$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa File: 330d7a56-9d3b-325a-9408-7b85401e8917.roa (raw, json) Hash identifier: 0Hl/ogJsMwoghd+WTm0dkFTaytWj98S2SdQq7iv3kBU= Subject key identifier: 8D:5A:0C:11:DA:70:45:3D:08:87:8D:1F:46:4F:24:7C:8A:90:3D:39 Certificate issuer: /CN=8715c48f-238b-4492-ab94-609edd679287 Certificate serial: 010D0C9F4328584D3B34E5C3DC84E84B5729B680 Authority key identifier: 15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 68 IP address blocks: 2620:126:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e5:c3:dc:84:e8:4b:57:29:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8715c48f-238b-4492-ab94-609edd679287 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=ae9aa089-93c8-4cf8-85f9-67a49b84fdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:ba:79:18:a5:13:58:be:72:03:28:51:ec: eb:2f:f7:80:87:6c:ac:c7:83:8a:d3:aa:fb:16:54: 3a:08:5a:3b:02:3f:93:f7:46:a8:31:d7:d5:be:95: 15:01:f2:c0:0d:50:ca:46:fd:19:16:c2:b1:94:73: a3:88:e5:5b:7f:e3:d7:ed:19:66:a7:a9:46:a7:ec: d5:1d:87:b0:05:fa:4a:64:d8:00:b2:54:98:9f:77: 7d:f0:c0:54:47:55:8c:81:1b:16:28:98:99:07:29: 25:d1:c8:51:e9:ae:39:4e:98:59:1e:99:19:86:47: ed:19:73:51:32:7e:81:d3:23:f6:47:98:72:b3:e2: e7:c4:3c:8e:00:2b:80:02:71:67:58:46:72:a5:36: 76:da:5d:ca:f8:40:da:08:cb:79:eb:69:2f:47:8c: 1a:50:39:43:01:fa:44:9b:6f:9e:c5:2d:49:5a:b3: 0a:ea:56:41:e1:c5:cd:5e:ca:ae:19:8c:11:6d:1a: 35:a8:ee:ca:d3:80:e7:e2:92:be:83:4b:d5:12:d8: c7:a7:c5:e3:5f:7d:2b:ff:a2:60:60:da:79:8a:9a: 88:80:7b:fd:0b:72:58:15:41:d1:86:62:1d:1d:0e: 05:5f:eb:e1:b0:b7:92:e8:0c:c3:6a:77:24:fa:89: ea:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:0C:11:DA:70:45:3D:08:87:8D:1F:46:4F:24:7C:8A:90:3D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/330d7a56-9d3b-325a-9408-7b85401e8917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287/8715c48f-238b-4492-ab94-609edd679287.crl X509v3 Authority Key Identifier: keyid:15:6C:BC:CD:BB:DE:77:3B:E2:ED:55:0B:0F:8C:04:DD:7F:24:86:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8715c48f-238b-4492-ab94-609edd679287.cer sbgp-ipAddrBlock: critical IPv6: 2620:126:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ff:6b:79:f0:cb:2d:45:af:66:14:5e:37:a1:27:8f:ce:0f: 6c:97:28:74:c6:50:c0:37:9b:3c:ca:82:0d:ed:cc:8e:ab:f8: a3:1c:ee:d3:68:ec:e6:01:54:ae:43:85:05:3f:20:ad:62:9e: e0:96:2f:db:8d:6f:93:8d:22:cc:6e:57:85:d8:0a:0e:50:8b: 8c:ad:2a:b6:6d:0c:70:64:50:af:da:46:b5:2d:59:63:bd:5d: 7c:93:30:10:30:55:d5:65:12:61:cf:a3:31:2d:cc:85:5a:78: 36:ab:3d:64:80:e3:bf:c1:e7:56:2d:78:93:fe:b4:d2:20:92: 8f:37:d0:32:c8:aa:1e:35:8b:c4:90:5b:01:cc:3c:b8:42:8d: a7:0d:e6:d8:38:47:c3:c1:c3:b0:b5:51:f0:a2:69:e2:d5:f2: b8:76:fa:e6:f7:3e:45:0b:2a:ba:76:69:38:1a:91:9a:34:2e: b1:97:2d:8f:a2:75:54:55:ce:cc:66:e3:e3:53:3f:02:e2:d7: f6:44:ef:a1:89:c6:8e:9d:9f:34:1c:99:89:be:6a:50:1d:b9: 70:64:0d:3d:d7:96:33:85:e9:be:59:99:be:59:ba:bc:2b:c4: 4d:d0:0c:a2:45:4d:c1:8a:4e:6d:63:4c:5a:db:dc:7d:24:d0: 26:f0:d1:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE07NOXD3IToS1cptoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxNWM0OGYtMjM4Yi00NDkyLWFiOTQtNjA5ZWRkNjc5 Mjg3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YWU5YWEwODktOTNjOC00Y2Y4LTg1ZjktNjdhNDliODRmZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQq6eRilE1i+cgMoUezrL/eAh2ysx4OK06r7 FlQ6CFo7Aj+T90aoMdfVvpUVAfLADVDKRv0ZFsKxlHOjiOVbf+PX7Rlmp6lGp+zV HYewBfpKZNgAslSYn3d98MBUR1WMgRsWKJiZBykl0chR6a45TphZHpkZhkftGXNR Mn6B0yP2R5hys+LnxDyOACuAAnFnWEZypTZ22l3K+EDaCMt562kvR4waUDlDAfpE m2+exS1JWrMK6lZB4cXNXsquGYwRbRo1qO7K04Dn4pK+g0vVEtjHp8XjX30r/6Jg YNp5ipqIgHv9C3JYFUHRhmIdHQ4FX+vhsLeS6AzDanck+onqUwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI1aDBHacEU9CIeNH0ZPJHyKkD05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzE1 YzQ4Zi0yMzhiLTQ0OTItYWI5NC02MDllZGQ2NzkyODcvMzMwZDdhNTYtOWQzYi0z MjVhLTk0MDgtN2I4NTQwMWU4OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODcxNWM0OGYtMjM4Yi00NDkyLWFi OTQtNjA5ZWRkNjc5Mjg3Lzg3MTVjNDhmLTIzOGItNDQ5Mi1hYjk0LTYwOWVkZDY3 OTI4Ny5jcmwwHwYDVR0jBBgwFoAUFWy8zbvedzvi7VULD4wE3X8khqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84NzE1YzQ4Zi0yMzhiLTQ0OTItYWI5NC02MDll ZGQ2NzkyODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABJkAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk/9refDLLUWvZhReN6Enj84PbJcodMZQwDebPMqCDe3Mjqv4oxzu 02js5gFUrkOFBT8grWKe4JYv241vk40izG5XhdgKDlCLjK0qtm0McGRQr9pGtS1Z Y71dfJMwEDBV1WUSYc+jMS3MhVp4Nqs9ZIDjv8HnVi14k/600iCSjzfQMsiqHjWL xJBbAcw8uEKNpw3m2DhHw8HDsLVR8KJp4tXyuHb65vc+RQsqunZpOBqRmjQusZct j6J1VFXOzGbj41M/AuLX9kTvoYnGjp2fNByZib5qUB25cGQNPdeWM4XpvlmZvlm6 vCvETdAMokVNwYpObWNMWtvcfSTQJvDReg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:04:33 2026 by rpki-client