$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf000b3-2f0a-34ca-9d0f-a96861e70021.roa File: 3bf000b3-2f0a-34ca-9d0f-a96861e70021.roa (raw, json) Hash identifier: Zq5/AN1AE5XjJuUQ2VnExgyR7DSJierRB5cj5NA82x4= Subject key identifier: 83:07:02:F4:EC:97:82:EE:BE:1E:76:5F:40:D9:19:17:97:35:57:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D492A5411293BA31CEBE41840 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf000b3-2f0a-34ca-9d0f-a96861e70021.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 19527 IP address blocks: 2600:1902:130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:54:11:29:3b:a3:1c:eb:e4:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=3f0bdebd-44b8-4249-8962-ac273b3eb0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:68:4d:ea:8b:ca:7d:76:0a:64:1d:a8:ab: b6:b1:a3:3b:5e:15:d3:c9:96:11:8a:1d:5b:d0:05: 71:4c:a3:59:75:e1:4f:7d:68:39:17:8b:6b:6a:2e: 4a:12:dd:1e:19:3e:2e:97:da:2f:47:c4:f1:99:9e: d7:25:64:fd:26:06:88:c0:7b:e2:58:50:e8:a0:64: dc:df:e1:07:85:28:8c:f2:16:d5:ae:c4:98:92:b1: fc:cf:df:7b:8d:f5:3c:ba:ce:29:73:ec:71:be:b5: b9:d6:54:9f:57:80:83:3d:47:f4:57:c1:c5:d2:74: 7b:dd:90:e7:5d:2c:06:16:68:83:52:f1:50:c2:eb: d6:dc:2a:cb:3d:54:20:3b:e9:8a:24:27:79:91:ee: d6:e1:1d:82:20:89:29:fc:d2:0e:12:0b:5e:7c:03: 45:d7:05:06:d7:31:7f:1b:77:c1:d7:da:68:73:b0: 04:58:2d:59:fe:13:6c:c8:65:11:d8:86:fb:61:3a: 82:b8:81:23:76:be:0c:5e:63:af:53:f6:e0:2c:a9: 26:09:93:65:de:b3:0d:4b:55:d1:78:0f:9d:e7:68: 9d:cd:f1:50:48:c4:af:a6:75:41:4b:0b:4a:7c:63: ab:2a:a8:ec:ac:57:e8:46:80:0f:80:e8:b4:09:e1: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:07:02:F4:EC:97:82:EE:BE:1E:76:5F:40:D9:19:17:97:35:57:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf000b3-2f0a-34ca-9d0f-a96861e70021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ae:5b:c7:c4:c1:3a:57:61:90:e0:83:18:1d:44:c2:15:bf: e2:4d:db:d2:66:1c:4b:a0:82:14:c3:81:f2:84:2d:dd:16:93: 74:65:b7:d7:10:28:a6:60:f8:58:2a:24:5f:fc:1b:5b:6e:30: 65:f7:88:8d:63:58:f0:41:95:2e:5a:39:e1:a2:67:ac:68:77: f7:93:9a:ac:14:f5:30:bd:d8:40:c0:9b:b5:0b:e3:fb:4f:23: 05:70:5c:f9:8f:0b:55:47:ad:92:fe:80:eb:b8:d0:89:ff:35: 86:f2:c2:a4:96:3d:01:0b:c0:dd:46:c1:69:c1:ee:88:14:1a: ce:d3:31:bd:0d:7e:36:70:47:e6:5a:0a:66:f0:48:9e:20:d0: c0:00:28:db:ea:3e:1d:35:38:98:af:1d:20:46:e1:15:3c:3f: 28:9a:29:25:c8:0b:f7:b0:83:12:94:07:d1:e3:fe:26:be:6c: a4:fc:ee:61:5b:b9:e3:13:ab:87:e9:f7:6d:e1:bf:d3:28:ca: 0d:5b:89:a0:ef:8b:72:6e:8e:3f:dd:ae:ad:4f:9d:1b:89:ec: 38:ea:94:51:bb:9b:2f:95:fb:c6:42:b7:49:9a:10:99:e8:eb: 5e:90:7d:57:7c:7c:f9:d9:5f:83:b4:0a:16:b3:1b:18:25:82: c3:88:0d:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1JKlQRKTujHOvkGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk M2YwYmRlYmQtNDRiOC00MjQ5LTg5NjItYWMyNzNiM2ViMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1JoTeqLyn12CmQdqKu2saM7XhXTyZYRih1b 0AVxTKNZdeFPfWg5F4trai5KEt0eGT4ul9ovR8TxmZ7XJWT9JgaIwHviWFDooGTc 3+EHhSiM8hbVrsSYkrH8z997jfU8us4pc+xxvrW51lSfV4CDPUf0V8HF0nR73ZDn XSwGFmiDUvFQwuvW3CrLPVQgO+mKJCd5ke7W4R2CIIkp/NIOEgtefANF1wUG1zF/ G3fB19poc7AEWC1Z/hNsyGUR2Ib7YTqCuIEjdr4MXmOvU/bgLKkmCZNl3rMNS1XR eA+d52idzfFQSMSvpnVBSwtKfGOrKqjsrFfoRoAPgOi0CeEADwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMHAvTsl4Luvh52X0DZGReXNVeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JmMDAwYjMtMmYwYS0z NGNhLTlkMGYtYTk2ODYxZTcwMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgEw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeuW8fEwTpXYZDggxgdRMIVv+JN29JmHEugghTDgfKELd0Wk3Rl t9cQKKZg+FgqJF/8G1tuMGX3iI1jWPBBlS5aOeGiZ6xod/eTmqwU9TC92EDAm7UL 4/tPIwVwXPmPC1VHrZL+gOu40In/NYbywqSWPQELwN1GwWnB7ogUGs7TMb0NfjZw R+ZaCmbwSJ4g0MAAKNvqPh01OJivHSBG4RU8PyiaKSXIC/ewgxKUB9Hj/ia+bKT8 7mFbueMTq4fp923hv9Moyg1biaDvi3Jujj/drq1PnRuJ7DjqlFG7my+V+8ZCt0ma EJno616QfVd8fPnZX4O0ChazGxglgsOIDS0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:59 2026 by rpki-client