$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa File: acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa (raw, json) Hash identifier: Q6gOQ3opm7h9At7flY8DqWjk6Pe1Ec6lroKq+HqWt6Y= Subject key identifier: B2:0E:67:4D:E5:55:C8:AE:60:19:D3:EB:2E:0A:2F:E1:94:23:4B:C9 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584D237A67BA7706457D13A37A80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 394002 IP address blocks: 2604:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:67:ba:77:06:45:7d:13:a3:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ec8def89-ffb6-4f72-84d6-6edf84a23186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:6a:33:62:8a:dd:38:8c:9e:59:b1:6b:6f: c7:1c:43:35:bd:22:53:fb:22:fb:89:e1:5b:02:f6: 25:6f:06:7a:ba:de:8b:6c:f0:7c:f4:ac:79:8d:14: 73:3d:2f:b8:34:65:ac:be:e8:14:9f:11:c0:26:b3: 48:75:5a:ea:fa:33:de:e5:6d:03:82:fe:c7:be:0f: b5:11:38:f9:0d:5f:e5:c2:0f:d4:5e:3b:2d:44:08: b7:0d:65:cc:6b:e1:35:ee:b2:11:51:10:62:e7:47: 13:70:5c:14:43:f6:9b:48:70:54:04:36:e3:2e:fa: 2b:a1:f9:25:66:a9:94:2b:11:fd:2f:e1:70:b0:f5: b5:4f:e2:ba:d4:3e:79:66:10:ad:67:51:4b:1e:92: 59:58:13:cc:c6:78:e2:0e:dc:66:a6:cf:a5:e7:23: fa:60:d6:a7:b7:dd:9c:ab:62:2f:96:24:77:a0:6a: f7:98:cd:78:19:9f:61:72:9a:9f:d7:3f:d3:bb:58: 4f:90:ba:63:ea:5d:be:a6:82:48:a8:bd:9a:2c:07: e7:9c:84:4d:03:a8:ca:e2:33:2d:64:3d:6d:64:be: cb:30:c6:fc:cd:ba:94:e6:f9:e0:a2:ce:5e:fc:16: 13:38:e2:c4:69:8d:bc:ed:99:1b:b7:4f:ab:10:57: 53:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0E:67:4D:E5:55:C8:AE:60:19:D3:EB:2E:0A:2F:E1:94:23:4B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv6: 2604:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:9e:9c:33:e5:ca:34:d4:19:53:ff:ae:ad:23:76:4a:71: 45:ae:a7:82:88:43:e7:ba:11:6e:09:28:40:0f:5e:bc:95:06: a2:cc:2c:77:a1:64:a0:b6:08:de:6d:97:2d:21:b5:8f:e2:3b: 98:62:23:6f:16:1e:c3:79:fa:4e:d0:68:7b:98:20:d9:4a:4a: a6:f6:7a:3f:8a:7a:55:e2:da:de:8d:59:d0:10:8b:a2:10:89: 22:9f:94:c6:a5:c6:81:f3:cc:17:17:22:d4:15:ca:1f:b6:68: 85:a1:71:00:19:35:fb:9a:7f:35:e5:b4:bd:72:42:07:f0:10: 6e:dd:a7:ec:42:c3:01:84:d2:da:9d:55:52:00:53:cd:14:4b: 48:e8:16:7e:c0:37:4e:ad:de:16:3b:d0:a4:1e:71:d0:9d:e1: 1f:85:51:4b:a9:ad:6a:80:af:56:87:3a:75:8a:32:07:d0:5e: ce:8b:a6:2c:4e:c5:3f:de:7a:1e:ff:8b:f0:a1:6e:0d:dc:14: 0f:9c:3e:58:9e:45:56:ff:94:52:ca:07:15:d8:03:1f:dd:07: 27:4f:f8:03:46:d7:10:a5:a4:ab:73:de:0f:91:73:75:ad:1a: 1c:72:74:6d:b8:a4:74:dc:36:64:26:8e:3f:b1:84:fb:65:c7: 23:12:59:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0jeme6dwZFfROjeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWM4ZGVmODktZmZiNi00ZjcyLTg0ZDYtNmVkZjg0YTIzMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZqM2KK3TiMnlmxa2/HHEM1vSJT+yL7ieFb AvYlbwZ6ut6LbPB89Kx5jRRzPS+4NGWsvugUnxHAJrNIdVrq+jPe5W0Dgv7Hvg+1 ETj5DV/lwg/UXjstRAi3DWXMa+E17rIRURBi50cTcFwUQ/abSHBUBDbjLvorofkl ZqmUKxH9L+FwsPW1T+K61D55ZhCtZ1FLHpJZWBPMxnjiDtxmps+l5yP6YNant92c q2IvliR3oGr3mM14GZ9hcpqf1z/Tu1hPkLpj6l2+poJIqL2aLAfnnIRNA6jK4jMt ZD1tZL7LMMb8zbqU5vngos5e/BYTOOLEaY287Zkbt0+rEFdT6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLIOZ03lVciuYBnT6y4KL+GUI0vJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYWNjOTVmMGYtYzliMi0z NmYxLTlmZDEtZDI4YTZjYjkyOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRzQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBz56cM+XKNNQZU/+urSN2SnFFrqeCiEPnuhFuCShAD168lQaizCx3 oWSgtgjebZctIbWP4juYYiNvFh7DefpO0Gh7mCDZSkqm9no/inpV4trejVnQEIui EIkin5TGpcaB88wXFyLUFcoftmiFoXEAGTX7mn815bS9ckIH8BBu3afsQsMBhNLa nVVSAFPNFEtI6BZ+wDdOrd4WO9CkHnHQneEfhVFLqa1qgK9Whzp1ijIH0F7Oi6Ys TsU/3noe/4vwoW4N3BQPnD5YnkVW/5RSygcV2AMf3QcnT/gDRtcQpaSrc94PkXN1 rRoccnRtuKR03DZkJo4/sYT7ZccjElkZ -----END CERTIFICATE-----Generated at Thu Mar 26 04:21:41 2026 by rpki-client