$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a6666663a3a2f34382d3438203d3e2030.roa File: 323630323a663937653a6666663a3a2f34382d3438203d3e2030.roa (raw, json) Hash identifier: xI1qOgun6Ez0jTn4z70hbYKg+9tN3rLsZi8dd7+1nOc= Subject key identifier: BF:EF:A4:E7:D3:1F:D0:D4:F9:92:8B:E1:E3:4A:9E:77:A7:B7:CC:EA Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Certificate serial: 3E42761E60F192FECA478768FED503E61E6D0709 Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a6666663a3a2f34382d3438203d3e2030.roa Signing time: Sat 04 Apr 2026 01:58:16 +0000 ROA not before: Sat 04 Apr 2026 01:53:16 +0000 ROA not after: Sat 03 Apr 2027 01:58:16 +0000 asID: 0 IP address blocks: 2602:f97e:fff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:42:76:1e:60:f1:92:fe:ca:47:87:68:fe:d5:03:e6:1e:6d:07:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Validity Not Before: Apr 4 01:53:16 2026 GMT Not After : Apr 3 01:58:16 2027 GMT Subject: CN=BFEFA4E7D31FD0D4F9928BE1E34A9E77A7B7CCEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:81:d7:2f:b9:82:0d:ba:f9:6d:0b:61:9e:a2: c1:85:c0:80:d0:b9:87:29:49:9e:bd:54:ca:6a:99: 3b:0e:79:eb:69:a6:6b:a0:00:e9:3f:60:fb:2e:62: 62:5c:5b:48:60:c7:bc:97:9e:67:9a:38:b4:e3:96: dd:b8:c3:64:eb:c6:58:b6:b4:45:7e:15:fd:18:04: 7f:e4:07:99:dc:70:ad:5e:81:1e:37:76:7d:d0:0b: 1d:13:0f:89:51:3b:46:e5:51:f1:d5:de:c7:10:be: 20:97:14:d6:6a:b2:aa:57:b7:2d:62:c9:78:02:c5: f4:0a:04:c8:e7:15:14:5d:c7:23:4f:f4:bb:ff:c3: 83:8f:50:fc:bc:cc:cb:f2:19:c6:1e:d2:8c:a5:3f: 2f:0b:c8:61:02:ab:57:61:df:da:a9:4e:34:74:93: 66:3f:34:00:8b:30:79:bf:90:60:6d:f9:d9:ff:4c: e8:c7:47:3f:76:ed:fc:b1:3c:4c:a4:ad:d4:d1:b5: 4a:55:20:29:74:0b:0e:fa:c9:2c:c8:15:01:ee:a4: 11:9d:e1:74:e4:e3:a8:3f:6c:f6:13:2c:56:f8:a1: 58:2c:42:c5:80:7b:8c:c1:f8:99:5a:7b:fd:e5:04: 28:23:e2:ab:f2:01:62:e7:1b:68:96:42:bb:18:cf: 4e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:A4:E7:D3:1F:D0:D4:F9:92:8B:E1:E3:4A:9E:77:A7:B7:CC:EA X509v3 Authority Key Identifier: keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a6666663a3a2f34382d3438203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2602:f97e:fff::/48 Signature Algorithm: sha256WithRSAEncryption 02:17:6c:9d:39:bb:6a:94:5e:e4:4e:b8:4a:9f:83:d2:54:f4: 1a:19:67:36:0b:fe:a7:fb:95:20:7d:88:6e:d3:19:cf:1b:4e: f7:15:89:b9:1f:0d:04:ec:c9:ab:02:aa:36:c8:f7:1f:6d:8f: e7:17:b3:2a:57:69:39:71:11:28:81:5c:aa:ab:e4:1a:95:e0: 22:24:45:6b:b5:39:6a:69:58:2d:33:22:69:43:6c:a9:30:63: 21:64:79:cd:99:c7:78:09:e5:d3:d1:3f:34:ea:42:48:5b:6d: df:44:15:3c:f6:73:e6:46:10:89:ef:03:06:af:6f:5c:f0:d5: 6b:e0:24:67:58:23:0e:17:81:37:e6:8e:11:71:61:0b:4e:07: d7:6a:78:51:e2:19:83:ee:64:92:09:8a:bf:0e:5c:5d:d1:e3: 0b:65:bf:b5:69:25:c1:7e:4b:c3:6a:c6:05:03:cb:34:71:8a: c9:a1:32:db:0a:d7:95:44:32:47:fa:bb:9e:e5:47:d4:b3:89: 5c:09:36:01:39:01:9d:79:15:a1:0b:12:a3:d9:b3:d5:ee:f7: 49:80:8c:21:7b:4f:46:80:b4:6e:cb:a3:01:52:cf:34:d8:ab: 0d:da:a4:74:aa:41:55:7c:15:b6:8c:9e:39:0c:5e:ff:9f:33: cb:f5:da:23 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUPkJ2HmDxkv7KR4do/tUD5h5tBwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzNkYzIxMzNiZDM2MThhNDE3ZjVhNDc5 YTU3MjBmYzM0MGY4ZTljYzAwHhcNMjYwNDA0MDE1MzE2WhcNMjcwNDAzMDE1ODE2 WjAzMTEwLwYDVQQDEyhCRkVGQTRFN0QzMUZEMEQ0Rjk5MjhCRTFFMzRBOUU3N0E3 QjdDQ0VBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIHXL7mCDbr5 bQthnqLBhcCA0LmHKUmevVTKapk7DnnraaZroADpP2D7LmJiXFtIYMe8l55nmji0 45bduMNk68ZYtrRFfhX9GAR/5AeZ3HCtXoEeN3Z90AsdEw+JUTtG5VHx1d7HEL4g lxTWarKqV7ctYsl4AsX0CgTI5xUUXccjT/S7/8ODj1D8vMzL8hnGHtKMpT8vC8hh AqtXYd/aqU40dJNmPzQAizB5v5BgbfnZ/0zox0c/du38sTxMpK3U0bVKVSApdAsO +sksyBUB7qQRneF05OOoP2z2EyxW+KFYLELFgHuMwfiZWnv95QQoI+Kr8gFi5xto lkK7GM9OCwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFL/vpOfTH9DU+ZKL4eNKnnen t8zqMB8GA1UdIwQYMBaAFNMnxgjB6Fb2wHiXblBVWZRaI9rYMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv RDMyN0M2MDhDMUU4NTZGNkMwNzg5NzZFNTA1NTU5OTQ1QTIzREFEOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx NjQ3YWFjM2RjMjEzM2JkMzYxOGE0MTdmNWE0NzlhNTcyMGZjMzQwZjhlOWNjMC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx ODBhY2MxMTFhMi8wLzMyMzYzMDMyM2E2NjM5Mzc2NTNhNjY2NjY2M2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvl+D/8wDQYJKoZIhvcNAQEL BQADggEBAAIXbJ05u2qUXuROuEqfg9JU9BoZZzYL/qf7lSB9iG7TGc8bTvcVibkf DQTsyasCqjbI9x9tj+cXsypXaTlxESiBXKqr5BqV4CIkRWu1OWppWC0zImlDbKkw YyFkec2Zx3gJ5dPRPzTqQkhbbd9EFTz2c+ZGEInvAwavb1zw1WvgJGdYIw4XgTfm jhFxYQtOB9dqeFHiGYPuZJIJir8OXF3R4wtlv7VpJcF+S8NqxgUDyzRxismhMtsK 15VEMkf6u57lR9SziVwJNgE5AZ15FaELEqPZs9Xu90mAjCF7T0aAtG7LowFSzzTY qw3apHSqQVV8FbaMnjkMXv+fM8v12iM= -----END CERTIFICATE-----Generated at Tue Apr 7 19:39:22 2026 by rpki-client