$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa File: 0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa (raw, json) Hash identifier: Mwx3nss+Yq7CJfBP6EKSXTYqAw9sC4Z7VMQSNfig0eg= Subject key identifier: 4F:78:14:BE:E4:A6:17:02:0A:FE:C4:EA:6A:7F:0B:CA:D1:82:0A:E1 Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Certificate serial: 010D0C9F4328584D0EA7B497D8701A2F542B74E0 Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 31898 IP address blocks: 2620:11b:9000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b4:97:d8:70:1a:2f:54:2b:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=b71d2707-c1c0-4d30-93a0-1e279ff02c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:f9:b9:aa:31:52:7a:5b:3f:57:51:bd:4e: 52:7f:67:68:06:f3:e6:af:92:26:db:26:5b:9f:33: b4:e3:7f:27:01:65:3a:95:16:c0:74:0d:32:7d:0a: b5:7d:1d:d7:26:ff:21:8c:a0:d4:7e:0a:59:8d:f8: 7c:60:1e:c9:90:77:b9:79:6b:42:83:05:6d:eb:56: fb:8d:8e:88:d6:a6:48:bf:7c:12:21:40:b5:7e:3d: c6:66:bc:08:8b:77:ee:3b:dd:dd:1a:c8:7a:c6:53: f3:a3:2f:df:eb:89:61:f0:00:9a:ef:f1:2a:a7:98: 4c:93:fb:2b:a9:1a:59:b0:e6:de:97:be:46:74:62: 59:81:0d:32:d9:95:0b:06:5b:ec:65:0a:c5:32:3f: dd:d4:bb:0d:45:e5:09:7b:c0:46:22:d0:35:5d:0b: 33:c5:e7:6b:2a:94:42:d8:c4:c2:4e:cc:6e:a4:83: d3:cd:b2:46:3a:b8:12:42:fe:bb:c4:d2:76:ae:a8: d1:02:32:d7:32:d8:38:a0:9c:d1:e7:da:7c:97:e1: 53:b9:41:7c:bd:c1:fc:bb:4d:27:b7:4b:71:7f:dc: 80:1a:24:f7:6d:8a:11:d1:34:00:4b:38:99:c0:31: 71:55:45:87:31:cf:39:02:3b:63:af:d0:a4:00:9f: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:14:BE:E4:A6:17:02:0A:FE:C4:EA:6A:7F:0B:CA:D1:82:0A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/0e96be0b-7a3f-33aa-902c-3e77d58f2fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl X509v3 Authority Key Identifier: keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer sbgp-ipAddrBlock: critical IPv6: 2620:11b:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:60:c0:83:f8:82:e5:4a:2d:54:8a:ac:cd:55:63:bb:30:be: f4:33:57:47:d7:57:ca:9b:e3:9b:32:c3:6c:ff:79:3c:7c:34: e8:95:96:e8:08:6b:47:72:c3:fb:08:90:ea:f2:54:ba:af:46: c3:1b:cc:65:99:2b:d9:77:62:4f:37:f1:e4:75:51:d3:38:8d: 94:bb:41:ed:98:23:b0:c1:72:8e:33:ea:cb:76:22:29:6e:b6: 0b:16:be:1e:e2:c0:8f:18:43:a2:bc:23:e1:10:ca:c4:07:ca: 21:d7:5b:7a:fa:44:11:09:c5:b1:39:ac:dd:29:e1:4a:95:63: 5d:09:e2:5c:ac:05:1e:14:d8:c8:e7:6f:d7:a0:01:1c:f1:f1: f1:99:e7:c6:a4:37:a5:b2:6b:8f:6d:07:c0:a7:b6:21:1d:34: 51:9c:3c:44:b1:77:64:28:d0:7d:ca:91:b8:d4:9b:f5:fd:a8: 20:3a:7c:b1:8f:54:fc:d5:f1:ed:87:b2:21:fa:97:69:ce:c3: 8a:b2:68:11:ba:87:10:5a:75:f8:69:bb:ae:f5:10:f0:06:54: 32:e2:af:8c:0a:35:4e:29:71:ba:3f:ac:ff:6a:a5:5f:3c:8d: 16:31:7f:39:72:81:e3:c5:10:e5:8e:b4:a2:1f:1c:16:f8:68: 6e:db:c0:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Op7SX2HAaL1QrdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk4MTM2ZjAtM2VmYy00ZGZiLWEzZmUtNTk2ZDlhOGRm MDFhMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YjcxZDI3MDctYzFjMC00ZDMwLTkzYTAtMWUyNzlmZjAyYzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNL5uaoxUnpbP1dRvU5Sf2doBvPmr5Im2yZb nzO0438nAWU6lRbAdA0yfQq1fR3XJv8hjKDUfgpZjfh8YB7JkHe5eWtCgwVt61b7 jY6I1qZIv3wSIUC1fj3GZrwIi3fuO93dGsh6xlPzoy/f64lh8ACa7/Eqp5hMk/sr qRpZsObel75GdGJZgQ0y2ZULBlvsZQrFMj/d1LsNReUJe8BGItA1XQszxedrKpRC 2MTCTsxupIPTzbJGOrgSQv67xNJ2rqjRAjLXMtg4oJzR59p8l+FTuUF8vcH8u00n t0txf9yAGiT3bYoR0TQASziZwDFxVUWHMc85Ajtjr9CkAJ9M+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE94FL7kphcCCv7E6mp/C8rRggrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTgx MzZmMC0zZWZjLTRkZmItYTNmZS01OTZkOWE4ZGYwMWEvMGU5NmJlMGItN2EzZi0z M2FhLTkwMmMtM2U3N2Q1OGYyZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk4MTM2ZjAtM2VmYy00ZGZiLWEz ZmUtNTk2ZDlhOGRmMDFhL2M5ODEzNmYwLTNlZmMtNGRmYi1hM2ZlLTU5NmQ5YThk ZjAxYS5jcmwwHwYDVR0jBBgwFoAU+aZ1AijUOo0zRp4cvJUONtc7Pn0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTgxMzZmMC0zZWZjLTRkZmItYTNmZS01OTZk OWE4ZGYwMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABG5AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxgwIP4guVKLVSKrM1VY7swvvQzV0fXV8qb45syw2z/eTx8NOiV lugIa0dyw/sIkOryVLqvRsMbzGWZK9l3Yk838eR1UdM4jZS7Qe2YI7DBco4z6st2 IilutgsWvh7iwI8YQ6K8I+EQysQHyiHXW3r6RBEJxbE5rN0p4UqVY10J4lysBR4U 2Mjnb9egARzx8fGZ58akN6Wya49tB8CntiEdNFGcPESxd2Qo0H3KkbjUm/X9qCA6 fLGPVPzV8e2HsiH6l2nOw4qyaBG6hxBadfhpu671EPAGVDLir4wKNU4pcbo/rP9q pV88jRYxfzlygePFEOWOtKIfHBb4aG7bwAc= -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:27 2026 by rpki-client