$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa File: 459b00d2-1e81-3ca1-905e-682f2fa251f1.roa (raw, json) Hash identifier: NoT7HbzTXiv+zXSek/b/srAIbuT/yYy+1ZvzbZbGkNM= Subject key identifier: 95:D2:A8:2C:A5:00:BC:53:45:89:C9:27:67:2B:14:0D:AC:84:19:82 Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7 Certificate serial: 010D0C9F4328584D386A28ECA00CB7A09AAC9D80 Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 3635 IP address blocks: 2610:20:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:28:ec:a0:0c:b7:a0:9a:ac:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=3f4e8ee2-8dbf-47bf-9899-36116ce6398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:39:67:4a:e0:2a:c8:9b:c6:99:e6:99:8c: 51:8e:08:43:ac:e9:be:4b:4f:a7:fe:c6:3e:20:1e: e6:55:0a:38:0b:8d:0c:4f:fa:e1:bc:08:08:fc:54: 39:8e:be:42:ee:15:e7:28:f4:9a:90:09:d9:c3:68: 45:65:72:7b:34:6b:8e:97:e5:31:f2:c0:5a:5e:fd: ed:5b:76:e4:73:c7:58:11:e2:b4:6a:12:50:1e:de: 4f:f4:a8:71:04:7d:16:51:fe:66:59:a8:5d:96:78: f9:3c:10:0a:20:e8:ef:86:6c:ee:72:ac:0c:c0:b0: c1:86:95:f7:f6:ac:7c:6b:65:d7:fc:5e:9a:f4:c0: 9b:fb:3c:d1:4a:f4:57:28:f1:38:f5:18:e6:dd:d0: 7c:fa:c0:04:e3:eb:36:45:f1:67:31:74:00:52:30: a3:45:c6:65:c4:f7:9f:b4:bc:31:d3:98:c5:86:fa: 77:52:97:9e:66:8c:40:91:b2:11:18:ad:ea:f5:45: 21:57:1f:f3:bc:76:21:88:15:bd:a3:5f:13:2b:0f: 6c:c6:7c:66:99:e6:33:95:6f:e0:57:a2:37:62:18: 39:6d:f3:05:75:60:f5:bf:52:72:71:a8:68:ed:ab: 77:d6:e0:1d:cb:65:1d:18:89:10:c4:d3:e3:2d:d2: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D2:A8:2C:A5:00:BC:53:45:89:C9:27:67:2B:14:0D:AC:84:19:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/459b00d2-1e81-3ca1-905e-682f2fa251f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl X509v3 Authority Key Identifier: keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:72:fc:49:70:2d:b4:71:84:0b:a3:db:a5:74:eb:48:ea:0c: 19:81:41:c3:7c:db:cc:38:c7:7e:84:3d:8f:6a:aa:3b:eb:7d: be:73:10:cd:af:0e:fe:be:74:eb:34:61:9e:19:56:76:d8:67: 32:4b:53:da:c0:63:5a:7f:6e:eb:83:b2:04:48:5b:1c:39:33: fc:bd:8b:3a:cb:85:c6:83:5f:a6:aa:a0:82:c4:52:a6:76:a9: 96:93:b9:2f:13:fb:5f:38:b3:62:2e:5a:6e:71:09:b6:c2:a9: bc:ae:40:d0:bc:b8:6e:6e:b6:16:d7:5c:e4:46:af:0a:b7:ea: 28:cd:31:dc:33:6b:f6:0d:e4:b5:ac:d4:bc:27:c0:89:1c:3b: 40:5b:55:1b:69:1d:83:97:4b:1b:9f:34:a4:78:37:09:03:6b: 8a:15:ee:73:85:6b:b2:53:44:fb:89:04:90:42:64:a5:b7:0c: 48:b9:5f:a1:a6:33:4f:b3:75:fa:02:34:6d:5d:69:9c:ad:d6: 1c:cd:fc:a2:04:c4:02:f5:fd:9f:24:8b:7e:e9:4a:29:c3:60: 14:97:d6:f0:1a:d7:d3:c2:ca:98:b3:fd:56:e4:ad:9d:0e:57: e2:ec:78:e8:57:89:6e:b2:bb:68:c2:91:6b:92:e6:da:21:fc: 3e:1d:61:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04aijsoAy3oJqsnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm YWI3MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk M2Y0ZThlZTItOGRiZi00N2JmLTk4OTktMzYxMTZjZTYzOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuew5Z0rgKsibxpnmmYxRjghDrOm+S0+n/sY+ IB7mVQo4C40MT/rhvAgI/FQ5jr5C7hXnKPSakAnZw2hFZXJ7NGuOl+Ux8sBaXv3t W3bkc8dYEeK0ahJQHt5P9KhxBH0WUf5mWahdlnj5PBAKIOjvhmzucqwMwLDBhpX3 9qx8a2XX/F6a9MCb+zzRSvRXKPE49Rjm3dB8+sAE4+s2RfFnMXQAUjCjRcZlxPef tLwx05jFhvp3UpeeZoxAkbIRGK3q9UUhVx/zvHYhiBW9o18TKw9sxnxmmeYzlW/g V6I3Yhg5bfMFdWD1v1Jycaho7at31uAdy2UdGIkQxNPjLdKQSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXSqCylALxTRYnJJ2crFA2shBmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNDU5YjAwZDItMWU4MS0z Y2ExLTkwNWUtNjgyZjJmYTI1MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2 ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3 ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4 ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhAAIDAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBy/ElwLbRxhAuj26V060jqDBmBQcN828w4x36EPY9qqjvrfb5z EM2vDv6+dOs0YZ4ZVnbYZzJLU9rAY1p/buuDsgRIWxw5M/y9izrLhcaDX6aqoILE UqZ2qZaTuS8T+184s2IuWm5xCbbCqbyuQNC8uG5uthbXXORGrwq36ijNMdwza/YN 5LWs1LwnwIkcO0BbVRtpHYOXSxufNKR4NwkDa4oV7nOFa7JTRPuJBJBCZKW3DEi5 X6GmM0+zdfoCNG1daZyt1hzN/KIExAL1/Z8ki37pSinDYBSX1vAa19PCypiz/Vbk rZ0OV+LseOhXiW6yu2jCkWuS5toh/D4dYds= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:31 2026 by rpki-client