$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa File: c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa (raw, json) Hash identifier: 3eTRSNG+SB4sY52/Wb0X27AavgnRE0iH1IF6OubAVkk= Subject key identifier: B1:59:FF:93:67:0D:6B:03:35:DB:36:70:7C:42:05:09:0A:28:61:F6 Certificate issuer: /CN=61d234b0-9ab0-449d-88ec-f11a00956a39 Certificate serial: 010D0C9F4328584C645BF2B82603310F0F949800 Authority key identifier: D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 13823 IP address blocks: 2605:d600::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5b:f2:b8:26:03:31:0f:0f:94:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d234b0-9ab0-449d-88ec-f11a00956a39 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=d4de7e84-2a9a-4059-ad95-84cae76b0a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:17:9f:f7:e2:27:70:b1:04:62:a2:07:69: f7:36:dc:11:89:95:85:32:4a:6f:8a:22:10:1c:b9: 27:58:76:a2:70:cb:3c:84:58:2f:35:05:1f:64:99: af:d9:6c:57:ef:cc:66:dc:ec:63:ca:e5:ae:ba:63: af:ad:ce:1b:a8:17:0b:09:f7:51:73:de:39:66:11: bb:7b:c6:2d:65:e0:83:31:3b:34:52:b6:f1:f3:fb: 5a:b3:8b:24:8e:5d:29:d3:31:fd:8c:5b:6f:c5:54: ab:d0:6d:08:ea:52:93:2e:ca:6f:47:c7:aa:60:39: 3d:19:42:d1:05:1b:20:2e:f3:13:8a:1a:f0:9a:88: e9:c8:df:07:89:4a:76:65:c6:46:eb:1f:0f:0b:31: 58:5d:70:af:79:cc:0c:a1:0a:6b:d7:b2:79:53:a9: 7a:92:36:f5:7d:68:85:7f:07:88:d5:79:56:0f:98: 9b:1d:95:8d:f9:7e:4e:5d:b6:c6:fb:cf:75:cd:7b: 0f:d9:7c:0c:e3:b9:65:84:67:9b:7a:55:07:1f:52: 42:0c:1e:b6:cc:49:ad:40:05:d5:82:9a:51:46:3f: 60:ea:dc:3e:5d:47:ec:b2:7a:7e:dc:64:77:bb:ec: b1:58:63:c2:43:90:7b:66:c6:b3:fc:4b:5e:f3:c2: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:59:FF:93:67:0D:6B:03:35:DB:36:70:7C:42:05:09:0A:28:61:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/c3c1a8ce-55f1-3f4a-8ead-e068a83a5118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39/61d234b0-9ab0-449d-88ec-f11a00956a39.crl X509v3 Authority Key Identifier: keyid:D4:6E:14:D6:CA:9F:6B:26:96:64:FE:38:21:09:CD:3C:D0:8D:E4:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/61d234b0-9ab0-449d-88ec-f11a00956a39.cer sbgp-ipAddrBlock: critical IPv6: 2605:d600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:eb:45:db:6f:75:71:ce:30:64:9b:ea:61:eb:7c:87:c1:2e: e1:8c:aa:24:ff:f6:0f:fb:24:97:38:09:1c:05:64:2a:2b:b9: 4c:67:07:03:ca:4e:80:1d:a3:20:71:7e:8b:66:60:94:fb:e7: 3f:01:b7:2b:7e:e9:77:2f:ad:d6:ba:00:2f:45:3a:c2:82:06: 88:f8:10:b7:ab:df:ba:4c:17:09:ca:a1:e2:9e:60:86:61:41: 97:d3:80:ea:dc:9b:46:d5:b1:28:c2:41:e2:dd:73:fd:2b:1c: 89:86:2f:d7:36:74:79:ea:12:0f:a2:d7:d9:c8:7a:02:ac:5e: 74:f5:57:01:5a:83:97:d5:21:15:4e:3d:3e:2c:c0:67:a1:3e: 01:e8:74:88:4e:bf:7d:9c:da:e5:ea:d8:19:fc:5e:bd:7d:04: 76:1f:05:17:79:db:69:ed:da:d4:8c:63:a6:04:08:7c:02:1d: 51:c1:71:d9:47:1d:43:b5:cb:8c:f9:bc:1e:a6:c6:65:79:a9: 69:85:08:f3:a9:67:03:7f:e3:5e:68:d6:1b:8f:45:46:49:66: 14:40:d7:1f:33:32:4c:2e:28:ec:97:65:60:1e:d8:e4:96:87: 43:e0:b5:3b:1c:fd:87:0f:5a:11:fa:17:af:a7:76:4a:3a:d0: db:1f:fb:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExkW/K4JgMxDw+UmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMjM0YjAtOWFiMC00NDlkLTg4ZWMtZjExYTAwOTU2 YTM5MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk ZDRkZTdlODQtMmE5YS00MDU5LWFkOTUtODRjYWU3NmIwYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gUXn/fiJ3CxBGKiB2n3NtwRiZWFMkpviiIQ HLknWHaicMs8hFgvNQUfZJmv2WxX78xm3OxjyuWuumOvrc4bqBcLCfdRc945ZhG7 e8YtZeCDMTs0Urbx8/tas4skjl0p0zH9jFtvxVSr0G0I6lKTLspvR8eqYDk9GULR BRsgLvMTihrwmojpyN8HiUp2ZcZG6x8PCzFYXXCvecwMoQpr17J5U6l6kjb1fWiF fweI1XlWD5ibHZWN+X5OXbbG+891zXsP2XwM47llhGebelUHH1JCDB62zEmtQAXV gppRRj9g6tw+XUfssnp+3GR3u+yxWGPCQ5B7Zsaz/Ete88JFfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFZ/5NnDWsDNds2cHxCBQkKKGH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MWQy MzRiMC05YWIwLTQ0OWQtODhlYy1mMTFhMDA5NTZhMzkvYzNjMWE4Y2UtNTVmMS0z ZjRhLThlYWQtZTA2OGE4M2E1MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjFkMjM0YjAtOWFiMC00NDlkLTg4 ZWMtZjExYTAwOTU2YTM5LzYxZDIzNGIwLTlhYjAtNDQ5ZC04OGVjLWYxMWEwMDk1 NmEzOS5jcmwwHwYDVR0jBBgwFoAU1G4U1sqfayaWZP44IQnNPNCN5J0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MWQyMzRiMC05YWIwLTQ0OWQtODhlYy1mMTFh MDA5NTZhMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq60Xbb3VxzjBkm+ph63yHwS7hjKok//YP+ySXOAkcBWQqK7lMZwcD yk6AHaMgcX6LZmCU++c/Abcrful3L63WugAvRTrCggaI+BC3q9+6TBcJyqHinmCG YUGX04Dq3JtG1bEowkHi3XP9KxyJhi/XNnR56hIPotfZyHoCrF509VcBWoOX1SEV Tj0+LMBnoT4B6HSITr99nNrl6tgZ/F69fQR2HwUXedtp7drUjGOmBAh8Ah1RwXHZ Rx1DtcuM+bwepsZlealphQjzqWcDf+NeaNYbj0VGSWYUQNcfMzJMLijsl2VgHtjk lodD4LU7HP2HD1oR+hevp3ZKOtDbH/sN -----END CERTIFICATE-----Generated at Mon Mar 2 23:10:30 2026 by rpki-client