$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa File: 1d291463-b306-352e-828c-b8b107b89019.roa (raw, json) Hash identifier: YpmjgDaF/u4DVb3t3QrJFi6GuL/DxBguSXytk/oEsSg= Subject key identifier: 41:44:56:05:31:54:42:83:C7:2D:9B:FC:BB:DD:A5:0A:35:1D:A3:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D19B4DC705C354EAD119CEAF0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 2606:4700:4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:dc:70:5c:35:4e:ad:11:9c:ea:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=1543fca8-07fe-4690-a9fd-9d4c0254c394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:c4:36:b8:84:b1:22:09:ab:b6:49:d8:e9: b4:e7:3c:5e:7d:33:49:17:77:ed:ff:8b:6e:63:bc: f9:b8:4c:7e:26:bc:50:d5:b8:77:76:6f:66:60:54: d8:f1:a9:6e:fa:31:b1:26:cf:eb:3f:b8:63:30:af: 45:0c:e9:97:14:9b:2d:62:9f:74:a3:55:73:73:18: aa:8f:37:32:2f:82:81:27:5e:70:a1:ad:ac:32:06: 4b:11:e7:dd:c3:a9:a4:49:08:18:ed:27:c5:11:df: 80:bc:e7:0d:a4:7a:53:41:9e:86:ed:ce:d4:68:31: 63:e4:50:71:67:b4:d3:83:e5:91:58:d2:d5:18:fa: 34:57:64:d8:fa:b6:a9:f7:08:24:07:ed:5e:a2:09: 8e:7a:94:80:77:55:fc:9d:bb:36:66:03:39:3e:e1: 08:82:3f:4d:16:e4:01:bb:31:15:8b:8f:40:20:a3: 40:b7:e9:6b:65:7b:80:58:60:60:71:b4:f5:72:e7: 81:f5:56:1a:65:25:fe:dc:3a:64:b1:08:42:a4:3c: 34:fa:29:d0:24:3f:f0:9c:0c:70:9f:8b:d2:6e:7d: b5:12:d3:14:7d:38:ce:56:00:94:af:31:d5:7d:ae: ce:d6:40:07:15:2e:2e:26:06:17:d2:91:e7:cf:cd: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:44:56:05:31:54:42:83:C7:2D:9B:FC:BB:DD:A5:0A:35:1D:A3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ac:cb:b2:72:74:00:a4:d1:5f:dd:cf:a9:fb:8b:b6:10:53: 48:b3:b5:51:a8:e6:5f:78:a7:d0:fc:20:e2:a8:64:b7:3f:c8: 42:9f:7f:c4:fa:f8:60:26:31:4c:28:25:d6:73:91:e7:51:0f: 91:9d:6e:38:b4:93:d3:58:aa:d8:96:4f:91:13:b3:32:88:e0: 01:96:3c:87:63:13:10:10:89:ad:8d:92:75:f0:d4:b9:f0:a6: bf:36:06:27:10:4c:16:c9:76:3f:ea:14:26:b5:b2:44:48:a6: 41:4a:1c:6d:d8:cf:89:28:10:29:02:3f:38:92:a6:e1:ca:ab: 16:51:75:23:b2:97:b2:6e:6b:d2:54:eb:57:65:f0:b5:b3:14: 93:4f:28:06:59:15:fd:aa:30:b2:45:38:81:14:45:74:01:1c: 15:a1:c5:9e:ad:84:82:81:e0:c3:f4:ec:09:47:7d:42:a3:74: e0:20:9d:9b:72:89:33:d0:4f:fd:39:30:0f:69:4c:e6:74:2a: bd:e0:c6:0d:cb:eb:d1:82:01:da:d7:33:7c:75:0b:7f:9f:92: ad:ed:65:4f:34:4d:c2:26:fa:9c:00:ee:69:1b:d0:91:f0:84: 65:23:fd:9b:08:53:33:6c:71:65:cb:90:32:c1:12:0b:f9:59: 26:ed:30:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0ZtNxwXDVOrRGc6vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MTU0M2ZjYTgtMDdmZS00NjkwLWE5ZmQtOWQ0YzAyNTRjMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRjENriEsSIJq7ZJ2Om05zxefTNJF3ft/4tu Y7z5uEx+JrxQ1bh3dm9mYFTY8alu+jGxJs/rP7hjMK9FDOmXFJstYp90o1Vzcxiq jzcyL4KBJ15woa2sMgZLEefdw6mkSQgY7SfFEd+AvOcNpHpTQZ6G7c7UaDFj5FBx Z7TTg+WRWNLVGPo0V2TY+rap9wgkB+1eogmOepSAd1X8nbs2ZgM5PuEIgj9NFuQB uzEVi49AIKNAt+lrZXuAWGBgcbT1cueB9VYaZSX+3DpksQhCpDw0+inQJD/wnAxw n4vSbn21EtMUfTjOVgCUrzHVfa7O1kAHFS4uJgYX0pHnz80/wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFEVgUxVEKDxy2b/LvdpQo1HaOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQyOTE0NjMtYjMwNi0z NTJlLTgyOGMtYjhiMTA3Yjg5MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6sy7JydACk0V/dz6n7i7YQU0iztVGo5l94p9D8IOKoZLc/yEKf f8T6+GAmMUwoJdZzkedRD5Gdbji0k9NYqtiWT5ETszKI4AGWPIdjExAQia2NknXw 1Lnwpr82BicQTBbJdj/qFCa1skRIpkFKHG3Yz4koECkCPziSpuHKqxZRdSOyl7Ju a9JU61dl8LWzFJNPKAZZFf2qMLJFOIEURXQBHBWhxZ6thIKB4MP07AlHfUKjdOAg nZtyiTPQT/05MA9pTOZ0Kr3gxg3L69GCAdrXM3x1C3+fkq3tZU80TcIm+pwA7mkb 0JHwhGUj/ZsIUzNscWXLkDLBEgv5WSbtMCA= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:21 2026 by rpki-client