$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa File: b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json) Hash identifier: aglv5CFTZR30KNX/rD9KPjKJqQGYly8sU24gqtnJD6Y= Subject key identifier: 27:77:15:A1:A7:E1:D8:F9:D2:FA:DB:E2:83:F7:E7:30:97:5F:1C:B4 Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F4328584D1F4A1CC7C8444EC597D2D340 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 4185 IP address blocks: 2620:10f:b000::/48 maxlen: 48 2620:10f:b070::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1c:c7:c8:44:4e:c5:97:d2:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c35cccbe-aed4-46ca-a0d9-671c2e49e6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:99:aa:94:c0:6c:aa:a1:61:00:d3:66:d1: 23:93:ee:04:a8:31:4b:36:1d:2b:98:a0:eb:b6:9d: e2:4f:ed:44:e6:b9:c5:b5:96:49:e4:99:a4:50:b1: 55:fd:57:4d:db:06:99:fc:30:a4:12:3d:94:be:10: 7f:58:e3:91:4f:7e:01:94:c8:ca:12:b4:a1:a3:07: 41:6c:61:87:87:5c:48:fa:17:c7:fe:8e:75:4d:d1: 2a:24:27:11:eb:a2:ae:0a:93:ae:bc:e2:ac:bf:ac: 70:82:0d:69:d7:78:ed:3c:7c:c2:08:61:d4:0b:5f: ab:83:bf:81:be:eb:08:ab:a4:e0:b5:7c:28:f4:8c: 5b:7c:d9:a4:1b:31:a1:3f:6f:91:4f:10:30:4e:34: f9:7b:40:a8:e7:7d:98:59:81:7e:02:0f:13:ed:cc: 6b:3c:a3:0c:62:2f:bf:75:ed:d2:0f:7d:05:01:e1: 6c:31:ad:80:1a:6f:0a:2d:83:d9:90:b9:33:f1:4f: 75:5b:18:ea:14:0e:25:d3:8b:34:82:12:2b:7c:3d: b2:3e:6f:eb:70:99:0c:97:5e:60:7c:fe:e3:bf:b3: fe:d4:3b:ae:3c:d2:be:4c:da:1a:67:3e:a8:07:f6: ae:2a:ac:e7:54:7b:44:a8:f9:4e:7c:96:81:09:63: 9f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:77:15:A1:A7:E1:D8:F9:D2:FA:DB:E2:83:F7:E7:30:97:5F:1C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:b000::/48 2620:10f:b070::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:83:0e:d4:2c:fc:43:78:64:ce:ee:24:e6:ca:52:b0:29:19: d5:09:de:b1:1b:a2:64:b6:46:4d:2c:09:af:c1:44:c0:40:13: 53:02:0d:ae:c6:00:ee:f0:e1:74:8a:69:27:b8:ee:dc:b8:0b: 83:cc:10:ac:b6:bf:de:fd:1d:39:a1:0e:0f:81:97:72:60:32: de:82:70:fa:0b:0a:3a:82:86:59:30:16:68:00:53:37:25:f2: 65:a9:9e:9a:c9:49:e0:75:43:36:f6:59:16:7c:ab:e2:62:50: 9c:6f:94:f8:23:09:86:13:e1:63:d4:70:1a:36:70:2a:35:64: fa:7a:4a:27:f0:56:d3:40:b6:20:98:10:18:b6:69:78:0f:8e: 85:84:92:ba:dd:05:9d:12:ea:a5:3e:57:75:59:3c:d2:6e:a2: a6:d7:dc:c3:ff:80:46:55:1e:9b:c1:14:b4:1e:0c:8e:d1:ba: ec:a0:da:26:8a:bd:cf:cd:f0:07:23:fd:fa:f8:35:85:c0:e3: 9d:30:ae:67:84:e7:14:ad:a9:cf:d0:3d:53:cd:4a:9b:2c:2b: 8e:23:8a:42:36:a6:ef:c5:b0:ae:0e:97:b9:c1:17:cc:88:2e: 77:81:71:29:40:50:d7:57:77:c8:48:55:5c:e6:3a:96:86:f4: 34:fa:67:6e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0fShzHyEROxZfS00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzM1Y2NjYmUtYWVkNC00NmNhLWEwZDktNjcxYzJlNDllNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC6ZqpTAbKqhYQDTZtEjk+4EqDFLNh0rmKDr tp3iT+1E5rnFtZZJ5JmkULFV/VdN2waZ/DCkEj2UvhB/WOORT34BlMjKErShowdB bGGHh1xI+hfH/o51TdEqJCcR66KuCpOuvOKsv6xwgg1p13jtPHzCCGHUC1+rg7+B vusIq6TgtXwo9IxbfNmkGzGhP2+RTxAwTjT5e0Co532YWYF+Ag8T7cxrPKMMYi+/ de3SD30FAeFsMa2AGm8KLYPZkLkz8U91WxjqFA4l04s0ghIrfD2yPm/rcJkMl15g fP7jv7P+1DuuPNK+TNoaZz6oB/auKqznVHtEqPlOfJaBCWOfawIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCd3FaGn4dj50vrb4oP35zCXXxy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvYjU4YzNlMTMtNGNjYy0z Y2FiLWJkODAtZmMyNDEyN2Q5YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJiABD7AA AwcAJiABD7BwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHqDDtQs/EN4ZM7uJObKUrApGdUJ3rEbomS2Rk0s Ca/BRMBAE1MCDa7GAO7w4XSKaSe47ty4C4PMEKy2v979HTmhDg+Bl3JgMt6CcPoL CjqChlkwFmgAUzcl8mWpnprJSeB1Qzb2WRZ8q+JiUJxvlPgjCYYT4WPUcBo2cCo1 ZPp6SifwVtNAtiCYEBi2aXgPjoWEkrrdBZ0S6qU+V3VZPNJuoqbX3MP/gEZVHpvB FLQeDI7Ruuyg2iaKvc/N8Acj/fr4NYXA450wrmeE5xStqc/QPVPNSpssK44jikI2 pu/FsK4Ol7nBF8yILneBcSlAUNdXd8hIVVzmOpaG9DT6Z24= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:57 2026 by rpki-client