$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa File: 24e9dd65-e200-396a-9d9a-a026376581d6.roa (raw, json) Hash identifier: vnNq/RIkl3qmveAEVES81zVsvb35gQASDnHmDODMupM= Subject key identifier: 80:1B:BF:4D:B8:E5:0B:F6:FF:33:16:05:53:9C:4C:F4:D3:36:72:AB Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a Certificate serial: 010D0C9F4328584D3F64E9462CAC13B51BDA3A40 Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 42 IP address blocks: 2620:0:870::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e9:46:2c:ac:13:b5:1b:da:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f09e84d3-2464-4655-bdfc-3950fc3905a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4c:93:bc:62:05:4a:14:f3:7a:24:c8:a8:57: 73:04:31:5a:93:71:3e:89:0b:85:db:8b:b7:5f:31: 02:8f:2e:3c:ad:49:a2:6d:c6:54:71:c0:5b:44:f4: d0:74:30:42:00:dd:1d:06:56:29:a0:77:d7:f3:cb: 4c:5a:a2:fd:20:fb:6a:f8:c9:fe:93:f1:94:78:ec: 01:48:e1:46:e1:f1:e2:28:d3:d0:41:15:24:ac:52: 98:21:d2:49:65:c2:e9:55:10:66:1e:11:a4:fd:76: 21:a1:cb:06:6e:c3:1c:84:28:09:dd:80:29:74:1f: 9b:d0:d3:51:e0:3d:d5:17:5d:99:ef:b4:da:9d:38: 46:f8:c6:1c:ed:70:ff:59:7a:fa:23:7f:ec:eb:69: f6:dc:50:e5:b3:da:f4:a4:48:ee:1a:c3:0c:14:d0: 12:50:28:92:73:08:8a:15:5a:ff:a0:d5:8c:6f:50: 61:73:de:d8:c3:e7:7f:16:d4:10:52:cb:1b:01:6b: 6a:65:9f:f5:87:bb:94:46:65:03:98:45:0c:d2:a0: 16:70:15:3e:31:35:e6:5f:40:77:26:72:de:3a:14: 83:68:5c:df:57:84:65:f4:82:0e:08:df:ec:b6:da: 48:6f:9d:ce:02:31:2a:37:ff:f5:8f:e4:8b:47:29: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1B:BF:4D:B8:E5:0B:F6:FF:33:16:05:53:9C:4C:F4:D3:36:72:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/24e9dd65-e200-396a-9d9a-a026376581d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl X509v3 Authority Key Identifier: keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:870::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:78:51:01:57:15:eb:a7:71:25:39:f2:c2:06:5f:b5:77:6b: a9:e1:81:3a:fb:bd:05:25:50:d3:e4:c1:d7:89:dc:09:37:c6: d6:a4:f1:38:f5:e9:37:b3:cc:19:6c:5a:84:2e:16:e1:02:aa: e8:4a:69:af:04:aa:cd:98:bc:53:91:e2:9c:23:15:6b:88:ee: d9:d3:6b:b1:d3:8c:64:05:30:f7:b4:8d:d2:52:e9:53:5b:e7: 53:71:1b:a7:4f:45:4a:38:88:c6:a1:5b:21:81:26:bb:51:bf: 7c:ff:29:69:fa:9b:32:27:40:fc:1c:1c:d9:89:61:c7:50:9b: 35:5e:e3:a0:37:e2:db:7f:8d:1c:ad:97:4b:b9:6b:a7:a7:94: da:e9:65:7b:29:f4:b9:1a:da:36:f2:5a:36:47:0b:49:4a:8d: 2e:9b:e3:b7:a8:fe:1b:e5:22:4d:0a:28:d1:dd:b2:92:48:1d: 9f:cd:2a:06:81:e7:00:bb:8f:87:b1:fc:bb:d3:72:d1:c6:07: 4e:5a:8a:c5:7a:36:22:d0:94:39:7c:96:d7:33:c5:f6:ec:3c: b1:ed:1b:bc:c2:52:4a:2d:32:82:fb:11:09:f6:75:9e:4f:ee: 01:05:08:4f:29:9c:55:be:30:65:b4:ef:0d:9c:69:01:48:07: d8:28:be:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZOlGLKwTtRvaOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5MTljMWUtMjRjOC00MzBlLTg4MTEtOTEzODNjMzFi OTZhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjA5ZTg0ZDMtMjQ2NC00NjU1LWJkZmMtMzk1MGZjMzkwNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0yTvGIFShTzeiTIqFdzBDFak3E+iQuF24u3 XzECjy48rUmibcZUccBbRPTQdDBCAN0dBlYpoHfX88tMWqL9IPtq+Mn+k/GUeOwB SOFG4fHiKNPQQRUkrFKYIdJJZcLpVRBmHhGk/XYhocsGbsMchCgJ3YApdB+b0NNR 4D3VF12Z77TanThG+MYc7XD/WXr6I3/s62n23FDls9r0pEjuGsMMFNASUCiScwiK FVr/oNWMb1Bhc97Yw+d/FtQQUssbAWtqZZ/1h7uURmUDmEUM0qAWcBU+MTXmX0B3 JnLeOhSDaFzfV4Rl9IIOCN/sttpIb53OAjEqN//1j+SLRym8/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIAbv0245Qv2/zMWBVOcTPTTNnKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkx OWMxZS0yNGM4LTQzMGUtODgxMS05MTM4M2MzMWI5NmEvMjRlOWRkNjUtZTIwMC0z OTZhLTlkOWEtYTAyNjM3NjU4MWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ5MTljMWUtMjRjOC00MzBlLTg4 MTEtOTEzODNjMzFiOTZhL2Q0OTE5YzFlLTI0YzgtNDMwZS04ODExLTkxMzgzYzMx Yjk2YS5jcmwwHwYDVR0jBBgwFoAU3yQUbb7Pe6ejeQwXRpVEgBR4KTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkxOWMxZS0yNGM4LTQzMGUtODgxMS05MTM4 M2MzMWI5NmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAAAhw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALN4UQFXFeuncSU58sIGX7V3a6nhgTr7vQUlUNPkwdeJ3Ak3xtak 8Tj16TezzBlsWoQuFuECquhKaa8Eqs2YvFOR4pwjFWuI7tnTa7HTjGQFMPe0jdJS 6VNb51NxG6dPRUo4iMahWyGBJrtRv3z/KWn6mzInQPwcHNmJYcdQmzVe46A34tt/ jRytl0u5a6enlNrpZXsp9Lka2jbyWjZHC0lKjS6b47eo/hvlIk0KKNHdspJIHZ/N KgaB5wC7j4ex/LvTctHGB05aisV6NiLQlDl8ltczxfbsPLHtG7zCUkotMoL7EQn2 dZ5P7gEFCE8pnFW+MGW07w2caQFIB9govsA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:07 2026 by rpki-client