$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa File: 4a72223c-9e60-37af-b03d-43b6176b4114.roa (raw, json) Hash identifier: RZFPNuneQRtOOtHxd7fNBy3F1G/z3H8hgIM4zL2Xzbw= Subject key identifier: 87:6B:D7:A8:4F:4E:97:C8:59:14:24:D5:D7:31:23:BA:CA:9B:84:9D Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584D4389A755FE7BF5419B1C8980 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa Signing time: Mon 23 Mar 2026 12:38:05 +0000 ROA not before: Mon 23 Mar 2026 12:38:05 +0000 ROA not after: Sun 21 Jun 2026 12:38:05 +0000 asID: 8075 IP address blocks: 2604:e700:41::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:89:a7:55:fe:7b:f5:41:9b:1c:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Mar 23 12:38:05 2026 GMT Not After : Jun 21 12:38:05 2026 GMT Subject: CN=c4f5ce77-27aa-4820-a9cd-c33b99ea8f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:d9:8e:ce:cb:26:71:31:94:64:68:1c:4f: 2a:95:05:41:30:e4:4e:89:59:20:37:c1:75:4e:e7: 63:4b:bb:2f:23:37:1c:e1:5b:93:a4:0c:50:0e:f6: 0b:bc:12:29:1c:e1:14:24:20:4e:66:b6:99:1a:34: 20:16:2b:30:3f:39:c3:de:cd:b6:d7:6c:96:55:8d: 75:51:da:21:97:ef:f5:1f:2b:c5:5b:c8:c4:29:78: 60:64:87:44:a1:df:23:14:bb:83:30:1f:7e:df:e0: 18:ef:a3:fa:42:c1:b7:62:8e:64:95:e2:e2:a6:a4: 16:bd:84:1a:56:b6:10:e0:63:9d:0a:fa:69:2b:b8: 65:fc:e8:61:60:06:0f:bc:55:90:4d:2b:d1:17:e4: 72:40:58:fd:56:f7:2c:ce:3d:95:5d:48:28:29:20: 0a:df:97:2d:9b:a8:f3:da:59:7e:8f:65:55:ad:fd: 07:38:01:86:ca:68:2d:9b:db:3a:7f:52:35:a0:31: 19:12:d7:6d:86:e0:68:e7:1b:25:52:a8:72:ce:ac: ee:d0:4e:8c:d3:af:99:30:c4:df:bc:3a:11:43:c3: d5:ea:21:2c:0c:4b:8e:7a:37:9f:e7:8b:b9:3b:24: 73:bc:a3:b4:26:f8:ac:80:dc:c5:e6:7b:d3:d6:11: 6b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:D7:A8:4F:4E:97:C8:59:14:24:D5:D7:31:23:BA:CA:9B:84:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/4a72223c-9e60-37af-b03d-43b6176b4114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv6: 2604:e700:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:62:11:cd:e8:2d:ad:e1:37:64:94:9f:9e:76:ec:73:e8:15: 71:8f:9a:9c:0b:8f:81:4e:79:0f:76:74:95:1c:f0:c2:3d:17: c9:31:e3:a2:10:c4:31:6b:65:1a:9a:d3:b7:00:05:f5:f8:e9: 2e:c4:7b:c0:23:f4:dd:58:a9:ed:17:86:81:e5:4a:29:5f:e9: 2d:ee:d9:3e:36:48:4e:2b:38:49:27:69:3b:1c:24:3d:5a:e2: f5:21:e4:2a:fb:dc:9f:c9:9f:6c:2c:a8:46:14:1d:62:ae:71: 06:78:7f:3e:ba:05:cc:44:ee:00:a8:4c:0e:5b:62:16:8b:05: 14:14:db:32:d9:0d:56:6f:51:85:ce:1e:d1:3b:53:65:fa:fb: eb:7f:11:03:b7:a3:b6:3b:86:91:b9:1c:c5:81:14:9c:fa:38: 2c:63:ef:55:53:44:e5:a4:6f:6e:af:d2:22:81:2c:06:b4:46: 59:35:e5:b4:6f:c1:87:b5:6a:46:61:65:d1:62:17:b5:6c:67: bc:00:18:87:f3:db:bb:90:c3:f7:13:54:4b:96:39:99:b1:8c: 79:bb:6d:6f:3b:26:cb:cc:8d:84:e6:2a:04:a4:c9:f3:75:fa: 2c:cd:5f:aa:5d:12:3f:df:96:69:b5:a4:3a:5c:3b:ad:ac:8e: 42:bc:6b:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1DiadV/nv1QZsciYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDMyMzEyMzgwNVoXDTI2MDYyMTEyMzgwNVowLzEtMCsGA1UEAxMk YzRmNWNlNzctMjdhYS00ODIwLWE5Y2QtYzMzYjk5ZWE4ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWrZjs7LJnExlGRoHE8qlQVBMOROiVkgN8F1 TudjS7svIzcc4VuTpAxQDvYLvBIpHOEUJCBOZraZGjQgFiswPznD3s2212yWVY11 Udohl+/1HyvFW8jEKXhgZIdEod8jFLuDMB9+3+AY76P6QsG3Yo5kleLipqQWvYQa VrYQ4GOdCvppK7hl/OhhYAYPvFWQTSvRF+RyQFj9Vvcszj2VXUgoKSAK35ctm6jz 2ll+j2VVrf0HOAGGymgtm9s6f1I1oDEZEtdthuBo5xslUqhyzqzu0E6M06+ZMMTf vDoRQ8PV6iEsDEuOejef54u5OyRzvKO0JvisgNzF5nvT1hFrQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdr16hPTpfIWRQk1dcxI7rKm4SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvNGE3MjIyM2MtOWU2MC0z N2FmLWIwM2QtNDNiNjE3NmI0MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTnAABB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhiEc3oLa3hN2SUn5527HPoFXGPmpwLj4FOeQ92dJUc8MI9F8kx 46IQxDFrZRqa07cABfX46S7Ee8Aj9N1Yqe0XhoHlSilf6S3u2T42SE4rOEknaTsc JD1a4vUh5Cr73J/Jn2wsqEYUHWKucQZ4fz66BcxE7gCoTA5bYhaLBRQU2zLZDVZv UYXOHtE7U2X6++t/EQO3o7Y7hpG5HMWBFJz6OCxj71VTROWkb26v0iKBLAa0Rlk1 5bRvwYe1akZhZdFiF7VsZ7wAGIfz27uQw/cTVEuWOZmxjHm7bW87JsvMjYTmKgSk yfN1+izNX6pdEj/flmm1pDpcO62sjkK8a5c= -----END CERTIFICATE-----Generated at Wed Mar 25 22:35:40 2026 by rpki-client