$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa File: b997d817-4fa0-3f4d-b90b-0646406d600a.roa (raw, json) Hash identifier: 3nEVFqtiooFpsMcQqvnyqutOsqpko85PzsD1IAxSSHM= Subject key identifier: 2B:D5:D6:59:31:1A:A1:1A:65:5D:72:1C:BB:CF:C4:1B:02:C2:FF:AE Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F4328584D44FA43AC2057ED62827D0660 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 1008 IP address blocks: 2606:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:43:ac:20:57:ed:62:82:7d:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=435da997-d1ff-40d1-80fc-a60a1fa6b56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:ba:82:7b:8a:ca:23:36:68:e5:6c:54:9a: a6:89:a4:b1:30:1f:05:bc:72:06:5a:ae:23:4d:80: 65:fd:8d:aa:2d:1f:14:67:2c:01:9a:c3:ee:1b:23: 0e:25:65:b3:40:01:14:c6:81:9f:5b:4a:88:ad:e4: 88:f1:1e:ab:d8:97:b0:2d:ec:98:9d:79:93:e7:14: 41:3e:02:47:8b:bc:57:b8:1b:b0:2d:7c:2f:38:e4: 20:0b:29:15:97:42:b6:36:88:66:8d:76:a2:2b:e6: ed:03:68:91:3e:41:83:d1:9c:99:cf:19:5f:02:2b: 7a:02:7e:43:a1:a0:47:78:b5:dd:d9:7e:e9:d2:79: 48:b4:05:4b:cd:b3:af:ac:57:8b:ed:41:63:75:e3: 11:ea:96:ab:57:83:5e:1c:f9:b0:a0:c0:ef:a4:13: 73:6d:d7:28:8a:a3:cd:3a:c3:a1:57:b7:2b:42:c5: 3b:eb:62:c6:dc:14:cb:f7:3a:e1:16:4f:a4:f9:e8: 33:ef:b6:ff:5c:53:58:d4:f9:55:0f:d0:3c:da:c0: 1a:2a:22:eb:04:37:9f:f7:6e:83:33:f7:19:0f:5b: 6c:51:cb:e6:0b:67:65:e6:c3:45:25:70:1a:32:7a: d6:88:51:f4:2c:ba:22:8a:48:80:c6:2d:d9:12:47: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:D6:59:31:1A:A1:1A:65:5D:72:1C:BB:CF:C4:1B:02:C2:FF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/b997d817-4fa0-3f4d-b90b-0646406d600a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv6: 2606:e040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9f:b2:8d:6c:03:77:7d:51:0f:27:17:70:70:1a:4d:9e:c7: c0:24:bf:4d:e0:2e:c8:e5:91:e0:6c:bf:58:36:ab:0d:08:7d: c0:6f:86:c8:3a:2c:93:44:1d:76:a0:10:7f:f1:d3:c8:10:07: 99:84:20:1c:5e:6b:5d:58:3c:7c:35:ec:d6:d7:b6:4f:52:b9: 8d:1b:a9:8f:e4:62:be:f4:bf:01:56:f1:95:fb:94:14:04:b1: f9:57:04:5a:f5:b7:a5:44:62:91:b2:e8:fe:bd:e5:d2:aa:b3: 5e:7d:63:06:b2:53:5c:44:a9:ea:43:8c:66:48:d5:9e:b9:13: 89:28:ea:35:ee:5d:a3:88:cb:dd:a6:21:cc:5e:24:e8:f6:fc: c3:8e:df:09:3f:af:de:b4:2f:74:60:a0:a6:06:07:79:9a:74: a3:ab:69:f4:a8:f5:69:03:c7:e5:14:35:ce:ac:87:c1:85:69: e4:51:48:f9:94:d9:da:f0:54:50:36:2a:d8:36:37:78:af:bc: a5:12:db:44:7a:ee:05:b9:fd:f8:22:d5:e9:51:9e:07:70:4a: c6:35:11:81:13:8d:59:28:df:c6:ca:b9:93:04:2e:77:8c:0d: cd:90:ea:7f:e2:41:27:93:88:6e:fb:3a:cd:6c:01:a7:c1:27: e9:da:b5:de -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1E+kOsIFftYoJ9BmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDM1ZGE5OTctZDFmZi00MGQxLTgwZmMtYTYwYTFmYTZiNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo66gnuKyiM2aOVsVJqmiaSxMB8FvHIGWq4j TYBl/Y2qLR8UZywBmsPuGyMOJWWzQAEUxoGfW0qIreSI8R6r2JewLeyYnXmT5xRB PgJHi7xXuBuwLXwvOOQgCykVl0K2NohmjXaiK+btA2iRPkGD0ZyZzxlfAit6An5D oaBHeLXd2X7p0nlItAVLzbOvrFeL7UFjdeMR6parV4NeHPmwoMDvpBNzbdcoiqPN OsOhV7crQsU762LG3BTL9zrhFk+k+egz77b/XFNY1PlVD9A82sAaKiLrBDef926D M/cZD1tsUcvmC2dl5sNFJXAaMnrWiFH0LLoiikiAxi3ZEkfIRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvV1lkxGqEaZV1yHLvPxBsCwv+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvYjk5N2Q4MTctNGZhMC0z ZjRkLWI5MGItMDY0NjQwNmQ2MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXn7KNbAN3fVEPJxdwcBpNnsfAJL9N4C7I5ZHgbL9YNqsNCH3Ab4bI OiyTRB12oBB/8dPIEAeZhCAcXmtdWDx8NezW17ZPUrmNG6mP5GK+9L8BVvGV+5QU BLH5VwRa9belRGKRsuj+veXSqrNefWMGslNcRKnqQ4xmSNWeuROJKOo17l2jiMvd piHMXiTo9vzDjt8JP6/etC90YKCmBgd5mnSjq2n0qPVpA8flFDXOrIfBhWnkUUj5 lNna8FRQNirYNjd4r7ylEttEeu4Fuf34ItXpUZ4HcErGNRGBE41ZKN/GyrmTBC53 jA3NkOp/4kEnk4hu+zrNbAGnwSfp2rXe -----END CERTIFICATE-----Generated at Tue Mar 24 11:21:55 2026 by rpki-client