$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa File: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json) Hash identifier: Up77B60x/exmDoPslTwLiA2E7JZvOfdtDnZyXhveg9w= Subject key identifier: 3A:9A:A5:E6:5E:97:6B:20:96:FF:0B:E1:D8:CF:BE:1D:12:66:3C:09 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584D300A4A1DF06237EF188DEE80 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 394449 IP address blocks: 2604:3dc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4a:1d:f0:62:37:ef:18:8d:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=2157552d-8c71-41ea-85fc-f39a10b2c946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:3d:3e:96:11:6a:64:b8:09:2e:00:f4:b8: d2:4d:0e:94:9b:41:f0:c1:2f:e1:99:22:03:02:9e: 37:4d:de:33:23:35:2a:f9:eb:a7:27:80:5d:7c:4a: 73:7a:20:32:a0:a7:6c:30:7b:23:4a:20:e7:f9:3f: 89:90:3c:8a:0a:73:5d:e9:5c:d7:45:42:e5:fb:02: 7a:fa:e8:80:45:3d:15:9c:ef:4f:9e:68:3b:c9:94: 49:fa:43:17:6d:35:52:cd:b8:ae:32:75:2e:dd:66: 7a:56:0f:6b:48:e3:ae:59:22:fa:41:24:42:15:9b: e2:ee:77:2e:42:1b:c1:82:f4:0b:a3:d5:10:27:77: 31:72:52:b0:06:1c:e3:31:9f:f1:8f:48:73:90:e4: de:95:57:1d:84:08:5b:c8:bc:20:aa:fc:c2:b0:4e: cd:70:b9:9f:5f:cb:dc:45:e0:53:78:0c:26:ca:9e: 28:60:c2:f2:77:00:36:35:de:29:3f:de:70:47:90: 10:4b:7a:2f:8c:b3:e4:09:e5:f3:c1:32:3a:8a:bd: 55:e3:eb:1a:5d:fc:9d:f5:f6:22:2d:61:0e:6d:e2: e6:54:5f:32:3f:fd:d6:05:ec:86:bd:bb:b4:b7:11: fb:03:0a:0c:44:be:b5:41:3a:01:93:94:02:b9:16: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:A5:E6:5E:97:6B:20:96:FF:0B:E1:D8:CF:BE:1D:12:66:3C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv6: 2604:3dc0:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:3b:40:4c:6a:11:fc:f8:2e:df:4b:e7:79:60:f0:a2:c3:72: dd:67:30:b4:5a:03:e6:74:db:10:dd:17:ac:dd:e4:08:7e:05: b0:49:84:67:7a:3e:5c:02:f2:a5:1a:17:b7:1f:f1:e4:b8:54: fb:cc:c8:75:97:bf:6d:6f:05:49:9a:0b:a3:cf:31:62:f4:69: c8:df:4b:da:7c:c9:d5:04:3b:80:4f:04:be:a8:d6:08:d2:41: f7:ee:6e:e1:6e:a1:35:f9:6e:f8:9f:be:74:ad:cb:cf:49:bc: 55:56:fc:64:ee:5f:00:f5:2a:89:0d:e4:10:22:bf:a4:5a:39: 0c:d7:22:18:50:11:34:35:de:ff:1b:33:2b:72:e6:7b:5c:30: 8f:21:4b:15:1d:ab:b7:b9:af:a1:76:8d:6f:a7:b2:45:3f:2f: ba:95:de:04:a7:15:2c:1f:03:29:5c:11:46:6e:25:b3:b9:00: cd:53:72:0f:2f:5f:e2:45:bf:38:b6:f5:f5:85:c7:b1:fd:f8: be:94:82:cf:2c:75:d8:63:a0:16:0f:ce:44:be:f8:2d:5e:bb: d0:7e:20:2d:ea:5c:51:64:0b:30:84:86:e3:ae:81:f2:9d:7a: bf:d9:40:e1:1d:dd:90:1e:18:0c:ea:93:d8:94:ef:ff:b8:5e: 65:57:ec:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCkod8GI37xiN7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjE1NzU1MmQtOGM3MS00MWVhLTg1ZmMtZjM5YTEwYjJjOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomE9PpYRamS4CS4A9LjSTQ6Um0HwwS/hmSID Ap43Td4zIzUq+eunJ4BdfEpzeiAyoKdsMHsjSiDn+T+JkDyKCnNd6VzXRULl+wJ6 +uiART0VnO9Pnmg7yZRJ+kMXbTVSzbiuMnUu3WZ6Vg9rSOOuWSL6QSRCFZvi7ncu QhvBgvQLo9UQJ3cxclKwBhzjMZ/xj0hzkOTelVcdhAhbyLwgqvzCsE7NcLmfX8vc ReBTeAwmyp4oYMLydwA2Nd4pP95wR5AQS3ovjLPkCeXzwTI6ir1V4+saXfyd9fYi LWEObeLmVF8yP/3WBeyGvbu0txH7AwoMRL61QToBk5QCuRbYowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqapeZel2sglv8L4djPvh0SZjwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABk7QExqEfz4Lt9L53lg8KLDct1nMLRaA+Z02xDdF6zd5Ah+BbBJ hGd6PlwC8qUaF7cf8eS4VPvMyHWXv21vBUmaC6PPMWL0acjfS9p8ydUEO4BPBL6o 1gjSQffubuFuoTX5bvifvnSty89JvFVW/GTuXwD1KokN5BAiv6RaOQzXIhhQETQ1 3v8bMyty5ntcMI8hSxUdq7e5r6F2jW+nskU/L7qV3gSnFSwfAylcEUZuJbO5AM1T cg8vX+JFvzi29fWFx7H9+L6Ugs8sddhjoBYPzkS++C1eu9B+IC3qXFFkCzCEhuOu gfKder/ZQOEd3ZAeGAzqk9iU7/+4XmVX7O0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:24:51 2026 by rpki-client