$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: 3HhRt2qGk43oxpQYV30WdWCfv74fr1BMoDAxx4wuqA8= Subject key identifier: 20:D6:15:AA:41:46:16:09:17:D8:04:F3:6D:73:23:56:6A:54:A8:13 Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584D4D5A715DC2CACE306993E780 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:71:5d:c2:ca:ce:30:69:93:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=98218ba0-c155-4018-9b59-bfd5a0dedf5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:35:d8:06:8c:b1:e5:15:27:5b:b5:ae:31: f7:d5:e2:88:eb:81:69:51:13:5d:2d:c5:50:df:60: 0a:e6:63:bd:27:e1:7c:10:e4:ba:4b:9e:21:12:c6: e5:d7:08:d1:6e:7e:2e:6a:25:10:72:8e:11:93:10: 5e:ee:5b:42:49:5d:96:46:82:e2:c6:64:49:f1:29: 9c:08:75:ac:90:44:c1:f4:c8:cb:7a:e5:22:7f:7b: 33:65:20:53:61:74:88:cb:ca:c3:a3:c2:70:2f:80: 1b:14:96:21:15:89:35:59:c1:28:68:56:2d:3a:c1: 9e:37:9e:56:a2:6f:18:f4:55:ef:f5:2b:b8:34:02: 50:06:41:6d:fc:9d:14:2b:b6:b1:b1:f7:18:ed:b6: 86:e6:5c:24:7e:b4:5d:a5:24:4e:25:a2:8a:11:16: c7:ae:4c:bf:04:12:33:30:d9:ca:9b:0a:59:3a:f8: 3c:a4:a3:ce:77:d2:cb:19:bf:e7:c1:38:8d:ab:41: c4:73:70:78:db:42:14:fa:7c:06:d6:2c:e0:69:4f: 39:d7:19:32:9f:8e:08:10:d1:99:33:f9:cc:19:58: bb:f5:e4:fa:e3:e8:34:de:d0:8a:18:be:61:08:89: 18:c0:49:0a:89:d4:36:9b:54:ac:58:29:e5:f2:73: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D6:15:AA:41:46:16:09:17:D8:04:F3:6D:73:23:56:6A:54:A8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:86:2a:63:54:16:29:d9:6e:21:78:9d:f6:20:6f:d4:8f:58: 0a:77:8d:6c:32:e5:c8:26:fc:11:f4:40:1f:7b:ac:26:80:7a: d8:98:12:8f:be:00:66:17:d7:e1:b5:b6:20:aa:0e:b7:4f:6e: 9c:af:72:55:69:e8:fa:26:0a:c5:a5:d1:3b:1b:29:b5:ec:42: 07:89:aa:b6:e0:1f:a2:c8:95:b2:8a:41:1f:c5:cd:af:6c:55: bb:6a:9c:c3:55:65:ce:28:9d:40:c3:44:78:73:8a:73:3b:f3: ea:42:e7:96:60:15:78:1f:95:2f:ba:16:1f:45:9a:2e:57:ac: 00:0c:97:15:15:23:a9:64:d1:19:d0:d8:2b:93:af:83:5c:52: 88:ce:6c:a1:a6:dc:4f:4e:b3:77:23:44:46:1c:9e:aa:8f:8c: 26:97:17:71:57:c0:ad:78:e9:9e:6e:6a:87:75:b1:b6:0e:dc: 5a:a8:da:ed:0c:bd:39:6c:ea:5e:11:65:db:66:ac:ac:6a:37: 1a:ec:47:d2:f5:b7:b4:3f:43:0a:57:d4:c1:7f:2f:df:db:10: f1:e4:69:5e:a0:2c:8e:b4:ca:bf:34:f1:7a:35:d1:b3:e5:c2: b5:d8:a5:8b:99:a7:d5:13:7d:7c:e2:f5:1b:42:7e:62:82:13: 5e:54:ff:4f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1NWnFdwsrOMGmT54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTgyMThiYTAtYzE1NS00MDE4LTliNTktYmZkNWEwZGVkZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhk12AaMseUVJ1u1rjH31eKI64FpURNdLcVQ 32AK5mO9J+F8EOS6S54hEsbl1wjRbn4uaiUQco4RkxBe7ltCSV2WRoLixmRJ8Smc CHWskETB9MjLeuUif3szZSBTYXSIy8rDo8JwL4AbFJYhFYk1WcEoaFYtOsGeN55W om8Y9FXv9Su4NAJQBkFt/J0UK7axsfcY7baG5lwkfrRdpSROJaKKERbHrky/BBIz MNnKmwpZOvg8pKPOd9LLGb/nwTiNq0HEc3B420IU+nwG1izgaU851xkyn44IENGZ M/nMGVi79eT64+g03tCKGL5hCIkYwEkKidQ2m1SsWCnl8nMnHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCDWFapBRhYJF9gE821zI1ZqVKgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALIYqY1QWKdluIXid9iBv1I9YCneNbDLlyCb8EfRAH3usJoB62JgS j74AZhfX4bW2IKoOt09unK9yVWno+iYKxaXROxsptexCB4mqtuAfosiVsopBH8XN r2xVu2qcw1VlziidQMNEeHOKczvz6kLnlmAVeB+VL7oWH0WaLlesAAyXFRUjqWTR GdDYK5Ovg1xSiM5soabcT06zdyNERhyeqo+MJpcXcVfArXjpnm5qh3Wxtg7cWqja 7Qy9OWzqXhFl22asrGo3GuxH0vW3tD9DClfUwX8v39sQ8eRpXqAsjrTKvzTxejXR s+XCtdili5mn1RN9fOL1G0J+YoITXlT/Tw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:29 2026 by rpki-client