$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa File: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (raw, json) Hash identifier: bgwIh1k3GlaJ3WNufEoFyFPGAg7YF5q9JmE7RxRdqg8= Subject key identifier: 38:1B:CF:2A:F2:17:F7:72:76:C6:F5:30:82:DD:A0:CE:90:EC:14:DB Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584D00B25B9B53C5809C08115BE0 Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 63061 IP address blocks: 2620:b7:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:5b:9b:53:c5:80:9c:08:11:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=15598ff7-01e7-4bda-93e0-7bbfc786e709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:f2:72:3a:18:6f:25:28:91:29:d3:20:c7: f1:cc:e5:09:d7:9d:7e:6c:26:17:01:4e:87:89:e7: 0c:67:66:92:f2:91:81:f6:d3:6d:5f:00:3e:74:35: 2c:f6:33:29:32:ac:15:c0:6f:c8:f0:bf:dc:03:79: 6b:27:e1:93:ef:29:fc:b6:50:5c:f5:02:54:40:ff: 5b:ef:d7:5c:39:8b:e8:73:82:6e:9e:3c:d5:1e:e7: c3:bf:82:d5:20:2a:a5:b7:94:59:94:ab:e1:87:12: e1:84:03:29:96:79:ae:58:81:64:a7:6b:7d:c8:ca: 64:0f:ad:df:87:d6:7f:b8:d2:f2:3d:ec:b4:ea:ec: 03:b0:96:c4:04:4b:76:5a:9e:47:a3:e4:77:d7:69: 3d:8e:52:75:44:6c:76:d5:a9:09:ff:9a:22:33:a2: 47:3d:34:37:56:7f:c4:92:26:22:33:d2:02:9b:58: 0d:21:95:34:36:44:38:5f:59:fe:54:67:80:ff:54: 87:d3:72:1e:10:69:97:e7:3a:09:e3:5f:c2:ed:28: 69:af:2b:fb:45:02:74:89:8c:39:f2:44:9e:74:bd: 40:57:b5:83:23:d8:f3:27:98:82:17:f6:80:f7:5a: 21:bd:09:3d:3d:55:e5:af:0c:93:82:6e:b7:62:19: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1B:CF:2A:F2:17:F7:72:76:C6:F5:30:82:DD:A0:CE:90:EC:14:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv6: 2620:b7:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:89:dd:f7:46:d8:9b:73:f2:4f:ea:e5:9f:d5:5e:66:a4:45: fb:06:f5:f3:20:84:30:87:7a:c2:58:ac:cc:39:fe:52:6e:db: d2:f5:7f:1b:7f:c4:d7:a6:82:27:d9:cf:8e:73:e3:1c:7a:5a: c0:c9:a8:05:f6:9f:b5:7d:6f:e3:ac:d9:f0:b7:be:61:91:37: 95:1e:5f:a6:1f:8a:9f:6c:28:8b:9b:d6:10:49:56:7d:65:4b: 63:c2:c6:e0:89:6b:77:7c:66:87:45:4f:cf:2f:0c:88:92:57: ed:22:b7:8b:eb:0d:13:f3:ac:d8:a6:66:0b:86:ef:00:79:ae: 07:f1:6b:31:11:f9:d0:f3:59:8d:bc:a7:03:60:b5:97:4c:95: 53:be:02:4f:8e:50:6b:91:20:e0:3d:e2:11:1f:4f:1c:ee:ca: b2:e5:e5:17:b9:c8:85:d8:03:6d:ef:c3:7f:49:e3:04:2d:ed: f4:99:44:61:ac:8d:98:de:8b:0b:a9:24:b6:08:76:8f:f0:3d: 23:97:e1:f0:81:7c:d5:d0:e8:4f:ee:08:3c:46:9e:9d:b8:84: 98:ae:08:d0:23:84:3b:16:4a:f3:b9:a5:57:f5:b8:4a:9d:e6: fe:8e:bc:aa:4e:cc:2e:4b:39:4f:7e:ff:b5:e5:a0:4c:ea:c9: 6f:b7:5b:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0AslubU8WAnAgRW+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MTU1OThmZjctMDFlNy00YmRhLTkzZTAtN2JiZmM3ODZlNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6rycjoYbyUokSnTIMfxzOUJ151+bCYXAU6H iecMZ2aS8pGB9tNtXwA+dDUs9jMpMqwVwG/I8L/cA3lrJ+GT7yn8tlBc9QJUQP9b 79dcOYvoc4JunjzVHufDv4LVICqlt5RZlKvhhxLhhAMplnmuWIFkp2t9yMpkD63f h9Z/uNLyPey06uwDsJbEBEt2Wp5Ho+R312k9jlJ1RGx21akJ/5oiM6JHPTQ3Vn/E kiYiM9ICm1gNIZU0NkQ4X1n+VGeA/1SH03IeEGmX5zoJ41/C7Shpryv7RQJ0iYw5 8kSedL1AV7WDI9jzJ5iCF/aA91ohvQk9PVXlrwyTgm63YhmhawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDgbzyryF/dydsb1MILdoM6Q7BTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvM2UxY2U5N2ItYWY0Zi0z MjlkLThmN2ItNDkzYTU4ZTJkMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAtyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWJ3fdG2Jtz8k/q5Z/VXmakRfsG9fMghDCHesJYrMw5/lJu29L1 fxt/xNemgifZz45z4xx6WsDJqAX2n7V9b+Os2fC3vmGRN5UeX6Yfip9sKIub1hBJ Vn1lS2PCxuCJa3d8ZodFT88vDIiSV+0it4vrDRPzrNimZguG7wB5rgfxazER+dDz WY28pwNgtZdMlVO+Ak+OUGuRIOA94hEfTxzuyrLl5Re5yIXYA23vw39J4wQt7fSZ RGGsjZjeiwupJLYIdo/wPSOX4fCBfNXQ6E/uCDxGnp24hJiuCNAjhDsWSvO5pVf1 uEqd5v6OvKpOzC5LOU9+/7XloEzqyW+3W/Q= -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:43 2026 by rpki-client