:B1:3E:FB:F8:29:CE:95:44:B8:89:CC:64:F0:F8:1D:07:EE Certificate issuer: /CN=c6f8b9a1-4e03-4169-9de2-09a23bd91522 Certificate serial: 010D0C9F4328584D67DFAF83ED3B4AB8462C0B00 Authority key identifier: FF:E4:A2:4B:10:2A:EA:54:1D:19:4B:F0:3E:75:A5:9E:11:D5:88:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/3585bafd-6d40-32f2-a6a4-ce56a687d76f.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 401904 IP address blocks: 2620:db:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/c6f8b9a1-4e03-4169-9de2-09a23bd91522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/c6f8b9a1-4e03-4169-9de2-09a23bd91522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:af:83:ed:3b:4a:b8:46:2c:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f8b9a1-4e03-4169-9de2-09a23bd91522 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=efb50ccb-dfa3-44ae-b09a-467cb0923150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:42:e6:4a:da:e1:f9:2d:02:07:f1:95:a2: 93:0a:b4:ab:d1:1f:ff:cd:f8:21:1e:65:96:e8:98: 56:3c:a6:71:55:01:f4:5a:c2:42:42:99:e7:2a:56: 32:39:4e:ed:33:40:dd:2e:14:4e:75:b7:8c:36:b2: 96:3d:95:2a:71:ea:75:c9:55:7d:5a:fe:62:c3:07: 77:6b:cf:03:e1:3f:95:c2:e5:d2:d5:57:fc:88:2b: cc:d5:9c:ec:ba:67:b1:90:61:19:27:4d:c7:c9:46: 46:4e:4a:ab:75:4c:f8:88:df:ed:30:0d:2a:e2:67: be:4d:8f:a8:09:d2:fe:0a:82:f0:bd:d8:6f:85:74: d3:a8:b9:17:5f:4f:f4:9a:28:83:d5:de:da:af:19: de:f1:f5:d9:3a:f9:3b:f0:47:7e:e8:2a:74:f8:6c: 31:f4:af:d5:e4:f8:ad:c3:b7:af:4c:5c:0b:ca:e8: d9:84:b1:62:ff:58:75:35:42:6b:72:09:74:11:c7: b7:e4:ff:17:e7:50:20:62:5f:08:6a:18:24:82:ec: c8:4b:69:5c:39:70:64:7a:ed:12:c3:f7:ed:39:4d: 15:7f:6a:3e:28:d2:50:69:0a:eb:14:a3:1b:1b:ce: cb:01:52:2f:96:2b:d7:6d:01:84:97:d6:17:2a:04: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:43:B1:3E:FB:F8:29:CE:95:44:B8:89:CC:64:F0:F8:1D:07:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/3585bafd-6d40-32f2-a6a4-ce56a687d76f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522/c6f8b9a1-4e03-4169-9de2-09a23bd91522.crl X509v3 Authority Key Identifier: keyid:FF:E4:A2:4B:10:2A:EA:54:1D:19:4B:F0:3E:75:A5:9E:11:D5:88:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c6f8b9a1-4e03-4169-9de2-09a23bd91522.cer sbgp-ipAddrBlock: critical IPv6: 2620:db:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7a:b5:9b:4c:63:ab:96:82:1b:4a:2a:7a:61:90:de:ed:26: 1c:e1:c6:35:f5:da:e1:02:b0:b1:ee:84:58:06:d0:bc:bd:9f: 87:eb:12:dc:58:7f:56:60:00:61:fe:e4:9c:42:be:61:e9:95: 31:84:9a:06:8a:40:0b:a5:c3:58:9f:b5:d7:b0:36:54:ca:d6: b6:76:48:6f:4d:9d:87:a8:72:b4:ad:77:74:2e:01:58:c0:ef: 25:cb:92:75:0d:a3:53:34:33:af:e7:45:c7:80:e5:47:18:c1: 39:05:30:5a:d9:58:38:7e:4d:1f:47:99:1a:a6:bd:c5:c5:cb: 5d:e2:4d:b3:69:1f:f6:17:e3:e2:f6:aa:0d:c5:25:14:d8:74: fc:69:3e:88:ff:0a:17:ff:6d:ec:89:dd:ce:64:00:f0:e6:ae: 49:d4:8a:e9:ae:ef:78:18:2c:ec:6f:d2:18:48:44:4e:68:5b: bc:90:b8:e8:9d:b1:9e:50:08:db:3f:db:e3:a1:aa:d5:e4:f4: cd:8f:51:4a:e9:31:a3:2b:b1:03:a2:8e:e0:b9:2d:fd:e2:e9: a4:ed:23:94:19:7f:ef:ad:28:28:78:60:25:17:9f:12:7f:c6: 80:42:3e:24:84:f5:d9:6e:b8:d1:f8:35:c0:3a:39:29:d1:b0: 62:44:b7:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n36+D7TtKuEYsCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZmOGI5YTEtNGUwMy00MTY5LTlkZTItMDlhMjNiZDkx NTIyMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZWZiNTBjY2ItZGZhMy00NGFlLWIwOWEtNDY3Y2IwOTIzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapC5kra4fktAgfxlaKTCrSr0R//zfghHmWW 6JhWPKZxVQH0WsJCQpnnKlYyOU7tM0DdLhROdbeMNrKWPZUqcep1yVV9Wv5iwwd3 a88D4T+VwuXS1Vf8iCvM1ZzsumexkGEZJ03HyUZGTkqrdUz4iN/tMA0q4me+TY+o CdL+CoLwvdhvhXTTqLkXX0/0miiD1d7arxne8fXZOvk78Ed+6Cp0+Gwx9K/V5Pit w7evTFwLyujZhLFi/1h1NUJrcgl0Ece35P8X51AgYl8IahgkguzIS2lcOXBkeu0S w/ftOU0Vf2o+KNJQaQrrFKMbG87LAVIvlivXbQGEl9YXKgQuPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIS6Q7E++/gpzpVEuInMZPD4HQfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jNmY4 YjlhMS00ZTAzLTQxNjktOWRlMi0wOWEyM2JkOTE1MjIvMzU4NWJhZmQtNmQ0MC0z MmYyLWE2YTQtY2U1NmE2ODdkNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzZmOGI5YTEtNGUwMy00MTY5LTlk ZTItMDlhMjNiZDkxNTIyL2M2ZjhiOWExLTRlMDMtNDE2OS05ZGUyLTA5YTIzYmQ5 MTUyMi5jcmwwHwYDVR0jBBgwFoAU/+SiSxAq6lQdGUvwPnWlnhHViPEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jNmY4YjlhMS00ZTAzLTQxNjktOWRlMi0wOWEy M2JkOTE1MjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2yAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF16tZtMY6uWghtKKnphkN7tJhzhxjX12uECsLHuhFgG0Ly9n4fr EtxYf1ZgAGH+5JxCvmHplTGEmgaKQAulw1iftdewNlTK1rZ2SG9NnYeocrStd3Qu AVjA7yXLknUNo1M0M6/nRceA5UcYwTkFMFrZWDh+TR9HmRqmvcXFy13iTbNpH/YX 4+L2qg3FJRTYdPxpPoj/Chf/beyJ3c5kAPDmrknUiumu73gYLOxv0hhIRE5oW7yQ uOidsZ5QCNs/2+OhqtXk9M2PUUrpMaMrsQOijuC5Lf3i6aTtI5QZf++tKCh4YCUX nxJ/xoBCPiSE9dluuNH4NcA6OSnRsGJEt5g= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:52 2026 by rpki-client