$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: fLBSxY1rWYHvtdlmZiTIajpFJzQ+sLj22yktGd/BhvQ= Subject key identifier: ED:C2:1D:6B:1A:13:C1:C8:10:70:65:12:46:07:ED:F4:22:C4:D0:81 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F4328584D386A4D09147A85253E2E0680 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4d:09:14:7a:85:25:3e:2e:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=955ba211-e817-40a0-95c2-ade4d4ccd43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:0e:81:2f:ab:39:38:29:19:98:bf:08:68: 76:87:55:23:fa:9e:d5:60:9a:c7:bc:8f:33:d5:af: af:84:54:26:2a:84:bb:64:c7:7b:4f:3a:4a:e0:2f: fe:35:05:13:3f:97:f0:98:28:4c:39:d2:6b:f0:52: f9:1e:71:c9:cc:62:49:be:eb:a6:ae:f8:5e:6b:26: ff:41:fa:6f:25:23:60:0e:ea:e6:82:11:85:52:d4: 29:ec:74:2f:a2:97:6f:51:f7:c6:30:26:24:35:5e: be:87:22:90:e7:0a:4b:fd:00:50:a7:cb:ac:db:c1: 57:81:50:94:ed:23:a4:cf:c4:a0:7c:b1:a3:1b:04: 83:03:68:99:9e:ca:1e:73:85:ef:e3:e3:67:3a:60: ee:d8:55:14:bf:55:40:a2:4e:e1:ec:d7:94:75:4f: 59:8f:b2:f7:f3:8f:c7:01:62:c8:44:b7:c9:8f:5a: 16:e4:25:39:09:fc:57:5e:b3:cb:d3:82:15:e5:c2: bf:4e:fd:7f:f1:d8:4e:f9:b8:90:06:02:be:b8:cb: b4:c1:03:ad:30:6c:80:ae:b5:ce:5e:bb:7c:1c:7a: f7:44:1b:7a:8a:f5:b4:a4:ed:f7:ac:56:e7:3d:0c: 22:3a:a5:f4:7e:93:87:af:1b:f1:84:e6:82:31:c3: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C2:1D:6B:1A:13:C1:C8:10:70:65:12:46:07:ED:F4:22:C4:D0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b5:5b:d9:ba:fb:eb:71:dc:43:03:21:9b:1e:8e:a2:20:b3: 1a:7d:80:6c:12:27:0a:5a:ba:1f:6c:10:c3:14:03:42:88:66: ac:8a:93:c1:1c:61:75:8d:70:34:22:2f:9d:27:bb:8b:9b:d4: 99:22:ff:d6:3e:38:e5:c9:7f:e8:52:23:0e:b1:4e:fe:15:3a: 23:73:fa:d0:a1:d5:cd:10:26:0a:58:29:db:f0:d0:5a:87:1c: a8:f9:7d:51:e9:7a:e3:5d:17:5d:93:68:15:15:95:be:10:a6: 02:86:e0:9a:69:91:a9:aa:ec:f6:a1:2a:f4:f9:84:c5:44:27: 59:7e:7a:dd:40:37:84:bc:f9:ee:f9:b8:0d:20:91:d7:53:90: ff:91:cc:89:1c:c1:e4:cd:fe:e6:ab:e0:c0:7e:1a:bb:96:e9: 63:67:26:b1:c9:06:8d:da:a4:95:c0:4c:45:92:91:a4:55:41: 46:45:07:58:39:56:85:6c:ea:b4:5f:71:72:ce:e9:48:aa:57: 89:b5:f5:38:6f:88:17:d5:e2:1f:29:85:e8:75:ed:7d:90:61: fe:51:f6:b0:60:08:62:de:9a:ef:da:b5:7b:d7:33:51:4b:3d: df:e2:08:46:14:a9:17:94:86:89:aa:9f:5a:ac:eb:2c:ae:92: 46:b2:84:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ak0JFHqFJT4uBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OTU1YmEyMTEtZTgxNy00MGEwLTk1YzItYWRlNGQ0Y2NkNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk4OgS+rOTgpGZi/CGh2h1Uj+p7VYJrHvI8z 1a+vhFQmKoS7ZMd7TzpK4C/+NQUTP5fwmChMOdJr8FL5HnHJzGJJvuumrvheayb/ QfpvJSNgDurmghGFUtQp7HQvopdvUffGMCYkNV6+hyKQ5wpL/QBQp8us28FXgVCU 7SOkz8SgfLGjGwSDA2iZnsoec4Xv4+NnOmDu2FUUv1VAok7h7NeUdU9Zj7L384/H AWLIRLfJj1oW5CU5CfxXXrPL04IV5cK/Tv1/8dhO+biQBgK+uMu0wQOtMGyArrXO Xrt8HHr3RBt6ivW0pO33rFbnPQwiOqX0fpOHrxvxhOaCMcM5tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO3CHWsaE8HIEHBlEkYH7fQixNCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAu1W9m6++tx3EMDIZsejqIgsxp9gGwSJwpauh9sEMMUA0KIZqyK k8EcYXWNcDQiL50nu4ub1Jki/9Y+OOXJf+hSIw6xTv4VOiNz+tCh1c0QJgpYKdvw 0FqHHKj5fVHpeuNdF12TaBUVlb4QpgKG4Jppkamq7PahKvT5hMVEJ1l+et1AN4S8 +e75uA0gkddTkP+RzIkcweTN/uar4MB+GruW6WNnJrHJBo3apJXATEWSkaRVQUZF B1g5VoVs6rRfcXLO6UiqV4m19ThviBfV4h8pheh17X2QYf5R9rBgCGLemu/atXvX M1FLPd/iCEYUqReUhomqn1qs6yyukkayhFA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:42 2026 by rpki-client