$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa File: 824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json) Hash identifier: jfO7r2LdtTPU9+M/L54fc7+Duy/A+ga/KlMuB5v9YQI= Subject key identifier: E9:77:7B:6B:D1:7B:33:45:18:9D:2E:9D:6E:E8:9B:18:C3:1E:9D:EE Certificate issuer: /CN=4bc701e5-cff5-4660-9102-08342e5ad35f Certificate serial: 010D0C9F4328584D300A4A2F47472081D1799680 Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 26523 IP address blocks: 2620:0:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4a:2f:47:47:20:81:d1:79:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=f3a2062d-4f94-4c19-a27e-8cfce7773b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:b6:5e:8c:48:36:49:52:a0:1b:9e:f5:c8: df:46:5d:cd:86:af:26:0a:22:1d:f2:e1:c3:10:b9: 55:0a:8f:d1:15:55:9e:d9:3c:cb:f1:f7:48:38:d8: ce:f7:cb:7e:9d:59:30:52:eb:c8:8c:3f:c6:38:ba: f8:43:9c:9e:5a:59:85:fd:06:8b:96:8e:19:cf:ba: 4d:26:d6:d4:d8:5c:0e:b7:44:76:b0:7b:b7:0c:59: 07:49:92:d8:2f:73:61:01:9f:b4:5b:ee:c8:74:7c: 83:89:43:df:ba:6a:3a:75:6f:86:c2:ce:4d:e8:58: 12:1c:c4:af:02:4b:69:64:21:5e:2f:e0:ef:d5:a1: ea:ca:25:b1:e0:df:90:2b:cd:a8:de:d3:3f:51:15: a0:0f:e8:e9:3f:dd:7b:c5:00:76:ac:8b:a3:87:3b: 36:41:d0:e3:86:06:3b:1f:e3:c5:a9:a4:e4:c6:11: 8f:92:f3:a3:b1:ad:c1:5c:ff:e0:b0:10:41:e8:19: 3c:60:53:fb:c7:95:7f:cf:e2:8f:e2:46:07:f1:5c: 3e:e3:f9:5c:09:0d:21:86:3a:74:6a:7c:cb:e2:a5: 7f:e6:81:db:01:ca:db:07:2f:e5:04:d3:76:e8:af: 4f:f2:4d:83:6d:00:d8:8b:30:1c:d5:19:d5:2a:8e: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:7B:6B:D1:7B:33:45:18:9D:2E:9D:6E:E8:9B:18:C3:1E:9D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl X509v3 Authority Key Identifier: keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e3:3f:5c:aa:f5:05:42:1f:64:c8:8d:ef:bc:f8:52:75:65: 4d:ea:74:59:9b:6f:86:39:cd:d4:a5:65:c0:97:cb:1e:65:0e: 5f:b3:f3:fc:17:15:52:79:f2:b0:09:e3:18:29:2b:13:de:ab: de:53:55:86:25:3d:c1:ab:7c:fe:93:09:71:f2:80:cd:e6:24: 52:83:8e:10:42:c8:96:6b:5e:5d:07:e7:5c:fc:26:19:d3:64: d2:3f:44:91:6f:a4:35:ab:fc:ff:fc:5e:b3:ac:6d:ea:7b:5e: 38:ad:ac:02:79:38:38:2e:8a:0b:4a:a4:fc:31:4d:04:44:1a: aa:f3:54:80:b9:ba:3d:b6:f4:60:f3:24:a0:dd:b0:31:ba:ad: 14:17:94:5b:92:a5:7a:a3:72:57:12:e1:e9:94:2d:65:9e:c5: 1b:f8:e8:fd:5a:89:11:7d:e3:9a:f2:b1:22:17:67:20:22:c4: 5c:24:9a:23:93:a9:e8:a2:9a:20:94:ec:d9:6d:b6:49:04:96: 78:34:6a:e3:21:0c:be:32:bf:a5:8f:c3:76:6c:5f:3b:05:7e: 95:eb:c1:e3:a5:04:f4:e9:c4:1c:c9:16:42:94:af:3e:df:a0: 2d:b1:ff:d2:f7:2e:e2:21:7b:fc:09:96:82:2b:bf:1a:3f:9d: d7:a8:b7:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCkovR0cggdF5loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFk MzVmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZjNhMjA2MmQtNGY5NC00YzE5LWEyN2UtOGNmY2U3NzczYjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KO2XoxINklSoBue9cjfRl3Nhq8mCiId8uHD ELlVCo/RFVWe2TzL8fdIONjO98t+nVkwUuvIjD/GOLr4Q5yeWlmF/QaLlo4Zz7pN JtbU2FwOt0R2sHu3DFkHSZLYL3NhAZ+0W+7IdHyDiUPfumo6dW+Gws5N6FgSHMSv AktpZCFeL+Dv1aHqyiWx4N+QK82o3tM/URWgD+jpP917xQB2rIujhzs2QdDjhgY7 H+PFqaTkxhGPkvOjsa3BXP/gsBBB6Bk8YFP7x5V/z+KP4kYH8Vw+4/lcCQ0hhjp0 anzL4qV/5oHbAcrbBy/lBNN26K9P8k2DbQDYizAc1RnVKo4IIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOl3e2vRezNFGJ0unW7omxjDHp3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3 MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvODI0ZTYzNzktYWJiZi0z YmExLTgxNTUtZWVhYjcwMmYxYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjNzAxZTUtY2ZmNS00NjYwLTkx MDItMDgzNDJlNWFkMzVmLzRiYzcwMWU1LWNmZjUtNDY2MC05MTAyLTA4MzQyZTVh ZDM1Zi5jcmwwHwYDVR0jBBgwFoAUYmRTfrlWuIlXLETUQaIf+l4Bu7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0 MmU1YWQzNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALbjP1yq9QVCH2TIje+8+FJ1ZU3qdFmbb4Y5zdSlZcCXyx5lDl+z 8/wXFVJ58rAJ4xgpKxPeq95TVYYlPcGrfP6TCXHygM3mJFKDjhBCyJZrXl0H51z8 JhnTZNI/RJFvpDWr/P/8XrOsbep7XjitrAJ5ODguigtKpPwxTQREGqrzVIC5uj22 9GDzJKDdsDG6rRQXlFuSpXqjclcS4emULWWexRv46P1aiRF945rysSIXZyAixFwk miOTqeiimiCU7NlttkkElng0auMhDL4yv6WPw3ZsXzsFfpXrweOlBPTpxBzJFkKU rz7foC2x/9L3LuIhe/wJloIrvxo/ndeot/E= -----END CERTIFICATE-----Generated at Thu Mar 26 19:11:52 2026 by rpki-client