$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa File: 08c3987a-1016-3546-9a9f-6da72edf1b00.roa (raw, json) Hash identifier: nk4zJBrf4buwL77u53ohEgGk77VmqH6j1XBHNPu9COc= Subject key identifier: 75:EE:AF:35:E4:A3:7A:05:21:4D:F0:B7:15:90:77:2C:37:4C:2A:1C Certificate issuer: /CN=480e68d2-5883-4233-9f17-992a2ca71e2b Certificate serial: 010D0C9F4328584D300A47C3A00993A696E7A3F0 Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 43755 IP address blocks: 2604:4600:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:47:c3:a0:09:93:a6:96:e7:a3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d253def4-3670-4413-bdbc-3f4b3451e8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bd:14:a4:9a:3d:4c:3a:ee:98:bd:a7:f2:99: 81:bf:95:b9:39:19:30:c3:96:1d:9d:62:87:3e:f0: 70:b0:e0:a2:07:d0:64:a6:4b:80:49:7a:7d:1f:ae: 68:fa:97:8b:5e:58:85:31:ff:82:6b:53:ba:cd:1b: cd:e4:61:3d:9c:2d:ba:09:50:b5:0c:cf:87:55:00: 06:0a:67:95:82:c3:67:85:36:a1:65:21:6d:c2:0f: 9b:3f:9d:07:35:15:b9:ff:2c:03:d0:7f:d2:96:75: 9e:3d:ac:44:01:71:74:c8:07:d1:37:21:23:ec:89: 13:4f:e5:34:6e:91:f6:d4:d3:e3:bd:61:c0:29:bd: 49:a8:c4:63:9b:00:2a:f2:69:07:42:41:fd:14:1b: c6:42:1c:7b:6e:8d:62:95:da:82:71:b8:ab:91:0a: cb:0a:b8:19:53:d7:ae:ba:b8:52:64:77:0f:bf:c0: a7:e9:13:ed:a0:a1:d1:9c:91:38:8e:3d:26:ce:ef: 56:f1:d5:87:95:da:ec:2d:e9:07:91:c1:19:39:ee: fe:d8:00:44:14:9d:49:51:d4:03:f0:c3:64:ea:ac: 9b:ec:41:8e:1f:cd:84:2b:29:bb:21:fc:f5:30:0d: f9:02:5b:b7:16:1f:26:fd:18:d3:2e:a7:ec:5a:b1: 59:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EE:AF:35:E4:A3:7A:05:21:4D:F0:B7:15:90:77:2C:37:4C:2A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/08c3987a-1016-3546-9a9f-6da72edf1b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl X509v3 Authority Key Identifier: keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer sbgp-ipAddrBlock: critical IPv6: 2604:4600:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c5:6f:32:8e:ee:0e:4f:d7:e7:99:7a:39:50:98:a2:f1:68: 4f:bf:84:8f:53:be:f2:77:11:f7:89:79:05:cd:a7:01:bf:62: 3f:d1:a7:73:9f:c7:03:ff:33:5d:13:6d:0e:61:22:f7:5b:43: 5c:11:4e:c9:b0:56:3c:8e:d4:39:82:44:c7:38:fc:df:91:5a: 17:b0:81:36:9b:cf:46:44:dc:66:cc:08:ff:f3:83:53:a6:5d: 59:8c:0c:0e:19:7b:5c:04:8d:59:b1:d9:4d:dd:61:6f:91:00: a3:88:5c:74:55:f7:ac:93:39:b8:9c:61:85:6c:d0:3d:43:b4: dd:d8:e7:a2:cb:bc:9e:53:08:b2:5a:a5:b7:06:bb:91:bd:0c: ce:ee:1c:cb:c8:25:23:f3:ef:dc:30:1c:14:2a:69:96:2a:ad: de:74:30:8d:ed:11:59:16:b1:2f:fa:65:68:52:d8:1e:c2:b2: 55:99:6b:69:b4:04:ef:d5:8a:13:82:77:ef:50:ce:47:66:c4: 62:30:4e:cf:40:70:ba:59:ce:10:b4:68:ed:bb:96:e9:19:2a: be:65:82:93:1a:3a:39:db:80:d7:f6:69:51:65:fb:e0:7e:bf: c8:21:4d:a5:fb:9c:6e:1e:92:b5:fc:61:5d:75:11:7d:05:af: 42:db:53:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCkfDoAmTppbno/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgwZTY4ZDItNTg4My00MjMzLTlmMTctOTkyYTJjYTcx ZTJiMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDI1M2RlZjQtMzY3MC00NDEzLWJkYmMtM2Y0YjM0NTFlOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp70UpJo9TDrumL2n8pmBv5W5ORkww5YdnWKH PvBwsOCiB9BkpkuASXp9H65o+peLXliFMf+Ca1O6zRvN5GE9nC26CVC1DM+HVQAG CmeVgsNnhTahZSFtwg+bP50HNRW5/ywD0H/SlnWePaxEAXF0yAfRNyEj7IkTT+U0 bpH21NPjvWHAKb1JqMRjmwAq8mkHQkH9FBvGQhx7bo1ildqCcbirkQrLCrgZU9eu urhSZHcPv8Cn6RPtoKHRnJE4jj0mzu9W8dWHldrsLekHkcEZOe7+2ABEFJ1JUdQD 8MNk6qyb7EGOH82EKym7Ifz1MA35Alu3Fh8m/RjTLqfsWrFZNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHXurzXko3oFIU3wtxWQdyw3TCocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBl NjhkMi01ODgzLTQyMzMtOWYxNy05OTJhMmNhNzFlMmIvMDhjMzk4N2EtMTAxNi0z NTQ2LTlhOWYtNmRhNzJlZGYxYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDgwZTY4ZDItNTg4My00MjMzLTlm MTctOTkyYTJjYTcxZTJiLzQ4MGU2OGQyLTU4ODMtNDIzMy05ZjE3LTk5MmEyY2E3 MWUyYi5jcmwwHwYDVR0jBBgwFoAUJpseaAPDCWnjiuWVpz8zM2aKXwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ODBlNjhkMi01ODgzLTQyMzMtOWYxNy05OTJh MmNhNzFlMmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRGAACq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELFbzKO7g5P1+eZejlQmKLxaE+/hI9TvvJ3EfeJeQXNpwG/Yj/R p3OfxwP/M10TbQ5hIvdbQ1wRTsmwVjyO1DmCRMc4/N+RWhewgTabz0ZE3GbMCP/z g1OmXVmMDA4Ze1wEjVmx2U3dYW+RAKOIXHRV96yTObicYYVs0D1DtN3Y56LLvJ5T CLJapbcGu5G9DM7uHMvIJSPz79wwHBQqaZYqrd50MI3tEVkWsS/6ZWhS2B7CslWZ a2m0BO/VihOCd+9QzkdmxGIwTs9AcLpZzhC0aO27lukZKr5lgpMaOjnbgNf2aVFl ++B+v8ghTaX7nG4ekrX8YV11EX0Fr0LbU9g= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:54 2026 by rpki-client