$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: 1Qel9/ZbK+ZNCjM/fkQM5ESNsNbfN8ZsFKnJg4rRy90= Subject key identifier: D8:E6:5F:F4:C9:67:D7:D4:E6:D2:4A:03:2B:4E:36:C1:00:F5:13:06 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584D44FA43E1D4A34110BB418C80 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:43:e1:d4:a3:41:10:bb:41:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8fd31579-e3d7-4120-ac94-21e6650d34db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:ed:ad:fc:e5:d8:ab:4a:04:95:43:1c:ab: 1e:21:33:d1:d1:85:c3:58:25:1f:e8:3a:4d:18:d1: 91:e7:21:cc:99:d0:7e:46:d9:68:9f:63:db:a9:33: d7:43:03:b0:7d:9e:f1:a3:4e:0b:7c:30:13:4d:4a: 9d:3a:64:c6:7f:ef:52:60:89:5f:1f:0d:83:a7:4b: 8b:4e:ab:22:1e:b3:67:96:d4:bc:f5:18:9f:ff:f6: 70:f0:a5:b9:f8:14:20:77:d7:a2:4e:c9:34:b8:4f: e3:75:53:45:b8:16:85:c8:2e:2d:af:69:1c:84:54: f4:6c:62:01:b8:e4:c9:1b:24:cb:7e:e4:81:88:f8: 98:5e:7d:b9:c2:61:e1:86:2f:22:b8:5e:06:38:b6: 9f:65:9d:0f:cd:4a:c8:23:f9:ed:0d:0a:37:5f:b5: 17:74:c5:ad:ac:f2:4a:be:f7:2b:be:70:8f:9e:21: 0d:1c:36:60:f5:f7:6f:af:aa:58:79:af:19:e8:2f: 3d:6b:40:b3:90:81:e4:1a:0d:53:69:88:5d:b0:28: 5b:49:aa:ca:d1:69:7f:e7:aa:7a:7f:dc:b5:49:a0: b9:85:5d:39:9c:c3:39:a7:6e:2e:40:4c:ff:cf:89: dc:f0:db:6b:d9:b8:ca:ee:43:23:05:65:5f:d6:9b: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E6:5F:F4:C9:67:D7:D4:E6:D2:4A:03:2B:4E:36:C1:00:F5:13:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d4:d1:0d:55:55:c8:ec:a9:d3:cd:79:5c:26:49:92:75:26: 88:91:7d:01:77:b9:ce:49:be:15:a4:0e:9e:e1:de:5e:33:b5: 28:78:99:f8:8e:50:41:db:84:8c:84:33:e9:f2:59:8e:24:86: 0b:8f:f2:85:04:59:37:26:a8:a1:54:9d:a9:ba:60:5d:4d:a0: ce:e6:0d:78:85:3c:f0:64:ab:e3:9e:07:f5:42:33:9b:c2:9e: 61:4d:c8:fe:ac:ad:b2:ec:d6:93:b9:3c:fa:e3:7c:6c:32:58: 6a:46:a0:e9:bf:ef:08:55:91:69:b0:d8:e5:c4:e3:7e:88:0a: 65:7a:05:0e:74:f3:ae:b4:c9:df:66:52:dd:63:55:11:f7:62: 54:fc:ab:d4:35:5e:5e:7a:3a:9c:90:1a:b2:9c:0b:0e:5e:a1: 3c:ba:aa:0a:ac:be:bb:c8:3a:fb:1a:03:f2:a7:08:33:1b:ff: 77:54:8e:c0:cf:04:80:de:e2:df:f0:89:36:dd:02:e4:00:53: 51:a9:7a:a0:86:26:32:85:3b:80:34:43:18:b9:be:e0:da:26: b8:0b:22:03:3c:9e:31:21:5a:cd:9a:e4:33:4b:28:e9:f9:b5: 1c:4e:55:98:01:a7:6e:4b:3a:09:1f:21:e4:35:0d:fc:05:c8: 3c:de:46:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+kPh1KNBELtBjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGZkMzE1NzktZTNkNy00MTIwLWFjOTQtMjFlNjY1MGQzNGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n3trfzl2KtKBJVDHKseITPR0YXDWCUf6DpN GNGR5yHMmdB+Rtlon2PbqTPXQwOwfZ7xo04LfDATTUqdOmTGf+9SYIlfHw2Dp0uL TqsiHrNnltS89Rif//Zw8KW5+BQgd9eiTsk0uE/jdVNFuBaFyC4tr2kchFT0bGIB uOTJGyTLfuSBiPiYXn25wmHhhi8iuF4GOLafZZ0PzUrII/ntDQo3X7UXdMWtrPJK vvcrvnCPniENHDZg9fdvr6pYea8Z6C89a0CzkIHkGg1TaYhdsChbSarK0Wl/56p6 f9y1SaC5hV05nMM5p24uQEz/z4nc8Ntr2bjK7kMjBWVf1puiHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNjmX/TJZ9fU5tJKAytONsEA9RMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHU0Q1VVcjsqdPNeVwmSZJ1JoiRfQF3uc5JvhWkDp7h3l4ztSh4 mfiOUEHbhIyEM+nyWY4khguP8oUEWTcmqKFUnam6YF1NoM7mDXiFPPBkq+OeB/VC M5vCnmFNyP6srbLs1pO5PPrjfGwyWGpGoOm/7whVkWmw2OXE436ICmV6BQ508660 yd9mUt1jVRH3YlT8q9Q1Xl56OpyQGrKcCw5eoTy6qgqsvrvIOvsaA/KnCDMb/3dU jsDPBIDe4t/wiTbdAuQAU1GpeqCGJjKFO4A0Qxi5vuDaJrgLIgM8njEhWs2a5DNL KOn5tRxOVZgBp25LOgkfIeQ1DfwFyDzeRo4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:47 2026 by rpki-client