$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa File: d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa (raw, json) Hash identifier: OUHqlKhSJBxb+qYGOHeYkqNzgAaoCBGxn3BDYl9dfQw= Subject key identifier: 15:17:A5:8A:A2:F6:57:5E:B7:6F:18:BF:C7:E4:A4:0A:4A:DF:0B:E8 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584D3E001F25169A984770D5DEE0 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 21928 IP address blocks: 2607:fb90::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1f:25:16:9a:98:47:70:d5:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=14cb45be-2a8e-4393-904d-878488b9e395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:7a:8e:07:ca:bd:50:fb:90:11:14:ef:09: bd:ef:38:f1:92:c4:c3:ff:6e:a0:06:2c:a5:1f:f1: d6:e3:21:f3:40:12:bc:71:d4:35:c3:ee:5f:a1:1a: bc:ea:16:12:33:1b:4a:e8:1d:0b:04:dc:16:7b:ef: f9:1c:e2:f3:d1:62:5e:30:83:2f:80:6d:69:3f:76: bb:01:67:15:b8:f4:65:a1:63:73:93:ab:8c:53:04: 10:81:60:1c:a7:f1:38:58:f6:5e:be:65:f2:2c:da: 0a:48:16:48:72:7a:d9:94:18:ed:e1:6e:2d:04:b3: dc:ef:bc:3e:eb:21:93:4b:7b:23:30:42:04:c3:9f: 3e:a7:87:86:7f:20:5b:1d:08:6e:9c:73:09:27:72: 33:4a:ca:42:54:38:d3:d1:ec:29:8c:12:95:ad:2a: 25:af:28:5e:80:6e:78:5d:4d:9f:12:a9:a6:aa:ed: bb:4e:f3:67:8d:a5:ea:4e:a2:bd:ac:87:b2:00:7b: b4:bb:a5:01:d9:59:83:56:f7:56:2e:e1:c5:34:04: 85:32:f3:95:6e:75:24:aa:22:6c:d0:15:31:ba:18: 16:de:28:f5:53:af:7a:7c:d9:a3:92:0c:ff:c3:2f: f9:47:ca:f7:db:bf:5a:0f:8b:56:ec:51:6c:d5:15: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:A5:8A:A2:F6:57:5E:B7:6F:18:BF:C7:E4:A4:0A:4A:DF:0B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d5667a08-d2e1-36ea-b77b-00e8c87c540a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb90::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:58:b3:62:d9:5a:85:e1:58:25:13:57:ed:81:37:80:df:d8: a5:7f:dd:85:85:e5:4a:a2:50:14:25:1b:b0:44:ca:af:2b:e0: 2f:b5:cf:a6:39:4d:58:12:4f:83:9f:84:3e:4b:90:08:bb:84: b7:17:51:dc:b0:67:36:49:06:66:d5:95:7a:e6:b5:76:23:dc: 1f:33:fb:1f:e2:64:e2:9d:2b:db:36:b2:95:ef:8c:0d:1b:f6: 6d:4c:40:11:af:f8:4a:3d:9d:59:d1:ad:72:70:6e:89:73:a3: af:a1:df:e0:21:84:b7:b0:35:f4:e6:54:59:63:60:a5:4b:1f: 46:98:15:c2:53:fd:f7:2d:22:b4:dc:56:85:e7:31:af:17:b9: 91:7e:c8:02:ae:99:84:a2:3f:85:db:2b:51:57:25:e0:a3:05: 00:fa:32:0d:f4:d1:7a:40:ee:5f:32:97:c2:e1:ef:cc:81:ab: 31:c4:82:46:b0:59:f1:a0:55:97:ea:46:e9:b3:c8:df:15:10: 2a:4e:aa:3e:7f:08:21:5c:3d:27:96:92:d7:80:5e:cc:ce:3b: 4c:5f:ae:d1:ab:b8:09:bf:0f:26:46:7f:9d:0d:17:06:66:4d: d6:a2:82:46:7b:7f:2b:96:79:e9:b7:15:2c:2b:4d:ec:a1:52: d0:9e:ff:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0+AB8lFpqYR3DV3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTRjYjQ1YmUtMmE4ZS00MzkzLTkwNGQtODc4NDg4YjllMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc96jgfKvVD7kBEU7wm97zjxksTD/26gBiyl H/HW4yHzQBK8cdQ1w+5foRq86hYSMxtK6B0LBNwWe+/5HOLz0WJeMIMvgG1pP3a7 AWcVuPRloWNzk6uMUwQQgWAcp/E4WPZevmXyLNoKSBZIcnrZlBjt4W4tBLPc77w+ 6yGTS3sjMEIEw58+p4eGfyBbHQhunHMJJ3IzSspCVDjT0ewpjBKVrSolryhegG54 XU2fEqmmqu27TvNnjaXqTqK9rIeyAHu0u6UB2VmDVvdWLuHFNASFMvOVbnUkqiJs 0BUxuhgW3ij1U696fNmjkgz/wy/5R8r3279aD4tW7FFs1RVP/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBUXpYqi9ldet28Yv8fkpApK3wvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZDU2NjdhMDgtZDJlMS0z NmVhLWI3N2ItMDBlOGM4N2M1NDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdWLNi2VqF4VglE1ftgTeA39ilf92FheVKolAUJRuwRMqvK+Avtc+m OU1YEk+Dn4Q+S5AIu4S3F1HcsGc2SQZm1ZV65rV2I9wfM/sf4mTinSvbNrKV74wN G/ZtTEARr/hKPZ1Z0a1ycG6Jc6Ovod/gIYS3sDX05lRZY2ClSx9GmBXCU/33LSK0 3FaF5zGvF7mRfsgCrpmEoj+F2ytRVyXgowUA+jIN9NF6QO5fMpfC4e/MgasxxIJG sFnxoFWX6kbps8jfFRAqTqo+fwghXD0nlpLXgF7MzjtMX67Rq7gJvw8mRn+dDRcG Zk3WooJGe38rlnnptxUsK03soVLQnv/q -----END CERTIFICATE-----Generated at Sat Mar 21 17:54:00 2026 by rpki-client