$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa File: 54a4332a-b65d-3502-aaa9-76ed79433c4f.roa (raw, json) Hash identifier: Z9atkB1HU3FLf2xNQT94ZL7B7fPcbVCVg/QpQJOdt4Y= Subject key identifier: 64:BE:3E:16:70:77:2B:72:94:07:6F:E2:F6:74:82:3E:06:CD:93:F8 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584D386A4F15DDA59AC5C9EBD800 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 33724 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4f:15:dd:a5:9a:c5:c9:eb:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=a5fe5212-c178-4ba5-a156-2446d4be2d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:c0:99:7d:96:98:6e:98:30:21:8f:86:e0: 40:39:ce:ae:4a:e1:d3:f3:1b:74:be:98:8d:59:12: 05:ba:b0:74:a0:17:f8:1e:91:93:96:fa:12:7c:ec: de:79:6b:e5:c3:3b:e0:e3:01:7f:af:90:d7:11:5f: 1a:2e:49:8f:ff:5d:59:0a:cd:4d:bc:76:f8:98:b1: 21:f3:d5:d4:a8:d3:c6:d8:60:19:15:a9:1d:12:a6: e7:9c:ea:00:cf:f6:4b:73:75:8e:82:65:59:d9:54: 2f:3a:d7:f8:06:05:72:01:0f:c5:1d:2d:ce:c9:b6: 5c:a2:a6:fe:0a:06:40:58:83:00:41:97:c7:01:c3: f3:2f:65:f8:aa:b9:40:34:96:a8:31:33:f0:2e:9a: b6:c3:0f:9b:37:67:aa:e2:f2:2f:54:24:0d:24:8f: 4b:7e:00:77:d2:9f:21:17:7e:dd:b4:b8:15:22:9c: 68:7c:c5:ff:e4:c9:34:a1:ce:86:2d:42:15:2a:f6: 41:e1:d9:07:35:4a:a6:5e:80:46:ef:40:f9:44:a5: ad:43:6e:f0:45:b6:53:b4:c2:88:36:85:e4:40:72: 0a:76:74:9b:66:a1:5d:4a:26:2a:b7:6c:51:b9:f5: 4d:b5:ea:cd:11:cf:1f:35:24:1b:3a:7f:68:b9:aa: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BE:3E:16:70:77:2B:72:94:07:6F:E2:F6:74:82:3E:06:CD:93:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/54a4332a-b65d-3502-aaa9-76ed79433c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:07:51:72:a3:8d:6e:6f:62:f5:cc:98:7a:64:27:cf:03:d1: c7:44:ee:55:28:4b:1b:3b:11:10:a7:c3:c1:02:e6:08:ac:f3: bb:e5:26:f2:20:61:d2:a3:9b:ff:da:ef:c7:14:b9:15:7c:4e: e9:00:a1:b4:2f:c8:ab:f5:13:12:1e:4f:11:d0:f8:da:12:6f: 1b:79:12:b6:54:2e:a3:03:ab:7e:c2:1d:1d:9c:18:ac:ed:17: 53:e9:1d:44:85:1b:aa:70:3c:38:3d:5a:30:07:01:43:ab:b8: 23:48:49:44:57:4e:fb:78:d1:82:e0:c4:77:df:36:89:ad:1d: 84:42:53:31:72:dd:a4:37:0f:d4:7b:dc:4f:08:69:a7:12:ee: 5e:49:3b:5a:86:90:06:3b:f5:b0:e9:1a:f7:e4:e5:03:1c:83: 90:4f:a6:6d:f2:f5:8a:2e:4f:5e:6b:34:84:de:26:fa:de:35: 3f:00:20:f3:77:c2:c4:64:b2:dd:d1:59:b7:71:7f:ad:99:45: d8:1a:e2:9b:d8:73:f8:e1:25:53:b1:fa:8c:c7:02:28:4d:99: 84:7d:c8:e5:cc:ce:25:45:f2:80:85:2f:bc:9a:ff:65:c2:6d: bb:c7:d2:4b:be:18:50:74:01:99:e3:69:57:6f:fc:51:9d:2a: 6a:94:37:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE04ak8V3aWaxcnr2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YTVmZTUyMTItYzE3OC00YmE1LWExNTYtMjQ0NmQ0YmUyZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmrAmX2WmG6YMCGPhuBAOc6uSuHT8xt0vpiN WRIFurB0oBf4HpGTlvoSfOzeeWvlwzvg4wF/r5DXEV8aLkmP/11ZCs1NvHb4mLEh 89XUqNPG2GAZFakdEqbnnOoAz/ZLc3WOgmVZ2VQvOtf4BgVyAQ/FHS3OybZcoqb+ CgZAWIMAQZfHAcPzL2X4qrlANJaoMTPwLpq2ww+bN2eq4vIvVCQNJI9LfgB30p8h F37dtLgVIpxofMX/5Mk0oc6GLUIVKvZB4dkHNUqmXoBG70D5RKWtQ27wRbZTtMKI NoXkQHIKdnSbZqFdSiYqt2xRufVNterNEc8fNSQbOn9ouaoXUwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGS+PhZwdytylAdv4vZ0gj4GzZP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNTRhNDMzMmEtYjY1ZC0z NTAyLWFhYTktNzZlZDc5NDMzYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZB1Fyo41ub2L1zJh6ZCfPA9HHRO5VKEsbOxEQp8PBAuYIrPO75Sby IGHSo5v/2u/HFLkVfE7pAKG0L8ir9RMSHk8R0PjaEm8beRK2VC6jA6t+wh0dnBis 7RdT6R1EhRuqcDw4PVowBwFDq7gjSElEV077eNGC4MR33zaJrR2EQlMxct2kNw/U e9xPCGmnEu5eSTtahpAGO/Ww6Rr35OUDHIOQT6Zt8vWKLk9eazSE3ib63jU/ACDz d8LEZLLd0Vm3cX+tmUXYGuKb2HP44SVTsfqMxwIoTZmEfcjlzM4lRfKAhS+8mv9l wm27x9JLvhhQdAGZ42lXb/xRnSpqlDf8 -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:27 2026 by rpki-client