$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa File: deeaf205-b8a0-3626-a173-83e81387d177.roa (raw, json) Hash identifier: Kj3+UQrM07638sutg/bwoy6aDH0Ojh7wTjpbIJnuk0g= Subject key identifier: A8:BA:67:FB:29:BC:1E:04:B6:33:46:08:BA:AC:FF:BB:4C:5D:79:22 Certificate issuer: /CN=23658315-b56f-46db-89d2-184000d7f7e1 Certificate serial: 010D0C9F4328584D40CA49903149B3A4FC6A6440 Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14007 IP address blocks: 2607:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:49:90:31:49:b3:a4:fc:6a:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=7de325b6-2e89-4b05-8866-57bdd6e2be66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:0c:ca:08:12:f9:2c:0e:38:27:33:c3:d8: d8:2b:62:5c:9f:0b:9e:2f:f9:0d:e1:ea:5e:d0:ce: 3b:d4:80:15:47:b2:49:ee:3d:c3:e6:e5:17:b5:dc: 87:91:c1:3e:55:b1:26:1f:ed:c0:fb:5f:88:62:55: 20:d0:b8:0a:93:0c:47:b2:48:38:0b:dd:20:15:a9: 84:9f:cd:ca:f3:bf:f6:5b:a6:90:19:5d:30:dc:f0: d9:4d:97:21:41:d6:b9:8a:61:8a:b6:41:cb:6b:2c: 87:e3:2b:29:14:b9:df:db:47:96:93:93:5a:ef:56: 7a:d6:b0:52:90:77:87:28:85:87:48:83:c6:d3:88: 6d:fa:59:6c:cb:00:91:ee:58:8e:46:6c:df:dd:9e: e7:e8:55:77:1f:6c:88:54:c0:bb:ed:0e:50:c4:b8: a6:41:63:bf:f1:d6:d1:27:65:78:41:0d:63:1a:bc: 06:7f:22:ed:f6:6b:ee:12:d1:0b:a3:ff:39:e7:b5: 97:31:87:f3:cb:c7:d5:bd:16:e1:64:b9:04:3a:0e: 5a:69:dc:6a:f6:27:fd:5f:ce:7c:91:c4:24:dc:71: 7a:d1:38:9f:3e:59:7e:e9:6e:73:7d:af:9c:0a:4a: 41:f3:f9:42:4c:1e:6d:ca:50:58:01:c7:f4:9a:d3: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:67:FB:29:BC:1E:04:B6:33:46:08:BA:AC:FF:BB:4C:5D:79:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/deeaf205-b8a0-3626-a173-83e81387d177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl X509v3 Authority Key Identifier: keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer sbgp-ipAddrBlock: critical IPv6: 2607:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:fd:88:df:e0:41:e4:01:b5:7b:06:5d:9d:25:ca:9e:d9:86: 0f:1c:ad:e9:a4:31:72:d4:c1:bc:30:a7:cd:4f:83:53:a0:25: 42:de:c5:46:ac:6c:f8:51:08:0f:79:09:41:21:1b:8f:7c:d1: 60:fa:73:e4:5e:e7:a2:4c:08:05:b3:b1:5b:ba:65:a6:02:e0: 4a:cc:38:75:55:7b:ff:fe:ff:21:e2:9d:c0:c6:48:00:b5:4f: aa:39:db:dc:78:42:54:bb:68:e6:1b:45:da:71:62:5c:28:78: 61:aa:40:79:da:2f:6e:ce:dd:4c:49:1a:5e:93:a0:ee:5e:27: ab:97:f9:25:5d:0c:f2:d2:6a:9e:65:77:5d:80:4b:21:3c:c2: ac:7e:fc:e4:86:cb:e8:9d:c3:6e:3b:7d:df:41:54:de:18:54: 49:f5:bb:04:01:09:4e:29:bf:ff:de:4e:df:58:aa:28:2b:71: fe:76:9e:e2:28:54:b9:94:25:b1:ee:50:44:78:d9:8e:82:6f: f5:05:c7:eb:3c:9c:cb:05:c9:8b:2f:31:0d:91:b3:ae:84:5a: b9:ac:e3:5e:ed:8c:4f:fe:bb:7c:06:c5:0b:f4:70:63:ce:a0: 6b:16:ee:6e:51:61:e5:18:bc:1e:42:43:33:f3:f8:86:e3:86: 1b:0f:e5:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1AykmQMUmzpPxqZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM2NTgzMTUtYjU2Zi00NmRiLTg5ZDItMTg0MDAwZDdm N2UxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk N2RlMzI1YjYtMmU4OS00YjA1LTg4NjYtNTdiZGQ2ZTJiZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifIMyggS+SwOOCczw9jYK2JcnwueL/kN4epe 0M471IAVR7JJ7j3D5uUXtdyHkcE+VbEmH+3A+1+IYlUg0LgKkwxHskg4C90gFamE n83K87/2W6aQGV0w3PDZTZchQda5imGKtkHLayyH4yspFLnf20eWk5Na71Z61rBS kHeHKIWHSIPG04ht+llsywCR7liORmzf3Z7n6FV3H2yIVMC77Q5QxLimQWO/8dbR J2V4QQ1jGrwGfyLt9mvuEtELo/8557WXMYfzy8fVvRbhZLkEOg5aadxq9if9X858 kcQk3HF60TifPll+6W5zfa+cCkpB8/lCTB5tylBYAcf0mtNelwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKi6Z/spvB4EtjNGCLqs/7tMXXkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1 ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQwMDBkN2Y3ZTEvZGVlYWYyMDUtYjhhMC0z NjI2LWExNzMtODNlODEzODdkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjM2NTgzMTUtYjU2Zi00NmRiLTg5 ZDItMTg0MDAwZDdmN2UxLzIzNjU4MzE1LWI1NmYtNDZkYi04OWQyLTE4NDAwMGQ3 ZjdlMS5jcmwwHwYDVR0jBBgwFoAU5YfMbY7t14LlHY1OWXdrNmM0d3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMzY1ODMxNS1iNTZmLTQ2ZGItODlkMi0xODQw MDBkN2Y3ZTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBV/Yjf4EHkAbV7Bl2dJcqe2YYPHK3ppDFy1MG8MKfNT4NToCVC3sVG rGz4UQgPeQlBIRuPfNFg+nPkXueiTAgFs7FbumWmAuBKzDh1VXv//v8h4p3AxkgA tU+qOdvceEJUu2jmG0XacWJcKHhhqkB52i9uzt1MSRpek6DuXierl/klXQzy0mqe ZXddgEshPMKsfvzkhsvoncNuO33fQVTeGFRJ9bsEAQlOKb//3k7fWKooK3H+dp7i KFS5lCWx7lBEeNmOgm/1BcfrPJzLBcmLLzENkbOuhFq5rONe7YxP/rt8BsUL9HBj zqBrFu5uUWHlGLweQkMz8/iG44YbD+Wx -----END CERTIFICATE-----Generated at Thu Mar 26 23:09:08 2026 by rpki-client