$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/8e79d1ae-800e-3f1a-9340-f776aa17b4d2.roa File: 8e79d1ae-800e-3f1a-9340-f776aa17b4d2.roa (raw, json) Hash identifier: S+85fECLKwn0xuo2fLMYKEZJJBmVWNqH8pgdXbZEGVU= Subject key identifier: 24:DA:AC:46:C3:3A:CB:43:62:BE:46:FC:71:0E:B7:93:F1:12:CF:69 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584D5234E961FF59AC7B6D652480 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/8e79d1ae-800e-3f1a-9340-f776aa17b4d2.roa Signing time: Sat 28 Mar 2026 18:44:28 +0000 ROA not before: Sat 28 Mar 2026 18:44:28 +0000 ROA not after: Thu 21 May 2026 17:57:03 +0000 asID: 14618 IP address blocks: 2607:3640:ffcc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:e9:61:ff:59:ac:7b:6d:65:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Mar 28 18:44:28 2026 GMT Not After : May 21 17:57:03 2026 GMT Subject: CN=5147db25-674b-43b3-b98a-9613db73949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:80:e3:e0:61:1d:18:ce:bd:e5:c6:a9:56: a2:7e:3f:87:5f:dc:62:d6:1e:dc:d3:5a:b0:66:d6: 0e:32:fa:3b:f7:fe:85:51:ec:50:ed:f4:a1:b0:0a: 70:25:7f:bb:f3:d3:e2:21:f0:4a:2e:e7:9d:d1:f0: 30:62:5a:7b:28:0a:9b:84:66:a1:2e:fd:36:51:a3: 42:50:84:55:03:98:8a:0b:39:64:29:fa:3f:9c:73: 3d:58:d1:80:f6:e4:af:f3:ec:20:5c:39:2c:fa:85: e0:4f:de:25:f3:2a:e7:ca:51:3f:3b:76:2d:cf:8d: f9:bf:ae:eb:ef:f7:12:31:9b:b8:21:75:b2:0f:d5: d4:1e:8b:e3:60:ba:c4:06:67:7e:be:a4:c0:cc:a0: 30:29:20:74:e6:87:6d:8f:ef:59:e0:cf:02:dc:c5: f5:91:e1:a3:62:04:38:cd:96:5d:f1:43:c9:e7:c8: 10:b8:3e:08:87:40:17:6a:08:c8:35:ae:d0:ae:24: aa:d6:10:01:7b:92:64:96:38:0c:65:fd:53:b1:be: 9d:a1:cd:3f:86:b0:b8:18:d5:2d:5a:cb:ff:b4:dd: ea:1b:04:1f:35:56:34:85:c5:56:6f:91:b9:33:16: ab:fa:18:9f:b1:8c:34:b6:15:52:47:2f:a7:42:e2: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:AC:46:C3:3A:CB:43:62:BE:46:FC:71:0E:B7:93:F1:12:CF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/8e79d1ae-800e-3f1a-9340-f776aa17b4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640:ffcc::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0d:87:54:33:1e:19:91:80:74:e0:af:fe:13:cf:79:47:f7: d0:58:8d:1d:f0:7d:7a:41:2c:68:35:fa:2f:af:3d:a4:31:eb: 40:02:14:9b:ea:ad:dc:93:ff:a3:09:30:0e:e3:8c:f5:05:2c: d2:99:0b:7f:58:73:bc:24:c1:4b:c1:c2:f5:45:da:d1:c3:0a: b4:3e:f4:1b:0c:f8:af:57:e0:ad:b4:ef:92:a4:54:e3:d6:43: 4e:b4:0c:35:47:5d:89:91:79:98:9e:68:0c:b4:b0:26:0b:38: 99:a7:f3:93:e3:0b:cd:20:a0:6b:6a:f5:0b:40:67:95:21:45: 5f:1f:4d:1b:f9:81:e7:97:fd:6a:66:f1:41:1a:ed:a9:d5:54: 8c:c3:98:1d:9a:a2:de:6e:2e:c4:ed:f2:3b:6c:ae:54:3d:10: e1:dd:09:03:9f:e4:1b:c1:37:ff:7e:95:8b:8b:86:97:4a:b1: 90:44:d3:5f:08:4a:b6:2e:ce:dd:37:0e:bc:c9:b1:24:01:7e: 57:7a:9e:32:f1:7b:04:18:56:18:b3:d7:ff:08:f9:40:41:e8: a4:c8:c6:91:68:fb:80:85:e2:0e:95:09:c8:21:54:91:ad:3a: de:20:18:20:ca:05:ef:5c:5b:73:b5:ce:4f:6b:24:8a:6b:8d: a5:74:0e:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SNOlh/1mse21lJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDMyODE4NDQyOFoXDTI2MDUyMTE3NTcwM1owLzEtMCsGA1UEAxMk NTE0N2RiMjUtNjc0Yi00M2IzLWI5OGEtOTYxM2RiNzM5NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLaA4+BhHRjOveXGqVaifj+HX9xi1h7c01qw ZtYOMvo79/6FUexQ7fShsApwJX+789PiIfBKLued0fAwYlp7KAqbhGahLv02UaNC UIRVA5iKCzlkKfo/nHM9WNGA9uSv8+wgXDks+oXgT94l8yrnylE/O3Ytz435v67r 7/cSMZu4IXWyD9XUHovjYLrEBmd+vqTAzKAwKSB05odtj+9Z4M8C3MX1keGjYgQ4 zZZd8UPJ58gQuD4Ih0AXagjINa7QriSq1hABe5JkljgMZf1Tsb6doc0/hrC4GNUt Wsv/tN3qGwQfNVY0hcVWb5G5Mxar+hifsYw0thVSRy+nQuJsGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTarEbDOstDYr5G/HEOt5PxEs9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvOGU3OWQxYWUtODAwZS0z ZjFhLTkzNDAtZjc3NmFhMTdiNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgc2QP/M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMNh1QzHhmRgHTgr/4Tz3lH99BYjR3wfXpBLGg1+i+vPaQx60AC FJvqrdyT/6MJMA7jjPUFLNKZC39Yc7wkwUvBwvVF2tHDCrQ+9BsM+K9X4K2075Kk VOPWQ060DDVHXYmReZieaAy0sCYLOJmn85PjC80goGtq9QtAZ5UhRV8fTRv5geeX /Wpm8UEa7anVVIzDmB2aot5uLsTt8jtsrlQ9EOHdCQOf5BvBN/9+lYuLhpdKsZBE 018ISrYuzt03DrzJsSQBfld6njLxewQYVhiz1/8I+UBB6KTIxpFo+4CF4g6VCcgh VJGtOt4gGCDKBe9cW3O1zk9rJIprjaV0DsI= -----END CERTIFICATE-----Generated at Tue Apr 7 10:36:50 2026 by rpki-client