$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa File: 346126f1-afa9-35ba-8367-f2cf5b47395b.roa (raw, json) Hash identifier: MAR5EDG87VK4LRlwsuT8MARpCOly4XkEJAp3tLBkrUo= Subject key identifier: EB:CD:88:BD:7E:11:94:75:65:C1:1D:03:55:EA:6B:B9:41:78:93:8C Certificate issuer: /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Certificate serial: 010D0C9F4328584D3F64E1754766CC65288B5D40 Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33387 IP address blocks: 2604:4300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e1:75:47:66:cc:65:28:8b:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=4ba92686-adbe-4ac1-86c1-d88881af8206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:33:ee:ac:21:97:81:78:0f:64:ea:a3:ed: 19:7c:91:71:d2:aa:2f:e2:da:da:40:f1:2b:46:c1: f3:42:ff:3d:99:eb:ed:02:5e:ee:1d:fa:90:3a:db: 7b:a3:83:38:ca:60:21:cf:92:bd:49:f1:98:ce:15: a8:75:1f:ce:40:5e:8a:70:10:f9:2b:58:f2:37:56: 5d:ab:90:54:9f:45:c3:1b:a6:0e:b3:8d:22:65:99: 22:bd:1e:41:81:94:2b:76:f4:5d:45:ee:10:ba:8c: 13:53:dc:bb:62:ea:26:34:33:22:7d:ff:41:15:d5: 20:10:81:59:d9:aa:3c:a5:f5:46:23:41:88:80:8a: 75:34:be:31:72:77:d5:1a:56:dc:d9:93:52:d3:be: 47:47:53:f6:7a:ac:b0:b0:1c:73:20:f5:b3:2e:ef: 62:84:84:51:aa:c3:f8:eb:e4:9d:d2:73:80:40:af: 52:92:94:16:d1:cf:79:16:ca:fa:c1:dc:b2:5a:a8: 01:3f:6f:9b:37:63:32:53:2a:72:12:2c:b0:6f:89: cc:1d:6b:63:74:cb:16:3a:9c:e9:38:30:47:31:ab: fe:ae:05:e1:27:64:c4:ed:54:0d:be:ba:98:4f:49: 13:65:a7:dd:d1:4d:b9:33:4c:92:d9:4b:97:1b:eb: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CD:88:BD:7E:11:94:75:65:C1:1D:03:55:EA:6B:B9:41:78:93:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/346126f1-afa9-35ba-8367-f2cf5b47395b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl X509v3 Authority Key Identifier: keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer sbgp-ipAddrBlock: critical IPv6: 2604:4300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:86:43:cc:b8:39:1c:92:95:a2:a4:57:57:36:79:ed:fb:79: a9:2d:10:cc:01:1a:ba:12:ce:03:e6:b6:0f:ca:99:14:4b:a1: bf:6b:74:8c:14:ab:43:5d:3e:3c:36:56:87:c5:61:bd:4c:db: 29:a8:6d:7c:d3:62:58:ae:2c:58:58:84:a6:74:25:40:64:f8: 34:37:7c:6d:02:12:43:41:d0:d8:90:63:92:aa:2a:3e:b6:86: b3:89:8e:9c:ca:ce:9d:10:d9:9f:18:bb:de:15:df:b5:e3:ce: c2:77:fd:14:c8:a5:7e:f6:df:9e:f2:06:a1:1c:59:7a:aa:0c: 53:49:7b:fe:77:14:fd:ff:e2:69:d6:3f:66:67:45:91:0c:71: 67:92:da:31:be:07:2d:42:e2:b2:d8:5b:cd:90:2b:86:97:a6: 35:a6:61:8b:2e:8d:86:4b:93:47:8a:60:06:3d:52:97:12:49: 95:67:97:f8:eb:fa:6d:70:2c:ba:b8:49:4d:b9:3a:8d:df:73: 73:eb:12:77:c8:62:cf:a9:9c:28:b5:70:44:68:10:59:e5:5e: 85:27:54:a7:d3:9e:10:db:85:41:86:51:b0:d0:d1:85:2e:a1: 00:c1:7c:20:91:7b:f2:fa:13:ff:da:c3:af:ff:a7:b6:41:4c: f0:b0:3f:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0/ZOF1R2bMZSiLXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBjNGFmNzktY2RjZi00NjQwLWFiNGUtZjBmMzM2NDhj YzU1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NGJhOTI2ODYtYWRiZS00YWMxLTg2YzEtZDg4ODgxYWY4MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw60z7qwhl4F4D2Tqo+0ZfJFx0qov4traQPEr RsHzQv89mevtAl7uHfqQOtt7o4M4ymAhz5K9SfGYzhWodR/OQF6KcBD5K1jyN1Zd q5BUn0XDG6YOs40iZZkivR5BgZQrdvRdRe4QuowTU9y7YuomNDMiff9BFdUgEIFZ 2ao8pfVGI0GIgIp1NL4xcnfVGlbc2ZNS075HR1P2eqywsBxzIPWzLu9ihIRRqsP4 6+Sd0nOAQK9SkpQW0c95Fsr6wdyyWqgBP2+bN2MyUypyEiywb4nMHWtjdMsWOpzp ODBHMav+rgXhJ2TE7VQNvrqYT0kTZafd0U25M0yS2UuXG+v7UQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOvNiL1+EZR1ZcEdA1Xqa7lBeJOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0 YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYzMzY0OGNjNTUvMzQ2MTI2ZjEtYWZhOS0z NWJhLTgzNjctZjJjZjViNDczOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjBjNGFmNzktY2RjZi00NjQwLWFi NGUtZjBmMzM2NDhjYzU1LzIwYzRhZjc5LWNkY2YtNDY0MC1hYjRlLWYwZjMzNjQ4 Y2M1NS5jcmwwHwYDVR0jBBgwFoAUVJshF3K5Lew9XWKBCmzP96diQ00wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMGM0YWY3OS1jZGNmLTQ2NDAtYWI0ZS1mMGYz MzY0OGNjNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRDADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARhkPMuDkckpWipFdXNnnt+3mpLRDMARq6Es4D5rYPypkUS6G/a3SM FKtDXT48NlaHxWG9TNspqG1802JYrixYWISmdCVAZPg0N3xtAhJDQdDYkGOSqio+ toaziY6cys6dENmfGLveFd+1487Cd/0UyKV+9t+e8gahHFl6qgxTSXv+dxT9/+Jp 1j9mZ0WRDHFnktoxvgctQuKy2FvNkCuGl6Y1pmGLLo2GS5NHimAGPVKXEkmVZ5f4 6/ptcCy6uElNuTqN33Nz6xJ3yGLPqZwotXBEaBBZ5V6FJ1Sn054Q24VBhlGw0NGF LqEAwXwgkXvy+hP/2sOv/6e2QUzwsD+/ -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:09 2026 by rpki-client