$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa File: 4d0402b4-3d72-3559-85da-54c26af32861.roa (raw, json) Hash identifier: fiScjcKrIYYyz89aarg0sKvn953809VQFEaEfwBY/AI= Subject key identifier: DE:14:2C:DD:18:D5:77:1E:E9:22:07:D2:45:2D:00:C1:1A:05:58:F7 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584D300A3971F41A46A93D186980 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 400097 IP address blocks: 2606:3d40:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:39:71:f4:1a:46:a9:3d:18:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=452162a7-ab81-4dd2-b6b5-bc276720477c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:f2:5b:d8:bf:9d:5f:b6:33:86:82:ff:37: c6:e9:d7:56:8a:af:6a:73:59:37:97:3e:8d:15:74: 4a:d7:f1:84:cf:c3:fb:85:3f:5d:2a:66:5e:96:04: 7f:bf:48:06:b3:6c:4b:f5:48:f7:fb:82:42:c3:1c: 2e:c7:3d:74:b6:49:cc:9b:46:84:5a:c2:99:af:51: c2:10:f4:68:71:23:e4:b9:a3:ce:7b:10:e8:c8:62: b7:b0:f3:bb:4f:16:c4:a0:25:db:ca:a0:22:f2:bc: 33:25:1a:f0:75:3c:36:71:6e:43:0f:28:07:2f:0c: d1:73:6c:df:00:d4:b7:a1:9a:56:88:50:a1:ab:79: dd:92:e4:23:c5:03:29:c6:38:ce:58:4c:4b:0c:cf: 10:2c:22:3e:db:c3:6d:a3:3d:a9:ef:87:c1:fa:7e: bf:6b:89:e2:ad:9f:ea:7d:3b:22:63:13:3b:29:b5: a2:a7:9b:4f:50:a4:b8:0e:d2:4b:08:49:09:9a:d9: 58:af:73:c0:02:b0:49:91:1f:9b:7f:48:99:06:d8: 77:3c:ee:8f:aa:ab:d3:2a:59:76:65:31:2e:01:38: 9b:51:f3:26:80:49:75:ab:c1:8d:f8:54:bd:34:2c: 22:ba:89:1c:36:2c:f8:6b:c5:0e:db:7b:09:19:c4: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:14:2C:DD:18:D5:77:1E:E9:22:07:D2:45:2D:00:C1:1A:05:58:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:13:e7:5a:e5:27:28:f0:0e:d3:6f:f8:c8:12:58:58:d7:38: 1d:0f:bf:ee:0f:8c:82:66:70:94:58:43:89:e5:ed:60:d5:5f: b8:64:2a:75:45:ac:07:aa:80:00:58:58:a6:d5:46:6a:a5:88: 17:26:81:7b:ca:0c:34:5f:49:f0:8c:89:82:8f:98:1e:77:28: 9d:fb:3e:b7:e6:63:fa:80:ad:20:b7:87:37:74:69:53:70:d7: 4d:5a:ba:6f:a1:3f:67:52:20:e4:24:3e:fe:07:53:76:29:98: ef:44:1a:60:57:2a:45:d1:52:01:58:df:0a:66:f6:c3:0b:78: 39:a7:fa:19:ac:08:63:cf:10:e5:22:7b:aa:ba:da:ea:23:0e: b7:ce:ff:b0:5c:35:33:69:1a:82:dd:78:a1:7b:e6:86:fa:19: 5d:1d:54:80:4e:69:33:05:71:64:10:4b:7b:95:e4:b5:01:9c: 77:41:ce:ba:8d:bb:38:25:61:8c:9c:01:0c:4c:a1:20:2c:65: 0f:b2:0f:7a:e5:9e:ad:c4:d7:68:7c:e2:d9:01:d6:36:40:ed: 51:1e:5f:57:ca:89:95:2b:00:00:ce:b2:cc:be:cc:a3:d5:94: c3:a9:19:ef:90:90:13:9c:40:a0:b7:2f:cb:1f:b0:d3:c6:2a: 6a:b5:4e:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCjlx9BpGqT0YaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NDUyMTYyYTctYWI4MS00ZGQyLWI2YjUtYmMyNzY3MjA0NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJnyW9i/nV+2M4aC/zfG6ddWiq9qc1k3lz6N FXRK1/GEz8P7hT9dKmZelgR/v0gGs2xL9Uj3+4JCwxwuxz10tknMm0aEWsKZr1HC EPRocSPkuaPOexDoyGK3sPO7TxbEoCXbyqAi8rwzJRrwdTw2cW5DDygHLwzRc2zf ANS3oZpWiFChq3ndkuQjxQMpxjjOWExLDM8QLCI+28Ntoz2p74fB+n6/a4nirZ/q fTsiYxM7KbWip5tPUKS4DtJLCEkJmtlYr3PAArBJkR+bf0iZBth3PO6PqqvTKll2 ZTEuATibUfMmgEl1q8GN+FS9NCwiuokcNiz4a8UO23sJGcSYVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4ULN0Y1Xce6SIH0kUtAMEaBVj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNGQwNDAyYjQtM2Q3Mi0z NTU5LTg1ZGEtNTRjMjZhZjMyODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QDwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMT51rlJyjwDtNv+MgSWFjXOB0Pv+4PjIJmcJRYQ4nl7WDVX7hk KnVFrAeqgABYWKbVRmqliBcmgXvKDDRfSfCMiYKPmB53KJ37PrfmY/qArSC3hzd0 aVNw101aum+hP2dSIOQkPv4HU3YpmO9EGmBXKkXRUgFY3wpm9sMLeDmn+hmsCGPP EOUie6q62uojDrfO/7BcNTNpGoLdeKF75ob6GV0dVIBOaTMFcWQQS3uV5LUBnHdB zrqNuzglYYycAQxMoSAsZQ+yD3rlnq3E12h84tkB1jZA7VEeX1fKiZUrAADOssy+ zKPVlMOpGe+QkBOcQKC3L8sfsNPGKmq1TnU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:56 2026 by rpki-client