$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa File: e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa (raw, json) Hash identifier: JKQ6nnJsK+VukhZtDzYTK6GlywotjSL1d5h41rpDmVM= Subject key identifier: 15:81:51:1D:9C:52:34:E9:51:FF:1A:07:99:81:A8:C2:30:E0:40:EB Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D44FA4299D64136F6DDE19E80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 396961 IP address blocks: 2001:468:2809::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:42:99:d6:41:36:f6:dd:e1:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b48a15f1-ede0-483c-b9a7-876186e032b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:5c:57:d4:0e:e3:d9:30:de:a6:2d:a2:c9: e3:f0:d3:59:87:72:05:c0:01:d9:4a:aa:eb:fb:d7: 10:bc:95:9f:93:65:c5:32:b3:4d:db:c0:ab:e8:bd: 17:51:33:05:98:6d:c3:ae:ad:78:59:79:1a:ab:50: 11:12:7d:99:3d:dc:cd:82:d2:5d:c3:57:cd:c3:28: e6:0a:e4:6e:33:98:f5:b8:a5:59:f4:45:38:7c:3b: 88:d3:0d:d2:0c:73:12:96:b4:04:ea:9c:e2:55:a5: 09:66:de:d4:5d:c8:ec:9d:c9:7d:bd:57:36:97:df: fb:22:f8:ca:65:a5:09:bd:2c:9f:53:8a:15:93:ef: 9e:39:e3:3b:47:5c:41:bb:a3:0d:6e:5b:51:5c:02: 22:0f:e0:83:46:db:c4:33:75:18:33:2b:d4:36:76: 4f:10:ba:7f:f2:77:55:31:4d:c9:58:d9:79:47:12: 74:68:1c:c0:92:e7:2e:02:48:68:5c:37:2d:53:2f: 13:4f:82:be:d4:aa:35:fe:b8:a0:ea:63:6d:88:ab: 73:b2:16:0a:0a:df:67:94:82:74:9d:19:94:8a:99: 51:1f:a6:1f:7a:e8:4c:74:35:66:35:6c:4e:6e:e4: b2:ac:80:6b:c3:ab:a1:6c:20:1e:21:d6:25:6c:f9: be:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:51:1D:9C:52:34:E9:51:FF:1A:07:99:81:A8:C2:30:E0:40:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/e7587d18-7679-30cd-bf32-c08c60a1b4fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:2809::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:b1:84:d9:74:9d:9a:5e:50:01:aa:5b:3b:c3:8d:bd:ed:ab: ee:78:28:4f:01:cb:35:dd:e1:79:79:b5:5c:5f:41:0e:97:e2: 29:46:32:44:da:86:70:9c:82:1d:27:09:8b:2f:e6:15:31:d3: 2b:ed:59:a5:7e:bb:0c:7d:18:6c:7b:ad:f7:b6:d9:89:1f:1f: db:bf:76:30:a9:0c:19:f0:e6:d8:43:ff:3f:c0:d7:c1:20:ae: 0c:db:83:0f:a0:6e:f7:85:92:54:15:d8:92:b8:5b:6d:dd:00: c7:10:d0:71:be:f8:ab:c9:88:f9:e3:f6:6e:e2:34:28:d8:89: 12:a2:01:0f:25:c1:e2:1b:4a:04:2a:4a:17:bb:92:2e:2e:09: 0d:b7:a9:13:db:0f:46:32:a7:ef:96:0a:7c:f5:3d:48:da:1c: fd:d1:d8:e0:1d:99:8a:36:b0:d7:bf:f7:2d:93:45:b1:9f:4b: 35:1f:db:e2:e1:83:0f:40:be:a2:e8:f6:dd:aa:63:21:a3:bd: f1:fd:78:0f:cf:a0:2e:86:e1:82:8c:00:b5:86:26:0c:6e:c0: a0:24:5c:f7:03:0b:f0:a5:cb:f3:40:7f:59:9b:40:5e:17:cb: 94:c0:7e:41:37:e2:17:27:f4:12:9d:98:4b:fb:10:c2:1c:1c: e6:3e:fc:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+kKZ1kE29t3hnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjQ4YTE1ZjEtZWRlMC00ODNjLWI5YTctODc2MTg2ZTAzMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNlcV9QO49kw3qYtosnj8NNZh3IFwAHZSqrr +9cQvJWfk2XFMrNN28Cr6L0XUTMFmG3Drq14WXkaq1AREn2ZPdzNgtJdw1fNwyjm CuRuM5j1uKVZ9EU4fDuI0w3SDHMSlrQE6pziVaUJZt7UXcjsncl9vVc2l9/7IvjK ZaUJvSyfU4oVk++eOeM7R1xBu6MNbltRXAIiD+CDRtvEM3UYMyvUNnZPELp/8ndV MU3JWNl5RxJ0aBzAkucuAkhoXDctUy8TT4K+1Ko1/rig6mNtiKtzshYKCt9nlIJ0 nRmUiplRH6YfeuhMdDVmNWxObuSyrIBrw6uhbCAeIdYlbPm+dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBWBUR2cUjTpUf8aB5mBqMIw4EDrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZTc1ODdkMTgtNzY3OS0z MGNkLWJmMzItYzA4YzYwYTFiNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaCgJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANGxhNl0nZpeUAGqWzvDjb3tq+54KE8ByzXd4Xl5tVxfQQ6X4ilG MkTahnCcgh0nCYsv5hUx0yvtWaV+uwx9GGx7rfe22YkfH9u/djCpDBnw5thD/z/A 18Egrgzbgw+gbveFklQV2JK4W23dAMcQ0HG++KvJiPnj9m7iNCjYiRKiAQ8lweIb SgQqShe7ki4uCQ23qRPbD0Yyp++WCnz1PUjaHP3R2OAdmYo2sNe/9y2TRbGfSzUf 2+Lhgw9AvqLo9t2qYyGjvfH9eA/PoC6G4YKMALWGJgxuwKAkXPcDC/Cly/NAf1mb QF4Xy5TAfkE34hcn9BKdmEv7EMIcHOY+/ME= -----END CERTIFICATE-----Generated at Tue Mar 24 22:15:32 2026 by rpki-client