$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa File: 997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa (raw, json) Hash identifier: ZR6RIkekWbc8L+1VUMvbYTzRvK9oN4yH1ozRW6cCKJI= Subject key identifier: 28:85:52:A1:45:8B:33:E7:B3:AC:FB:91:05:FD:BC:24:E5:7A:75:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D492A4B5A66A599048ED5F200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 19527 IP address blocks: 2600:1902:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4b:5a:66:a5:99:04:8e:d5:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=3ad0554a-d207-4124-892c-3eb8eeaf3a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:dd:fc:ec:54:af:17:af:b1:d1:a9:01:c8: 30:96:08:0d:ac:6a:90:11:27:f7:8e:ff:c1:ae:2c: 83:60:02:a0:23:68:eb:21:9a:ff:08:ca:9c:58:12: 19:e6:9e:f7:16:11:3c:3e:14:41:b6:fc:8a:3f:64: e5:f7:61:93:80:99:86:0f:75:0d:a4:85:b0:68:23: a2:25:ec:a8:11:c0:74:e5:8a:79:69:fb:32:1c:05: b8:33:86:aa:18:5d:52:33:07:bf:57:04:a5:5a:04: fe:46:10:71:af:73:d2:1c:df:9f:a5:50:6a:8b:83: cf:7e:49:94:40:f3:56:d1:b5:f2:2c:a8:3c:9e:c1: f4:c0:10:5b:e1:6a:17:43:9c:4d:12:29:23:ea:79: 5d:52:f2:13:b5:47:b3:9b:ea:f8:04:a9:aa:9e:11: 10:e2:22:24:6d:33:ca:3d:c8:1f:03:bd:f8:f9:88: 4c:19:54:2d:05:85:30:1e:d4:76:e9:e3:5d:42:86: bf:43:1a:e0:dd:83:9d:87:1c:ce:1f:66:47:b3:47: 69:3f:fd:cf:ae:b1:36:19:06:09:cb:83:8e:05:7e: 86:00:d5:4a:67:b1:fc:2f:94:72:a7:65:d3:65:b9: 8b:d5:c0:99:93:32:20:0a:b7:48:cd:23:46:2d:87: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:85:52:A1:45:8B:33:E7:B3:AC:FB:91:05:FD:BC:24:E5:7A:75:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1902:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d8:37:25:8f:79:11:c3:17:ae:1a:3c:09:35:97:79:50:c0: 70:50:a5:50:62:57:9d:14:c2:e1:70:fa:25:64:f8:79:fa:20: 1e:0e:ea:10:6d:1e:05:fb:d4:30:4f:9f:9a:2e:e8:14:32:0c: 70:fb:d2:15:5c:f6:0a:0c:f1:86:72:f5:74:e0:de:0c:4c:0f: cb:33:35:79:3f:e3:b6:e7:c2:1c:55:b4:48:36:cd:cd:79:34: 53:47:9d:2d:ed:95:5b:c2:b1:6a:e7:dd:5f:24:c8:70:91:4c: d9:70:2c:07:85:ce:49:40:57:5f:bb:c6:7c:03:77:12:4a:7f: 1b:d8:5a:bb:d1:53:e0:5d:4c:d8:fc:70:12:cd:eb:07:c4:80: 2d:fe:33:65:e1:fc:40:37:fe:84:df:48:a4:26:35:06:ee:8b: 04:ed:68:dd:6a:d1:ba:74:a2:d0:7c:30:82:8d:5a:c4:35:9d: 9a:59:3a:b0:e6:96:08:77:a1:74:ef:f1:0d:9c:2f:9f:6a:9f: 67:c8:5d:d3:f2:4c:cf:b0:ec:33:91:07:83:07:25:96:f8:21: c2:e1:37:e9:77:98:42:4e:7f:68:e6:9d:e1:ee:c0:f8:f4:95: 5a:e1:c8:92:36:34:a1:87:6b:0c:9f:ec:83:7f:54:6e:6f:d1: 36:9e:3b:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1JKktaZqWZBI7V8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk M2FkMDU1NGEtZDIwNy00MTI0LTg5MmMtM2ViOGVlYWYzYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR7d/OxUrxevsdGpAcgwlggNrGqQESf3jv/B riyDYAKgI2jrIZr/CMqcWBIZ5p73FhE8PhRBtvyKP2Tl92GTgJmGD3UNpIWwaCOi JeyoEcB05Yp5afsyHAW4M4aqGF1SMwe/VwSlWgT+RhBxr3PSHN+fpVBqi4PPfkmU QPNW0bXyLKg8nsH0wBBb4WoXQ5xNEikj6nldUvITtUezm+r4BKmqnhEQ4iIkbTPK PcgfA734+YhMGVQtBYUwHtR26eNdQoa/Qxrg3YOdhxzOH2ZHs0dpP/3PrrE2GQYJ y4OOBX6GANVKZ7H8L5Ryp2XTZbmL1cCZkzIgCrdIzSNGLYeP+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCiFUqFFizPns6z7kQX9vCTlenXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk3YWRhM2EtMTk2ZS0z NmIzLThmYTctMDZhYTdhOWM5NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLYNyWPeRHDF64aPAk1l3lQwHBQpVBiV50UwuFw+iVk+Hn6IB4O 6hBtHgX71DBPn5ou6BQyDHD70hVc9goM8YZy9XTg3gxMD8szNXk/47bnwhxVtEg2 zc15NFNHnS3tlVvCsWrn3V8kyHCRTNlwLAeFzklAV1+7xnwDdxJKfxvYWrvRU+Bd TNj8cBLN6wfEgC3+M2Xh/EA3/oTfSKQmNQbuiwTtaN1q0bp0otB8MIKNWsQ1nZpZ OrDmlgh3oXTv8Q2cL59qn2fIXdPyTM+w7DORB4MHJZb4IcLhN+l3mEJOf2jmneHu wPj0lVrhyJI2NKGHawyf7IN/VG5v0TaeO9E= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:49 2026 by rpki-client