$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa File: cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa (raw, json) Hash identifier: vsm4T28ZORBKme2EeAHjd/N2id1erBFQ8IOYNe/7jVk= Subject key identifier: 09:28:0A:14:31:1A:AE:F7:A7:61:D2:1D:B1:48:26:37:51:1E:18:DD Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D300A29D9F196C8EC151FBF80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 8987 IP address blocks: 2605:4300:2c01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:29:d9:f1:96:c8:ec:15:1f:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=10e7df5d-7998-4a68-800e-6722f417d653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:e7:70:07:6a:11:f7:26:3c:65:00:65:40: 44:e5:c6:28:8b:d7:7c:80:f8:c6:76:ae:c8:22:b6: 89:ae:75:64:9d:98:38:9c:22:ec:2d:33:b7:72:f1: b5:a1:4e:4e:7d:04:ab:63:44:9f:5b:3a:d8:e0:ff: ae:c5:70:f5:a5:69:f4:7d:bd:23:09:2a:7e:d9:63: ef:92:ab:46:59:e1:f7:7c:98:3f:2c:f6:ed:d9:7b: 88:9b:02:1a:57:12:91:53:9e:99:fc:57:2e:e0:98: 6c:32:0e:30:52:d3:12:6c:31:64:04:6b:53:83:52: c8:af:33:72:dc:e3:97:2b:db:b2:61:97:27:32:34: 84:06:c6:05:46:64:52:d9:3f:b6:48:de:6e:b8:64: d1:a5:f6:b6:54:cc:a1:26:c6:2d:f2:69:d3:bb:94: d5:7e:b2:25:d7:f3:81:d7:38:d0:21:4f:c4:42:8f: 1e:8e:4f:91:7d:b4:d6:e8:9d:3c:e5:0c:92:d1:66: 57:59:fe:a6:3a:55:e2:7b:86:aa:0a:5b:97:ab:73: 66:8c:8b:8e:78:e3:b3:28:fa:68:bd:c8:51:9f:db: b1:19:d5:46:93:c2:35:b0:c1:c0:61:de:2e:0e:de: e1:af:4d:fa:3d:8b:4c:c7:5f:f5:c3:7d:9a:9c:64: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:28:0A:14:31:1A:AE:F7:A7:61:D2:1D:B1:48:26:37:51:1E:18:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf4fd08e-e4c8-39e1-9028-95cefca9c5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:68:7c:41:f6:10:b0:26:a3:f7:96:ff:b2:54:60:60:c0:3b: 56:98:2e:08:a1:24:43:95:c2:97:6b:26:c2:44:75:cf:e3:fa: 02:7d:a6:1a:e3:19:bb:7a:b5:e3:2e:36:1c:eb:24:c9:be:99: 46:93:5f:ed:71:c3:3d:ba:78:3a:73:3b:e0:52:cf:49:53:7e: 33:3c:3b:e9:92:d8:4e:dd:e3:0c:e0:2d:f0:fc:f9:8f:aa:21: 27:e5:89:d0:cd:57:ad:dc:5b:a2:f0:45:f5:dd:d7:2d:e6:08: a8:66:0b:58:3b:ea:aa:aa:45:a9:12:b2:1f:43:03:cf:49:e3: b5:2e:08:7f:45:f8:6a:fc:d8:66:d5:0c:f9:94:01:8a:57:5c: de:46:a7:80:e5:16:25:73:f7:ce:02:07:25:7a:7f:90:e1:f5: 37:46:6b:76:9d:59:03:55:c3:b6:6e:92:df:3f:3f:e3:07:91: 9a:1a:f2:ec:d0:1e:b8:70:6b:49:d3:7d:a1:b9:85:59:3e:c5: 0c:3c:2c:f4:cf:e9:20:ab:16:df:6e:8f:88:29:8d:20:f5:f0: 3b:c8:de:85:10:ce:e7:08:ae:86:3a:0e:5d:9f:cb:99:a7:73: e1:d1:6d:9d:ce:13:b7:49:ef:cc:1b:7c:5e:ce:6d:82:35:19: 3a:20:0c:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCinZ8ZbI7BUfv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTBlN2RmNWQtNzk5OC00YTY4LTgwMGUtNjcyMmY0MTdkNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxjncAdqEfcmPGUAZUBE5cYoi9d8gPjGdq7I IraJrnVknZg4nCLsLTO3cvG1oU5OfQSrY0SfWzrY4P+uxXD1pWn0fb0jCSp+2WPv kqtGWeH3fJg/LPbt2XuImwIaVxKRU56Z/Fcu4JhsMg4wUtMSbDFkBGtTg1LIrzNy 3OOXK9uyYZcnMjSEBsYFRmRS2T+2SN5uuGTRpfa2VMyhJsYt8mnTu5TVfrIl1/OB 1zjQIU/EQo8ejk+RfbTW6J085QyS0WZXWf6mOlXie4aqCluXq3NmjIuOeOOzKPpo vchRn9uxGdVGk8I1sMHAYd4uDt7hr036PYtMx1/1w32anGTyLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAkoChQxGq73p2HSHbFIJjdRHhjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y0ZmQwOGUtZTRjOC0z OWUxLTkwMjgtOTVjZWZjYTljNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJofEH2ELAmo/eW/7JUYGDAO1aYLgihJEOVwpdrJsJEdc/j+gJ9 phrjGbt6teMuNhzrJMm+mUaTX+1xwz26eDpzO+BSz0lTfjM8O+mS2E7d4wzgLfD8 +Y+qISflidDNV63cW6LwRfXd1y3mCKhmC1g76qqqRakSsh9DA89J47UuCH9F+Gr8 2GbVDPmUAYpXXN5Gp4DlFiVz984CByV6f5Dh9TdGa3adWQNVw7Zukt8/P+MHkZoa 8uzQHrhwa0nTfaG5hVk+xQw8LPTP6SCrFt9uj4gpjSD18DvI3oUQzucIroY6Dl2f y5mnc+HRbZ3OE7dJ78wbfF7ObYI1GTogDL8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:08 2026 by rpki-client