$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa File: ce877e20-3760-3ae7-af09-9478dcb48f9c.roa (raw, json) Hash identifier: 0TSGg/eTryy9awm2I/lgQQ6Al9f0b198R4g/MpAlrWI= Subject key identifier: 44:70:46:6A:34:7D:D9:EC:3C:B4:1B:EF:09:DA:82:86:57:B1:55:2F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584D492A5C45C9F9B37779F24980 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 13807 IP address blocks: 2604:9500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5c:45:c9:f9:b3:77:79:f2:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=e48213ec-4e8a-4341-8d85-0301a8982c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:a7:23:d5:b2:a6:36:a4:9b:a8:f6:ad:29: 69:2b:0b:cd:2b:a3:9e:76:f2:b6:a8:7a:88:98:a3: 12:4f:4f:d7:49:4e:9a:5b:ec:bb:32:57:fc:a3:c6: b9:29:22:8d:59:12:ca:43:a9:6f:37:25:59:22:ef: 8b:2d:ed:70:10:77:32:ae:e2:8b:9d:4f:f8:b4:c2: a1:ba:8b:d4:3f:ed:62:40:fa:c2:9b:51:d1:32:28: b6:30:bb:bb:d9:ba:a4:0d:34:3c:ff:56:ee:22:9f: 9e:db:dd:5a:48:4f:02:61:27:5b:52:a6:06:8d:27: a5:4f:8a:72:91:9f:3e:3b:8b:5b:79:58:fe:95:08: b2:f8:fd:58:ea:55:1a:76:39:a2:0f:12:84:dd:09: 7f:f5:36:b5:20:d0:6c:b6:55:91:63:a6:35:78:6c: 24:82:7e:1a:9b:94:34:cb:1f:c3:1b:52:c2:d0:ad: 19:48:59:ec:99:0f:cf:22:d9:57:04:7b:23:4c:df: 2f:07:ba:97:87:65:ff:e5:47:2c:bb:78:92:5a:9c: 8c:79:ef:9e:16:76:68:a5:7b:a2:6c:1d:13:a2:9b: 87:53:37:e4:7a:14:f7:c7:c7:fa:c5:0b:89:5d:a1: b7:76:bf:c8:0a:c9:42:e6:3f:b0:69:ed:9f:08:01: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:46:6A:34:7D:D9:EC:3C:B4:1B:EF:09:DA:82:86:57:B1:55:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2604:9500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2b:4b:83:34:89:37:f0:e8:c1:27:8b:ae:12:47:d5:71:bb: b8:92:b7:d4:1c:b8:ac:0d:ee:2c:a0:0a:ee:4c:e2:6c:b8:e0: 8f:fb:77:06:3f:16:77:a9:ad:84:8f:e2:ea:64:0f:00:46:57: db:e5:4b:07:8e:a5:24:9c:cb:a5:3c:4c:8f:cd:f3:e1:88:9a: 67:c0:cc:8a:0b:73:1c:ec:c7:a4:2b:2a:dc:79:f1:43:e0:06: 70:c2:18:5e:2b:28:b0:14:be:66:ce:e9:ca:37:c7:05:c9:97: 34:7e:aa:e7:63:32:02:d1:61:8d:13:26:84:40:dd:5f:87:b5: 03:8e:a6:32:44:d9:a8:db:28:f3:39:eb:9a:36:3a:5e:40:40: 2b:04:d5:55:dc:52:fd:43:62:a3:98:54:28:52:b4:8d:5f:01: 85:a4:c3:5f:be:de:a8:af:ce:21:a6:7b:e6:44:5f:e9:ea:0f: 3a:1a:35:bc:81:f3:83:e0:19:bb:c8:88:90:0d:59:a2:bf:90: ff:92:11:f1:97:3b:f1:a8:f8:c8:c9:7c:52:2c:31:1e:18:dc: e9:55:f8:9d:8d:2a:1d:03:75:49:b8:f0:49:07:9c:7e:1a:ea: c9:f4:0e:ec:32:6b:07:80:89:15:64:8f:19:d5:39:e2:dd:ac: d3:50:ba:da -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKlxFyfmzd3nySYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZTQ4MjEzZWMtNGU4YS00MzQxLThkODUtMDMwMWE4OTgyYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VmnI9Wypjakm6j2rSlpKwvNK6OedvK2qHqI mKMST0/XSU6aW+y7Mlf8o8a5KSKNWRLKQ6lvNyVZIu+LLe1wEHcyruKLnU/4tMKh uovUP+1iQPrCm1HRMii2MLu72bqkDTQ8/1buIp+e291aSE8CYSdbUqYGjSelT4py kZ8+O4tbeVj+lQiy+P1Y6lUadjmiDxKE3Ql/9Ta1INBstlWRY6Y1eGwkgn4am5Q0 yx/DG1LC0K0ZSFnsmQ/PItlXBHsjTN8vB7qXh2X/5Ucsu3iSWpyMee+eFnZopXui bB0TopuHUzfkehT3x8f6xQuJXaG3dr/ICslC5j+wae2fCAHr2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFERwRmo0fdnsPLQb7wnagoZXsVUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2U4NzdlMjAtMzc2MC0z YWU3LWFmMDktOTQ3OGRjYjQ4ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoK0uDNIk38OjBJ4uuEkfVcbu4krfUHLisDe4soAruTOJsuOCP+3cG PxZ3qa2Ej+LqZA8ARlfb5UsHjqUknMulPEyPzfPhiJpnwMyKC3Mc7MekKyrcefFD 4AZwwhheKyiwFL5mzunKN8cFyZc0fqrnYzIC0WGNEyaEQN1fh7UDjqYyRNmo2yjz OeuaNjpeQEArBNVV3FL9Q2KjmFQoUrSNXwGFpMNfvt6or84hpnvmRF/p6g86GjW8 gfOD4Bm7yIiQDVmiv5D/khHxlzvxqPjIyXxSLDEeGNzpVfidjSodA3VJuPBJB5x+ GurJ9A7sMmsHgIkVZI8Z1Tni3azTULra -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:26 2026 by rpki-client