$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa File: ddb106cb-5166-390c-ae06-ee99129ea34e.roa (raw, json) Hash identifier: N6LSkLrVjphAvFxbnRMAJ5a5KBWbtlLiGSNVTrafUeM= Subject key identifier: 3D:68:BA:E7:BB:2E:9C:5E:52:45:4A:70:6F:28:35:EA:BD:37:E0:6D Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584CAE57131F791695EB8325BFC0 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 394354 IP address blocks: 2620:10a:801f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:13:1f:79:16:95:eb:83:25:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=404a4647-c379-4f40-b071-da20755f7181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:86:a6:1a:7e:c5:0f:2c:61:f1:73:9e:8b: 32:a8:77:75:76:3c:43:b1:25:eb:be:12:44:48:a4: eb:c7:15:e3:49:89:3d:bd:2f:72:12:81:23:37:c9: ba:ed:05:dc:33:fc:ac:2b:82:45:a2:01:c7:d3:d1: 0e:c7:80:08:a3:0a:d3:09:29:4d:ce:c7:b3:7c:74: 70:c6:05:67:da:89:a8:c5:92:dd:66:bc:5a:18:58: 7e:64:5c:94:e6:81:da:6a:ef:61:2a:85:69:e5:99: 29:1b:10:9f:61:20:66:9d:c9:57:c3:25:d1:5b:95: dc:47:a5:7a:7d:59:6e:b0:d7:f9:38:54:af:e8:c9: c3:39:64:e2:51:65:e5:4a:7a:f0:c4:f3:ea:6f:1f: a9:99:d1:ae:b7:c9:f0:0f:ec:96:90:47:9c:a4:49: ef:a6:4e:05:51:de:2f:bd:5a:19:65:86:35:58:f7: a6:16:57:36:bf:9d:cc:4f:97:c4:d8:ea:2e:b5:d3: d9:f4:1a:91:12:20:6d:f7:30:cc:08:ec:13:7c:c8: dd:17:c8:0e:57:6c:1f:a2:42:2b:1e:7d:50:53:48: b2:a3:da:42:19:8e:0b:ab:6c:e9:60:f4:96:21:a5: 75:ab:a4:e3:f6:63:63:4c:b6:06:b4:13:f3:ad:77: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:68:BA:E7:BB:2E:9C:5E:52:45:4A:70:6F:28:35:EA:BD:37:E0:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ddb106cb-5166-390c-ae06-ee99129ea34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:801f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ff:01:83:a7:9e:3f:e2:eb:4f:52:2f:38:6c:9d:89:95:51: 3f:16:9c:73:36:ee:0b:d6:c9:0c:25:54:82:6a:95:4e:73:47: 6e:91:25:b9:4d:a9:f2:c5:f9:22:ab:f4:ec:22:78:7a:86:17: 88:13:20:89:17:9f:f8:1d:42:b7:5f:ad:3f:83:0c:24:69:a5: a9:1e:8d:1d:88:db:6c:47:55:1c:3a:4d:d0:26:3c:7c:e7:29: 6a:07:d8:cd:ed:ca:f3:84:8a:b1:63:91:7b:28:e9:73:8a:d2: 4c:85:88:1f:44:ce:79:a1:8e:7d:c9:dc:07:2f:57:e8:4b:21: 39:5a:61:06:10:5f:de:12:1d:f4:6a:d6:c8:05:3f:3d:37:62: 92:c0:8a:df:2e:85:84:2d:3f:3c:1b:e3:99:df:00:6b:2f:75: d5:9b:7a:7d:df:6d:03:4b:71:d5:20:e9:d9:ca:ca:76:1a:53: 27:4b:4b:d0:88:cd:95:8a:6e:02:56:80:ea:37:ae:5a:2f:db: f6:1c:67:9c:94:7e:c3:38:e5:d6:49:4c:ca:30:f4:e6:d9:5a: a9:3b:a9:c7:ca:a7:61:cd:07:95:8b:e4:de:d1:70:2b:d3:36: 94:73:dd:04:78:43:0d:60:f2:9b:2f:bc:25:2c:0d:fe:eb:9d: 20:bf:c0:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuVxMfeRaV64Mlv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDA0YTQ2NDctYzM3OS00ZjQwLWIwNzEtZGEyMDc1NWY3MTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg+Gphp+xQ8sYfFznosyqHd1djxDsSXrvhJE SKTrxxXjSYk9vS9yEoEjN8m67QXcM/ysK4JFogHH09EOx4AIowrTCSlNzsezfHRw xgVn2omoxZLdZrxaGFh+ZFyU5oHaau9hKoVp5ZkpGxCfYSBmnclXwyXRW5XcR6V6 fVlusNf5OFSv6MnDOWTiUWXlSnrwxPPqbx+pmdGut8nwD+yWkEecpEnvpk4FUd4v vVoZZYY1WPemFlc2v53MT5fE2OoutdPZ9BqREiBt9zDMCOwTfMjdF8gOV2wfokIr Hn1QU0iyo9pCGY4Lq2zpYPSWIaV1q6Tj9mNjTLYGtBPzrXdtZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD1ouue7LpxeUkVKcG8oNeq9N+BtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZGRiMTA2Y2ItNTE2Ni0z OTBjLWFlMDYtZWU5OTEyOWVhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJH/AYOnnj/i609SLzhsnYmVUT8WnHM27gvWyQwlVIJqlU5zR26R JblNqfLF+SKr9OwieHqGF4gTIIkXn/gdQrdfrT+DDCRppakejR2I22xHVRw6TdAm PHznKWoH2M3tyvOEirFjkXso6XOK0kyFiB9Eznmhjn3J3AcvV+hLITlaYQYQX94S HfRq1sgFPz03YpLAit8uhYQtPzwb45nfAGsvddWben3fbQNLcdUg6dnKynYaUydL S9CIzZWKbgJWgOo3rlov2/YcZ5yUfsM45dZJTMow9ObZWqk7qcfKp2HNB5WL5N7R cCvTNpRz3QR4Qw1g8psvvCUsDf7rnSC/wJA= -----END CERTIFICATE-----Generated at Mon Mar 2 01:10:09 2026 by rpki-client