$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa File: 3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa (raw, json) Hash identifier: lBEKHHhwOECGF1A/5bD5eXhHxBFy25uqX4bba7NirMo= Subject key identifier: 9D:12:28:1C:89:8D:F8:CE:E5:67:61:7F:A0:FB:39:16:05:50:C0:07 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584D492A634D0DFB4EB00EBDF780 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 64271 IP address blocks: 2604:d6c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:63:4d:0d:fb:4e:b0:0e:bd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=a754af8c-78d9-44e4-b63b-db92ed40da89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:44:be:12:8a:a4:d0:a6:ab:4f:c9:09:79: 26:7b:72:31:8f:d6:24:4f:34:7d:9e:d0:6f:cb:c3: 16:19:bb:9c:01:86:8e:bf:e9:3a:63:2d:83:65:1e: 8c:93:26:83:51:43:83:5b:8f:d6:4f:24:3e:79:60: 11:9f:4d:d8:79:dc:e1:9e:a1:58:93:b5:01:8b:e3: be:0a:47:df:4d:72:ae:61:1f:fe:e8:22:5e:f0:54: c9:01:ec:8d:57:29:1f:d1:c1:e0:80:0b:9f:35:68: 21:86:d5:15:1f:3c:c6:c3:a6:ca:68:f3:1f:fb:4b: a0:f2:72:ef:08:77:9c:6e:df:4b:ee:b6:7b:5b:4b: 2d:cf:59:2f:48:69:5f:be:bb:72:96:42:36:b5:fc: 2b:70:9f:b7:ff:eb:9e:64:36:e8:c2:6a:4d:0a:3a: 3a:4f:ef:0e:4d:da:25:15:95:e9:b9:20:80:55:74: c0:13:0d:94:2d:98:61:93:0f:88:a1:df:e8:e5:65: 4a:3e:d4:36:5c:21:6f:d8:b5:87:e2:91:4b:03:e3: e0:26:ac:9d:42:f2:ff:59:20:fd:28:6a:be:a2:b9: fe:69:4c:d2:ad:71:da:c5:8d:fe:55:74:3d:c3:f0: 01:b6:dd:70:a6:09:72:33:02:80:bf:31:4c:f4:3a: 5c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:28:1C:89:8D:F8:CE:E5:67:61:7F:A0:FB:39:16:05:50:C0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/3fbfb145-67c5-31fc-9bdf-2e9ea5c8defc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv6: 2604:d6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c1:d2:a1:98:4d:30:27:10:8d:88:6f:5d:a9:86:be:3b:e7: 8d:b9:a4:ac:3f:03:09:31:d7:00:fb:3c:38:11:dc:c0:e5:e3: 95:60:fc:f3:66:9b:31:a3:13:fd:25:ee:42:f6:1d:7d:c1:c9: 23:6b:5e:1b:f6:db:69:e6:fd:70:b6:8d:af:6b:39:92:95:d6: b8:68:b8:69:5d:a6:f5:3b:51:9e:72:5f:d7:e7:00:90:b7:77: a5:ea:00:f8:91:48:1b:1b:0c:b1:8b:3b:da:87:26:5e:30:c2: 5d:00:51:ab:b0:ca:78:93:3d:83:3f:3e:c0:b4:2c:0c:1a:31: be:58:14:0f:49:b6:c1:40:76:dd:47:10:63:4d:4f:75:d9:7e: 42:9a:29:a3:38:6d:ad:3e:74:dc:42:55:6c:09:86:c2:8a:2f: 18:e3:b7:5b:f9:3a:9c:fc:06:88:95:b3:9c:f8:9e:60:a9:72: f5:90:71:4c:42:4f:39:ba:ff:8f:8c:3c:95:09:21:23:3f:70: 7b:e8:8a:97:c1:43:6b:37:ad:ab:67:49:51:08:4a:da:1f:0d: de:0c:cd:24:14:e5:6f:b9:b1:a2:8d:f2:c3:2a:a0:7c:1c:d2: 66:ba:dc:4e:d7:85:ae:e3:cc:a5:52:94:60:12:7a:9d:35:bb: 7f:ae:ae:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKmNNDftOsA6994AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YTc1NGFmOGMtNzhkOS00NGU0LWI2M2ItZGI5MmVkNDBkYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtdEvhKKpNCmq0/JCXkme3Ixj9YkTzR9ntBv y8MWGbucAYaOv+k6Yy2DZR6MkyaDUUODW4/WTyQ+eWARn03YedzhnqFYk7UBi+O+ CkffTXKuYR/+6CJe8FTJAeyNVykf0cHggAufNWghhtUVHzzGw6bKaPMf+0ug8nLv CHecbt9L7rZ7W0stz1kvSGlfvrtylkI2tfwrcJ+3/+ueZDbowmpNCjo6T+8OTdol FZXpuSCAVXTAEw2ULZhhkw+Iod/o5WVKPtQ2XCFv2LWH4pFLA+PgJqydQvL/WSD9 KGq+orn+aUzSrXHaxY3+VXQ9w/ABtt1wpglyMwKAvzFM9DpcfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ0SKByJjfjO5Wdhf6D7ORYFUMAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvM2ZiZmIxNDUtNjdjNS0z MWZjLTliZGYtMmU5ZWE1YzhkZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCywdKhmE0wJxCNiG9dqYa+O+eNuaSsPwMJMdcA+zw4EdzA5eOVYPzz ZpsxoxP9Je5C9h19wckja14b9ttp5v1wto2vazmSlda4aLhpXab1O1Gecl/X5wCQ t3el6gD4kUgbGwyxizvahyZeMMJdAFGrsMp4kz2DPz7AtCwMGjG+WBQPSbbBQHbd RxBjTU912X5CmimjOG2tPnTcQlVsCYbCii8Y47db+Tqc/AaIlbOc+J5gqXL1kHFM Qk85uv+PjDyVCSEjP3B76IqXwUNrN62rZ0lRCEraHw3eDM0kFOVvubGijfLDKqB8 HNJmutxO14Wu48ylUpRgEnqdNbt/rq40 -----END CERTIFICATE-----Generated at Thu Mar 26 10:50:26 2026 by rpki-client