$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa File: 84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa (raw, json) Hash identifier: gBlIxD7GyL+SpFiV5LT3iuNWg1VGtKHV2A3j+iTic9Y= Subject key identifier: A9:51:4A:25:17:57:92:39:A3:DE:8F:45:89:1F:AE:65:55:51:50:9F Certificate issuer: /CN=8912efe9-9a7a-4e99-821c-82dc2da25794 Certificate serial: 010D0C9F4328584D24DFA2DEF0518013E68D7180 Authority key identifier: 78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 20208 IP address blocks: 2607:b080::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a2:de:f0:51:80:13:e6:8d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8912efe9-9a7a-4e99-821c-82dc2da25794 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9fd3be32-d05a-4810-9d24-5981cd612a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:ac:da:94:4b:4f:1b:d3:b6:c4:62:9d:89: 71:71:6f:0d:ce:4d:7f:00:e1:ee:13:ce:5f:02:8d: 09:dc:00:6e:9c:eb:48:e0:fb:45:4f:4d:6e:3a:6a: 68:2c:76:a2:46:8b:50:8c:ec:f4:3f:f6:4b:5e:7c: fa:c1:72:62:34:7e:dd:8c:6d:cb:bb:cc:08:d4:41: 48:e8:57:99:bc:f1:51:20:3d:ef:ac:15:11:68:95: 7a:93:3e:b2:b6:36:cf:ea:1d:7f:0b:29:65:7c:21: c5:04:27:0c:30:3c:ed:09:b7:6f:77:e7:17:1a:ea: 6b:44:33:55:3e:6f:2e:dc:27:24:0e:8c:70:2e:30: 22:ec:9b:81:17:33:9f:b0:fb:43:d5:e4:57:0b:72: ea:b9:73:72:72:75:88:38:8e:ae:c6:69:c6:d6:a4: d8:e9:1b:ea:26:77:55:5e:66:ca:65:26:db:63:10: 04:0f:fd:fb:fe:6a:0f:10:ca:ee:f3:29:45:bc:56: 07:49:ea:81:03:2a:07:98:8d:6e:79:9c:58:6d:e2: 18:2b:57:65:10:65:51:b3:12:7b:99:d4:56:e5:36: 5e:fd:46:46:31:4c:55:d3:78:25:06:bd:5f:b7:ba: 76:15:59:57:ed:fc:68:42:32:6d:6c:c5:48:1b:42: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:4A:25:17:57:92:39:A3:DE:8F:45:89:1F:AE:65:55:51:50:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/84cf43c0-6e6d-3e89-9951-082b1eb0d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.crl X509v3 Authority Key Identifier: keyid:78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer sbgp-ipAddrBlock: critical IPv6: 2607:b080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c7:61:24:b6:b8:b0:f2:c5:d5:4d:97:f5:1a:b6:8d:ef:ac: 33:58:61:78:f6:b0:7f:37:5d:bb:75:49:88:69:d3:0a:fd:fd: a8:90:7c:43:f9:28:cc:a0:56:e0:66:59:8f:31:ba:2b:5c:ef: a4:87:86:9c:b5:ea:d1:42:c3:24:b9:78:6d:3d:bf:d1:6d:e3: 86:27:19:f2:61:86:96:a0:dc:83:75:34:2e:af:7e:43:43:fd: 84:02:5d:01:b6:63:17:c6:fe:0f:f8:d3:54:38:b1:1d:dc:c0: c8:f8:d9:26:b8:bd:a7:e2:4c:ed:e0:25:31:4c:12:c4:f5:68: 30:e2:fc:bf:58:66:39:b7:01:c4:f5:d6:e6:d8:22:19:c0:7f: b2:99:12:34:49:b5:08:fb:e8:d8:32:de:63:81:b2:04:03:5a: c5:5b:90:38:90:38:0f:78:39:e6:5f:8b:97:87:b5:3a:70:1a: 19:17:36:94:ec:e0:0e:5a:2f:00:66:4e:17:a6:eb:77:4c:56: 48:0d:b4:b0:6f:83:a9:9d:70:45:9f:d5:6a:3d:41:f8:3c:37: 34:d6:c4:39:6e:98:38:ac:f7:44:91:62:cd:73:c4:71:92:39: 95:21:c7:ee:a7:b0:e1:d4:0e:79:27:ba:ff:7a:d8:ff:ae:a5: f4:77:f8:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0k36Le8FGAE+aNcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxMmVmZTktOWE3YS00ZTk5LTgyMWMtODJkYzJkYTI1 Nzk0MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWZkM2JlMzItZDA1YS00ODEwLTlkMjQtNTk4MWNkNjEyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Ss2pRLTxvTtsRinYlxcW8Nzk1/AOHuE85f Ao0J3ABunOtI4PtFT01uOmpoLHaiRotQjOz0P/ZLXnz6wXJiNH7djG3Lu8wI1EFI 6FeZvPFRID3vrBURaJV6kz6ytjbP6h1/CyllfCHFBCcMMDztCbdvd+cXGuprRDNV Pm8u3CckDoxwLjAi7JuBFzOfsPtD1eRXC3LquXNycnWIOI6uxmnG1qTY6RvqJndV XmbKZSbbYxAED/37/moPEMru8ylFvFYHSeqBAyoHmI1ueZxYbeIYK1dlEGVRsxJ7 mdRW5TZe/UZGMUxV03glBr1ft7p2FVlX7fxoQjJtbMVIG0JVmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKlRSiUXV5I5o96PRYkfrmVVUVCfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OTEy ZWZlOS05YTdhLTRlOTktODIxYy04MmRjMmRhMjU3OTQvODRjZjQzYzAtNmU2ZC0z ZTg5LTk5NTEtMDgyYjFlYjBkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODkxMmVmZTktOWE3YS00ZTk5LTgy MWMtODJkYzJkYTI1Nzk0Lzg5MTJlZmU5LTlhN2EtNGU5OS04MjFjLTgyZGMyZGEy NTc5NC5jcmwwHwYDVR0jBBgwFoAUeM0lYgwBR6xShOUm+qK0KFO045QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OTEyZWZlOS05YTdhLTRlOTktODIxYy04MmRj MmRhMjU3OTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgewgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByx2Ektriw8sXVTZf1GraN76wzWGF49rB/N127dUmIadMK/f2okHxD +SjMoFbgZlmPMborXO+kh4acterRQsMkuXhtPb/RbeOGJxnyYYaWoNyDdTQur35D Q/2EAl0BtmMXxv4P+NNUOLEd3MDI+NkmuL2n4kzt4CUxTBLE9Wgw4vy/WGY5twHE 9dbm2CIZwH+ymRI0SbUI++jYMt5jgbIEA1rFW5A4kDgPeDnmX4uXh7U6cBoZFzaU 7OAOWi8AZk4Xput3TFZIDbSwb4OpnXBFn9VqPUH4PDc01sQ5bpg4rPdEkWLNc8Rx kjmVIcfup7Dh1A55J7r/etj/rqX0d/iB -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:45 2026 by rpki-client