$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa File: 9f2004b3-f46d-3e83-a948-cc255fe3a018.roa (raw, json) Hash identifier: sox0nnLlwza7+BUxySMV8ubvfHa3WY1sUXCux6DvEcI= Subject key identifier: 8F:C1:BA:CC:D2:16:22:E0:72:55:45:BF:C7:F5:0E:AD:C2:BF:FC:7A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D492A701A91FE5F0683FCA480 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 62651 IP address blocks: 2604:fc80:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:70:1a:91:fe:5f:06:83:fc:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=635dad44-3b5b-4311-ae7b-7d393767824a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:6f:73:6e:0e:ce:5b:c0:d1:e6:f8:52:26: cc:ee:dc:ac:55:3c:6e:b2:46:97:7a:70:59:f3:22: 62:38:8b:f9:a0:55:03:87:b4:32:05:e6:ac:86:ca: b7:32:f6:83:76:30:40:e5:cb:aa:b9:4d:2b:1e:4f: b5:91:48:bf:9b:df:df:af:c5:2e:f8:99:5b:32:3a: e2:13:d3:6b:64:56:9f:20:4b:f4:6b:bd:05:06:95: 51:18:e1:48:ff:a0:09:16:99:7f:84:69:06:72:4c: f5:3b:f9:9a:e5:dc:93:cc:63:92:27:f0:3e:1d:a4: ec:77:77:d4:42:82:3b:3a:b9:f9:5c:72:d8:30:15: c6:fe:40:1e:73:44:af:aa:35:94:a7:1e:24:c0:97: e9:7f:ec:90:03:c6:2e:bf:cf:59:24:aa:72:7f:db: 9d:65:e9:8d:23:bb:8d:90:12:53:27:96:63:0f:b9: 63:a6:f1:c9:98:db:0d:1d:dc:89:fb:1d:62:fe:07: d4:7e:8c:d4:cd:1c:5e:d4:3b:cb:16:0c:bd:f6:17: 9b:45:ed:7c:75:ca:50:6a:2a:7c:ec:e5:d5:96:ca: 57:e4:4f:70:a5:bf:c8:7a:4f:ac:bf:1a:0b:52:b1: 64:72:4e:09:5b:1f:9c:0d:ab:8a:0b:48:65:d3:04: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C1:BA:CC:D2:16:22:E0:72:55:45:BF:C7:F5:0E:AD:C2:BF:FC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/9f2004b3-f46d-3e83-a948-cc255fe3a018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:fc80:2800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:95:91:4b:2b:6f:d4:0d:3a:5b:ac:56:89:56:56:76:c1:36: 06:17:92:f2:35:62:e5:cb:cc:9f:6d:24:71:9e:da:34:d4:9b: b0:ff:10:12:e4:38:bc:18:0f:60:eb:e5:3d:dc:51:88:5b:c2: fe:48:29:57:7c:a9:57:d5:53:80:fd:01:0c:e4:f0:5d:16:79: 73:d8:06:68:1a:b9:0e:d2:e9:1d:50:2e:f4:0b:ef:44:8d:63: 71:f5:22:2d:d1:2e:03:7f:a3:37:85:24:dd:42:1e:25:1f:68: 98:cc:16:d3:2b:70:3e:f8:52:63:41:8d:a2:cb:74:ed:d8:bc: f8:63:21:7a:f1:ea:54:b8:e3:e4:b3:c2:9d:9d:cb:65:2f:49: 49:db:fc:95:75:02:fb:a0:10:74:7a:ca:cf:73:42:a7:14:6a: f7:98:b0:78:12:10:08:7d:92:a5:50:ef:fe:70:4a:02:6a:c4: 87:3f:b8:e5:17:f8:43:4b:84:80:0e:f3:2c:7c:75:bd:cb:a9: 95:40:a2:a8:19:b3:2c:84:59:02:01:c3:c1:26:f8:23:f3:76: d7:d8:95:bb:38:b7:e4:30:73:50:a0:9d:86:34:41:cc:93:82: 0a:1f:e5:83:c3:9a:90:38:e6:b3:9d:f3:2c:e5:e3:91:b2:04: 33:63:0c:77 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1JKnAakf5fBoP8pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NjM1ZGFkNDQtM2I1Yi00MzExLWFlN2ItN2QzOTM3Njc4MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjElvc24OzlvA0eb4UibM7tysVTxuskaXenBZ 8yJiOIv5oFUDh7QyBeashsq3MvaDdjBA5cuquU0rHk+1kUi/m9/fr8Uu+JlbMjri E9NrZFafIEv0a70FBpVRGOFI/6AJFpl/hGkGckz1O/ma5dyTzGOSJ/A+HaTsd3fU QoI7Orn5XHLYMBXG/kAec0SvqjWUpx4kwJfpf+yQA8Yuv89ZJKpyf9udZemNI7uN kBJTJ5ZjD7ljpvHJmNsNHdyJ+x1i/gfUfozUzRxe1DvLFgy99hebRe18dcpQaip8 7OXVlspX5E9wpb/Iek+svxoLUrFkck4JWx+cDauKC0hl0wS4DQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI/BuszSFiLgclVFv8f1Dq3Cv/x6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOWYyMDA0YjMtZjQ2ZC0z ZTgzLWE5NDgtY2MyNTVmZTNhMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gCgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR5WRSytv1A06W6xWiVZWdsE2BheS8jVi5cvMn20kcZ7aNNSbsP8Q EuQ4vBgPYOvlPdxRiFvC/kgpV3ypV9VTgP0BDOTwXRZ5c9gGaBq5DtLpHVAu9Avv RI1jcfUiLdEuA3+jN4Uk3UIeJR9omMwW0ytwPvhSY0GNost07di8+GMhevHqVLjj 5LPCnZ3LZS9JSdv8lXUC+6AQdHrKz3NCpxRq95iweBIQCH2SpVDv/nBKAmrEhz+4 5Rf4Q0uEgA7zLHx1vcuplUCiqBmzLIRZAgHDwSb4I/N219iVuzi35DBzUKCdhjRB zJOCCh/lg8OakDjms53zLOXjkbIEM2MMdw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:50:16 2026 by rpki-client