$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa File: 0f4421e9-f24b-3fb4-80a3-278119725959.roa (raw, json) Hash identifier: /zqOVgsXFEdOJ4nyhYvrPcuTdrZI2TkxASTCaTNRrdo= Subject key identifier: BA:A7:4E:6F:13:34:FD:53:9E:0E:51:29:E1:4E:D8:76:07:31:17:42 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584D143D7E5012DC5E185DE41340 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 4213 IP address blocks: 2607:f820::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7e:50:12:dc:5e:18:5d:e4:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=bbbc6135-1393-4dc3-8892-c3e0594a2d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:00:77:49:5d:51:ee:f9:be:98:8d:48:b7: ff:1a:80:2a:f4:77:e4:d7:44:c8:a4:78:34:d3:07: e4:71:bf:44:98:7f:d7:2a:92:df:a5:b8:05:31:18: 99:62:80:74:82:9d:3f:42:8f:ca:20:6a:46:a1:d5: 4d:5f:27:a1:c1:66:6f:5d:1e:33:1f:ed:fb:5e:29: 09:e5:a3:7e:f6:3f:a4:f9:ec:93:21:d4:11:42:a5: 77:5f:e2:62:86:73:c9:ea:14:cd:ee:6d:a9:c2:5a: 54:21:b2:44:bb:62:ae:f1:dd:75:63:38:15:18:2d: 90:9e:44:f0:15:a1:2e:24:7f:b7:d3:9f:ed:65:b9: 8f:a1:4e:5c:98:4a:61:a6:82:69:56:bc:af:28:20: c7:85:01:ea:a0:a5:21:f1:17:d7:42:91:3f:12:11: 1a:91:f7:8a:03:be:0b:5f:7d:38:69:ed:87:3e:64: ea:86:de:7d:06:b8:a0:5c:de:6b:55:4b:38:70:4a: 43:48:17:e8:3f:0f:83:50:7f:d9:c9:d6:ff:a6:5d: a4:0e:99:84:e1:81:e1:77:a3:65:35:05:bf:cc:1e: 50:c3:11:68:e8:1b:a4:e2:6a:c5:23:d6:39:17:36: e0:68:eb:f3:a9:61:7b:87:87:7d:f0:51:1c:d8:85: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A7:4E:6F:13:34:FD:53:9E:0E:51:29:E1:4E:D8:76:07:31:17:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/0f4421e9-f24b-3fb4-80a3-278119725959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f820::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bc:de:a2:ff:66:a1:f3:e2:1d:ae:10:6f:6e:a4:a7:3e:12: 6f:9d:1f:40:3b:4a:7e:04:9b:42:cf:8f:36:c2:12:d3:55:74: 67:82:56:b2:8c:57:5b:57:31:5c:bf:4e:10:7f:75:94:9e:04: fb:53:ce:87:9e:7e:77:80:92:52:bb:bc:6b:3d:1f:9f:6d:e6: de:d1:ce:c4:dc:54:e3:48:78:bd:d1:57:7a:7a:6d:48:17:a1: fe:3e:da:66:d8:3e:c9:c2:52:81:12:97:9f:82:59:93:78:69: e5:65:58:44:03:f5:c3:e8:c5:45:83:1b:09:05:49:c3:7a:4d: 02:02:f5:98:43:ad:82:ad:a3:78:2f:c1:e0:2d:87:3a:29:1b: 19:cf:f6:85:c7:91:ff:67:0e:13:bc:07:0d:8a:ba:81:fd:90: 74:3b:ce:54:de:c5:47:5c:61:ff:8d:57:71:8c:41:9f:03:b7: 5e:c4:ca:9c:5c:1b:d9:40:68:db:32:63:df:36:1d:4c:c1:91: 6a:43:fc:06:9a:08:fd:5e:33:3d:35:53:10:50:55:2b:51:5d: 4c:eb:89:03:61:bd:93:c8:da:5d:b3:a3:24:c7:25:be:7b:58: e4:4b:bd:b8:13:54:b6:dc:4a:4b:7a:7d:9d:17:46:47:19:0d: 2c:78:33:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPX5QEtxeGF3kE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YmJiYzYxMzUtMTM5My00ZGMzLTg4OTItYzNlMDU5NGEyZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr58Ad0ldUe75vpiNSLf/GoAq9Hfk10TIpHg0 0wfkcb9EmH/XKpLfpbgFMRiZYoB0gp0/Qo/KIGpGodVNXyehwWZvXR4zH+37XikJ 5aN+9j+k+eyTIdQRQqV3X+JihnPJ6hTN7m2pwlpUIbJEu2Ku8d11YzgVGC2QnkTw FaEuJH+305/tZbmPoU5cmEphpoJpVryvKCDHhQHqoKUh8RfXQpE/EhEakfeKA74L X304ae2HPmTqht59BrigXN5rVUs4cEpDSBfoPw+DUH/Zydb/pl2kDpmE4YHhd6Nl NQW/zB5QwxFo6Buk4mrFI9Y5FzbgaOvzqWF7h4d98FEc2IXF7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLqnTm8TNP1Tng5RKeFO2HYHMRdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvMGY0NDIxZTktZjI0Yi0z ZmI0LTgwYTMtMjc4MTE5NzI1OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf4IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzvN6i/2ah8+IdrhBvbqSnPhJvnR9AO0p+BJtCz482whLTVXRnglay jFdbVzFcv04Qf3WUngT7U86Hnn53gJJSu7xrPR+fbebe0c7E3FTjSHi90Vd6em1I F6H+Ptpm2D7JwlKBEpefglmTeGnlZVhEA/XD6MVFgxsJBUnDek0CAvWYQ62CraN4 L8HgLYc6KRsZz/aFx5H/Zw4TvAcNirqB/ZB0O85U3sVHXGH/jVdxjEGfA7dexMqc XBvZQGjbMmPfNh1MwZFqQ/wGmgj9XjM9NVMQUFUrUV1M64kDYb2TyNpds6MkxyW+ e1jkS724E1S23EpLen2dF0ZHGQ0seDN9 -----END CERTIFICATE-----Generated at Thu Mar 26 21:12:37 2026 by rpki-client