$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/0df3c573-8fb2-3fff-a320-02f24e0bf9fc.roa File: 0df3c573-8fb2-3fff-a320-02f24e0bf9fc.roa (raw, json) Hash identifier: +AjTgIou4NSuZWfw+D67Me76f6DPSncy5xwMSR5wd9E= Subject key identifier: D1:3E:2B:D6:5F:3D:7D:8F:8B:F8:95:B3:C3:D3:1C:CD:E4:6C:74:5D Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F4328584D39CF75F894690029353B3C00 Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/0df3c573-8fb2-3fff-a320-02f24e0bf9fc.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 46173 IP address blocks: 2607:fe90:8003::/48 maxlen: 48 2607:fe90:8004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:75:f8:94:69:00:29:35:3b:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=a12a1eaa-8dee-4a57-b143-f9b2ed040459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:e3:43:c0:8d:d2:fc:27:c5:f8:1b:ce:47: 2a:c1:a6:6c:89:6b:94:bd:df:7c:9c:ff:4c:b5:fe: 59:7d:d9:89:60:7a:59:6d:0c:42:aa:36:83:3e:ef: 1b:41:e7:d7:a4:34:1a:34:fc:89:12:85:9c:80:78: eb:d6:e5:96:fc:89:1a:2b:38:21:cb:c8:69:8d:75: f8:f3:0f:7b:e9:38:14:b8:15:57:a2:de:93:79:68: f9:2a:79:5b:eb:37:14:f4:38:08:cb:69:29:7c:6a: 9e:29:86:8b:6b:bf:82:d0:16:87:4a:64:6a:2c:b9: e7:dd:8c:d9:42:d5:4c:34:bd:b1:ae:7c:80:1f:5b: 37:35:48:35:5b:30:5a:14:69:57:cc:8b:49:09:b0: fe:2b:fe:5a:25:b1:79:57:73:56:be:d2:8e:1c:d7: b4:15:b9:46:7a:c5:0b:7c:d3:da:41:32:32:da:c7: c4:ad:ba:6a:32:9e:b8:38:7d:87:ed:eb:c3:6d:76: e5:fb:64:e0:e3:45:4b:50:f7:f6:8f:1b:46:d3:a4: 5b:3c:15:ea:ca:b3:1a:3b:48:7e:e7:97:09:6b:24: 28:61:02:95:a3:c7:79:58:ff:71:29:59:27:8d:b0: 8e:1e:b0:99:6b:51:3c:1a:77:a5:c2:d1:a5:71:6f: 2e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3E:2B:D6:5F:3D:7D:8F:8B:F8:95:B3:C3:D3:1C:CD:E4:6C:74:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/0df3c573-8fb2-3fff-a320-02f24e0bf9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv6: 2607:fe90:8003::-2607:fe90:8004:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ac:f4:e5:b8:b3:76:f1:bd:2d:4c:28:07:98:74:c4:e0:6d: 41:8a:56:8e:8e:ee:45:30:8b:7e:9a:af:f5:3f:7a:90:28:2c: ed:2d:93:21:3c:5f:fb:b7:2f:f4:09:85:95:a0:4b:52:49:f7: d7:2e:e2:7e:1c:94:8c:07:01:5c:06:13:31:9c:c9:c3:f0:b1: 2a:61:68:83:1b:be:af:94:e0:4c:b1:f8:78:75:44:73:09:f9: a5:17:2e:8b:76:c6:de:d3:64:6a:7f:37:5f:be:da:2a:9f:3e: ec:31:ad:bc:99:8a:1d:70:f7:d2:82:3c:87:e5:f4:3f:ef:05: 03:83:f3:c7:7c:98:f5:58:64:ce:71:f0:af:77:59:05:d3:37: 07:07:2d:e5:59:69:83:95:e2:09:b8:4b:b9:cf:19:b7:00:1f: ac:38:f0:29:a7:c9:a5:cd:b2:fe:67:11:42:a9:0c:47:ac:ab: 88:b2:f6:d5:2e:eb:11:7a:d1:91:7a:33:12:85:63:b8:25:3f: 2b:fd:34:40:77:a2:96:de:46:36:37:0c:6f:76:2d:01:d7:b6: dd:22:7f:a5:0f:50:f5:46:c5:2a:c0:25:39:27:09:30:c2:87: 21:f6:fc:44:6d:b0:3b:5b:f3:83:c0:5c:12:9e:85:d3:b0:33: 6a:73:db:08 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE05z3X4lGkAKTU7PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YTEyYTFlYWEtOGRlZS00YTU3LWIxNDMtZjliMmVkMDQwNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TDjQ8CN0vwnxfgbzkcqwaZsiWuUvd98nP9M tf5ZfdmJYHpZbQxCqjaDPu8bQefXpDQaNPyJEoWcgHjr1uWW/IkaKzghy8hpjXX4 8w976TgUuBVXot6TeWj5Knlb6zcU9DgIy2kpfGqeKYaLa7+C0BaHSmRqLLnn3YzZ QtVMNL2xrnyAH1s3NUg1WzBaFGlXzItJCbD+K/5aJbF5V3NWvtKOHNe0FblGesUL fNPaQTIy2sfErbpqMp64OH2H7evDbXbl+2Tg40VLUPf2jxtG06RbPBXqyrMaO0h+ 55cJayQoYQKVo8d5WP9xKVknjbCOHrCZa1E8GnelwtGlcW8u8QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFNE+K9ZfPX2Pi/iVs8PTHM3kbHRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvMGRmM2M1NzMtOGZiMi0z ZmZmLWEzMjAtMDJmMjRlMGJmOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmB/6Q gAMDBwAmB/6QgAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAI6z05bizdvG9LUwoB5h0xOBtQYpWjo7uRTCL fpqv9T96kCgs7S2TITxf+7cv9AmFlaBLUkn31y7ifhyUjAcBXAYTMZzJw/CxKmFo gxu+r5TgTLH4eHVEcwn5pRcui3bG3tNkan83X77aKp8+7DGtvJmKHXD30oI8h+X0 P+8FA4Pzx3yY9VhkznHwr3dZBdM3Bwct5Vlpg5XiCbhLuc8ZtwAfrDjwKafJpc2y /mcRQqkMR6yriLL21S7rEXrRkXozEoVjuCU/K/00QHeilt5GNjcMb3YtAde23SJ/ pQ9Q9UbFKsAlOScJMMKHIfb8RG2wO1vzg8BcEp6F07AzanPbCA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:50:07 2026 by rpki-client