$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa File: c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa (raw, json) Hash identifier: 1ejExwyUGO/L+1d7Hv9cIQU1aniEpxoYnXP9ODMSlxg= Subject key identifier: 77:86:F0:20:5F:8E:2A:F9:B1:48:D7:1D:75:CA:12:0B:1B:EE:1B:7C Certificate issuer: /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Certificate serial: 010D0C9F4328584D74701B75BA17BBD797C3A740 Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 8103 IP address blocks: 2001:520:101d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1b:75:ba:17:bb:d7:97:c3:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=fce5c137-35e0-4116-8f01-cdfb8f7d91a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:87:c4:e7:d0:bc:c7:c0:9c:68:2c:48:4d: 4a:b1:73:07:22:f0:6f:2d:84:ad:cd:2f:da:b7:c0: 5f:38:09:d0:80:4e:1e:26:67:b6:1c:d1:8b:10:93: 1b:0f:80:0b:d0:64:52:35:b4:e7:0e:0a:9c:10:83: 2a:08:8c:9b:7a:f2:3c:8b:e7:b4:2c:ed:a8:1b:98: c9:ae:22:83:44:cc:1f:06:22:74:c7:8a:3a:18:14: b9:82:79:8f:47:71:d9:cc:f2:0b:3c:57:ea:8b:22: 05:2b:37:f2:4d:bf:b4:5a:34:39:11:d7:f3:6a:93: 33:75:8a:01:e5:c5:71:a4:b5:8d:82:c9:2a:ba:10: 45:e3:42:08:1b:db:92:45:3d:f3:9f:05:5e:68:49: 5c:d0:13:54:f9:09:09:a7:b1:fa:3c:72:b3:eb:e7: b6:62:43:14:dd:8b:9e:18:b8:f9:c6:c7:0f:6b:39: b3:b7:eb:1c:1f:7e:4a:c2:e9:0e:b4:4f:df:c7:76: 42:34:35:59:53:c7:31:84:8e:5f:83:68:6d:b1:da: e0:40:5d:01:a2:25:bf:e5:99:0e:10:5e:65:f1:11: f6:2e:a4:63:4e:ed:7a:f9:eb:36:58:5b:84:b6:2f: 76:67:46:e8:7e:a5:e8:be:e2:75:08:5f:d4:95:02: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:86:F0:20:5F:8E:2A:F9:B1:48:D7:1D:75:CA:12:0B:1B:EE:1B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/c06321a2-8d7c-340c-9c00-fcf7c29c1837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl X509v3 Authority Key Identifier: keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer sbgp-ipAddrBlock: critical IPv6: 2001:520:101d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:18:c7:b3:59:a4:4b:0c:8d:cc:cb:7f:7e:c4:98:c0:1f:0c: d3:eb:18:b5:a4:23:3c:73:42:f1:75:2f:3b:98:fb:85:2e:54: b6:ed:7b:77:40:9e:8d:19:22:d8:f8:0d:b9:c5:39:db:ba:b2: e3:bf:da:9d:6b:e1:17:cf:9f:f6:e1:54:64:10:eb:96:3b:38: 94:28:1b:b8:27:9a:20:91:da:a2:43:41:c6:21:23:44:75:a9: 51:56:6f:36:d2:23:60:b2:bc:3c:af:7c:7f:f1:c3:4f:fa:3a: d2:f2:55:86:20:dc:d6:32:99:33:6e:83:fd:8f:42:99:d0:88: c2:40:1d:0c:c3:e8:83:fa:80:d9:ec:ee:22:78:f8:cb:f8:bc: a1:64:30:dd:af:46:7f:28:eb:09:3d:98:28:38:77:db:0e:01: a3:27:b0:fb:06:95:84:19:55:f3:e2:84:fe:75:be:21:f8:a5: 3f:a2:91:8a:65:39:dd:97:b3:7f:3c:a1:56:af:5e:28:5d:9d: 6a:c1:99:ef:a0:2e:9a:c5:c5:cb:e2:5d:fa:ac:45:1b:80:7f: b9:13:ae:ad:03:27:b4:ac:06:d7:39:57:a9:97:0d:bc:3e:46: db:1f:0f:d7:ab:6c:d1:1a:72:6c:9d:3a:75:a7:34:a9:79:2c: 40:1d:0e:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBt1uhe715fDp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZmM2Q2M2MtNzhjMy00MTllLTljNWItZDkzN2UwYTBl OGMzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZmNlNWMxMzctMzVlMC00MTE2LThmMDEtY2RmYjhmN2Q5MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB2HxOfQvMfAnGgsSE1KsXMHIvBvLYStzS/a t8BfOAnQgE4eJme2HNGLEJMbD4AL0GRSNbTnDgqcEIMqCIybevI8i+e0LO2oG5jJ riKDRMwfBiJ0x4o6GBS5gnmPR3HZzPILPFfqiyIFKzfyTb+0WjQ5EdfzapMzdYoB 5cVxpLWNgskquhBF40IIG9uSRT3znwVeaElc0BNU+QkJp7H6PHKz6+e2YkMU3Yue GLj5xscPazmzt+scH35KwukOtE/fx3ZCNDVZU8cxhI5fg2htsdrgQF0BoiW/5ZkO EF5l8RH2LqRjTu16+es2WFuEti92Z0bofqXovuJ1CF/UlQIlCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHeG8CBfjir5sUjXHXXKEgsb7ht8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYz ZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3ZTBhMGU4YzMvYzA2MzIxYTItOGQ3Yy0z NDBjLTljMDAtZmNmN2MyOWMxODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTZmM2Q2M2MtNzhjMy00MTllLTlj NWItZDkzN2UwYTBlOGMzL2U2ZjNkNjNjLTc4YzMtNDE5ZS05YzViLWQ5MzdlMGEw ZThjMy5jcmwwHwYDVR0jBBgwFoAUjAXHW2gkLADG/NBRU0+R+xq38W8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNmYzZDYzYy03OGMzLTQxOWUtOWM1Yi1kOTM3 ZTBhMGU4YzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFIBAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUYx7NZpEsMjczLf37EmMAfDNPrGLWkIzxzQvF1LzuY+4UuVLbt e3dAno0ZItj4DbnFOdu6suO/2p1r4RfPn/bhVGQQ65Y7OJQoG7gnmiCR2qJDQcYh I0R1qVFWbzbSI2CyvDyvfH/xw0/6OtLyVYYg3NYymTNug/2PQpnQiMJAHQzD6IP6 gNns7iJ4+Mv4vKFkMN2vRn8o6wk9mCg4d9sOAaMnsPsGlYQZVfPihP51viH4pT+i kYplOd2Xs388oVavXihdnWrBme+gLprFxcviXfqsRRuAf7kTrq0DJ7SsBtc5V6mX Dbw+RtsfD9erbNEacmydOnWnNKl5LEAdDn8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:25:55 2026 by rpki-client