$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa File: 605c5576-b627-374c-935c-c768b229c9e4.roa (raw, json) Hash identifier: mku9OMRqaFpsbEbV9ipRGJDLv+pfEKoQTUKnff3YPsc= Subject key identifier: C4:7A:91:53:BB:54:F9:B4:58:DB:C7:35:38:E3:59:5F:E6:58:21:0B Certificate issuer: /CN=e38fff12-b069-4018-8acc-5d2d1323c6bf Certificate serial: 010D0C9F4328584CAFBC7967A25EA95F8082DD00 Authority key identifier: 88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 12016 IP address blocks: 2620:db:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:79:67:a2:5e:a9:5f:80:82:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e38fff12-b069-4018-8acc-5d2d1323c6bf Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=6d983efa-6a44-4698-bb23-7d08bb850cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:64:5f:45:32:37:57:1c:c3:c2:5b:b0:2b: c8:c0:8d:ed:e6:51:7a:55:18:ce:ab:8f:8f:6a:ab: 05:bf:c5:60:13:a1:79:d0:ee:f1:e6:f0:23:37:11: 49:e4:a9:4f:2d:15:6f:20:9b:4f:0d:31:62:52:ae: b8:27:24:c6:8a:09:86:f3:52:13:d6:0b:18:64:d7: 9f:d4:3d:e2:0c:62:7e:5b:b1:2f:91:86:3d:61:7f: 4a:75:01:5d:b3:37:79:76:4e:95:46:bf:a1:b2:9d: bb:11:01:30:41:bf:77:14:57:fc:aa:0e:14:9e:7c: bc:f4:a5:0f:bf:18:1e:c4:a2:64:e9:d1:b6:75:cd: 6a:d1:88:f8:71:43:fa:e4:af:19:d6:01:ee:f0:5c: d5:23:e0:de:81:b4:1a:52:ee:cc:67:5a:e2:cf:85: ee:e4:65:f5:74:b8:8e:c6:5e:4c:ed:2e:b8:4c:16: ad:3d:19:50:41:81:b6:82:5d:95:59:f4:c3:44:94: d7:dc:18:f5:de:31:5f:0f:16:a7:a8:bf:0a:11:71: 07:e2:66:fd:1c:87:10:86:dc:92:dc:25:f9:68:b5: ad:cb:67:52:46:f4:bf:33:8c:00:32:28:e8:90:76: 23:bd:9a:1e:64:c1:3c:29:41:f3:7f:3d:24:8e:6c: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:91:53:BB:54:F9:B4:58:DB:C7:35:38:E3:59:5F:E6:58:21:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/605c5576-b627-374c-935c-c768b229c9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf/e38fff12-b069-4018-8acc-5d2d1323c6bf.crl X509v3 Authority Key Identifier: keyid:88:81:2D:DF:CC:54:FF:C0:15:47:4B:84:8B:CB:4C:51:79:90:57:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e38fff12-b069-4018-8acc-5d2d1323c6bf.cer sbgp-ipAddrBlock: critical IPv6: 2620:db:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6b:c4:68:4b:3d:7b:74:e2:7d:e3:0c:a7:90:0d:1e:96:32: 20:70:fe:1b:f9:38:c5:5e:04:92:63:47:eb:b7:3a:8c:79:76: fb:6a:e7:dc:8d:ed:57:6c:05:dd:91:80:d8:ec:91:0b:d1:4f: 8c:a8:d4:e0:04:24:8c:08:e0:06:3e:56:0d:a6:70:99:96:de: 67:a0:f0:79:dd:c5:a0:79:cc:31:01:ed:f0:cc:ee:29:04:19: de:4f:da:91:a5:cf:77:58:ea:06:4b:a1:5a:69:39:25:7d:e1: 1c:56:b2:3b:eb:af:8c:65:2c:7d:76:4c:ac:56:e1:5c:51:80: 6e:7b:76:e5:de:f5:98:5e:59:7f:a3:fa:3c:5b:eb:37:a8:61: 4f:27:2f:52:af:c8:d5:2f:1f:87:fc:c0:75:ca:35:12:ca:2b: 79:d8:0b:bf:03:7f:9c:59:3f:94:12:05:af:91:b1:ac:ac:f6: b6:b4:68:5a:58:d4:04:c0:55:93:fe:a7:f9:a5:ce:f9:39:0f: 23:06:f6:48:1c:d7:dc:9a:14:8e:c2:e3:24:e4:cd:bf:ed:ad: db:ff:d1:cb:9b:70:c7:44:6e:4c:fa:71:8a:78:90:62:e5:15: 5c:86:44:8f:c6:94:ea:ef:c8:a6:05:45:c3:23:cc:86:92:2f: f2:e6:65:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyvvHlnol6pX4CC3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM4ZmZmMTItYjA2OS00MDE4LThhY2MtNWQyZDEzMjNj NmJmMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NmQ5ODNlZmEtNmE0NC00Njk4LWJiMjMtN2QwOGJiODUwY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9hkX0UyN1ccw8JbsCvIwI3t5lF6VRjOq4+P aqsFv8VgE6F50O7x5vAjNxFJ5KlPLRVvIJtPDTFiUq64JyTGigmG81IT1gsYZNef 1D3iDGJ+W7EvkYY9YX9KdQFdszd5dk6VRr+hsp27EQEwQb93FFf8qg4Unny89KUP vxgexKJk6dG2dc1q0Yj4cUP65K8Z1gHu8FzVI+DegbQaUu7MZ1riz4Xu5GX1dLiO xl5M7S64TBatPRlQQYG2gl2VWfTDRJTX3Bj13jFfDxanqL8KEXEH4mb9HIcQhtyS 3CX5aLWty2dSRvS/M4wAMijokHYjvZoeZME8KUHzfz0kjmwpTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMR6kVO7VPm0WNvHNTjjWV/mWCELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMzhm ZmYxMi1iMDY5LTQwMTgtOGFjYy01ZDJkMTMyM2M2YmYvNjA1YzU1NzYtYjYyNy0z NzRjLTkzNWMtYzc2OGIyMjljOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTM4ZmZmMTItYjA2OS00MDE4LThh Y2MtNWQyZDEzMjNjNmJmL2UzOGZmZjEyLWIwNjktNDAxOC04YWNjLTVkMmQxMzIz YzZiZi5jcmwwHwYDVR0jBBgwFoAUiIEt38xU/8AVR0uEi8tMUXmQV3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMzhmZmYxMi1iMDY5LTQwMTgtOGFjYy01ZDJk MTMyM2M2YmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJrxGhLPXt04n3jDKeQDR6WMiBw/hv5OMVeBJJjR+u3Oox5dvtq 59yN7VdsBd2RgNjskQvRT4yo1OAEJIwI4AY+Vg2mcJmW3meg8HndxaB5zDEB7fDM 7ikEGd5P2pGlz3dY6gZLoVppOSV94RxWsjvrr4xlLH12TKxW4VxRgG57duXe9Zhe WX+j+jxb6zeoYU8nL1KvyNUvH4f8wHXKNRLKK3nYC78Df5xZP5QSBa+Rsays9ra0 aFpY1ATAVZP+p/mlzvk5DyMG9kgc19yaFI7C4yTkzb/trdv/0cubcMdEbkz6cYp4 kGLlFVyGRI/GlOrvyKYFRcMjzIaSL/LmZf0= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:56 2026 by rpki-client