$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa File: f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (raw, json) Hash identifier: 4N3xdms+PPXOpr8hdZiJ59w8aUPMU5GRZfaJkpOKJek= Subject key identifier: 5D:2E:DF:85:3E:E6:C9:D4:2D:B1:5F:6D:54:4D:44:A2:9F:77:54:47 Certificate issuer: /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Certificate serial: 010D0C9F4328584D1F9ED0279E7ADDDA52FF8A00 Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa Signing time: Tue 10 Mar 2026 15:51:37 +0000 ROA not before: Tue 10 Mar 2026 15:51:37 +0000 ROA not after: Mon 08 Jun 2026 15:51:37 +0000 asID: 402258 IP address blocks: 2620:a4:8860::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:9e:d0:27:9e:7a:dd:da:52:ff:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Validity Not Before: Mar 10 15:51:37 2026 GMT Not After : Jun 8 15:51:37 2026 GMT Subject: CN=bf01bc68-a662-4dc4-b246-f26eb357b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:f8:6d:57:56:62:0c:a6:1e:03:a7:ad:45: 97:5c:5e:a4:51:90:a9:67:56:c1:35:27:15:d5:1e: 66:5e:d5:54:68:23:2c:fb:6f:4f:8f:67:02:5e:77: 01:cd:98:a8:c0:3b:f9:90:35:d4:fd:2f:00:44:2e: 33:8d:fc:11:a0:b4:68:25:ac:7b:c5:f7:1c:a6:a5: 5e:a9:e5:0c:af:f4:6f:1e:03:87:d7:19:93:05:c4: fa:fc:85:6a:7c:c0:f8:98:e4:28:d4:12:b2:08:f4: 2d:07:c3:88:28:2a:1f:cc:70:c5:cc:ba:a0:cf:07: 29:e4:a9:d8:08:99:d4:79:19:06:ff:3e:cd:c7:5d: 5c:73:7e:a8:47:89:8a:a0:10:6a:c9:25:ac:80:14: 32:af:0e:d6:af:46:56:a4:78:b3:44:71:8d:b7:0d: 02:ab:79:2f:99:c5:25:80:13:0a:cd:a7:26:3d:d3: d0:4f:08:98:6b:23:23:38:e8:9f:e0:cd:65:eb:cf: 0a:60:7a:51:34:40:0c:34:d0:55:d8:95:39:59:29: a4:e6:27:51:7f:c2:e5:e9:f5:75:1d:f7:a6:32:d7: f6:b4:d4:df:85:6d:a2:a7:a1:15:b3:6e:9e:4c:8f: 7b:50:8f:99:ea:b8:b3:47:65:c2:6c:db:07:06:b0: 90:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:DF:85:3E:E6:C9:D4:2D:B1:5F:6D:54:4D:44:A2:9F:77:54:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl X509v3 Authority Key Identifier: keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:8860::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e5:56:9e:1e:f4:a6:1f:c1:5d:7f:9f:98:33:6c:68:15:f8:2a: 3c:64:18:d1:19:8f:6d:33:9b:3f:97:76:d5:51:46:d7:70:6a: 61:05:44:9d:87:2c:8d:f6:47:05:43:4c:59:c1:88:80:79:cc: 83:9f:7e:ef:85:da:8e:76:d6:ba:65:a1:00:11:40:6a:35:8a: 19:84:70:2a:1a:40:45:45:e4:82:71:a3:8e:e3:88:87:7d:49: 65:d8:28:9d:8a:3f:fd:7a:0e:87:27:e0:1d:e7:51:27:77:c6: 65:df:af:9a:ab:60:9f:08:f0:4e:27:df:5b:92:fc:99:3e:74: e4:54:1e:26:27:8f:9d:8d:d0:fa:0c:6b:c7:96:88:90:a5:37: 15:c2:2c:c8:c2:50:61:34:df:14:d5:b1:00:7b:85:c7:ff:e4: 7d:22:a3:9c:b8:fb:94:d3:ac:62:28:e6:da:f8:aa:95:9b:f5: e7:cf:1d:95:ae:79:a1:fa:67:20:c1:6c:87:57:b3:b0:ef:67: 71:c3:4b:85:e4:3b:e3:87:6f:e4:a4:c6:4a:d2:d9:21:0a:f4: 7c:6e:3a:12:1c:db:b2:f9:87:0d:dc:9f:6a:f9:1a:68:3e:5b: 36:b2:99:00:02:d3:f1:a7:b0:55:d3:3c:e2:26:b8:c3:5f:56: 9d:79:5b:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fntAnnnrd2lL/igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJk NWJlMB4XDTI2MDMxMDE1NTEzN1oXDTI2MDYwODE1NTEzN1owLzEtMCsGA1UEAxMk YmYwMWJjNjgtYTY2Mi00ZGM0LWIyNDYtZjI2ZWIzNTdiMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgX4bVdWYgymHgOnrUWXXF6kUZCpZ1bBNScV 1R5mXtVUaCMs+29Pj2cCXncBzZiowDv5kDXU/S8ARC4zjfwRoLRoJax7xfccpqVe qeUMr/RvHgOH1xmTBcT6/IVqfMD4mOQo1BKyCPQtB8OIKCofzHDFzLqgzwcp5KnY CJnUeRkG/z7Nx11cc36oR4mKoBBqySWsgBQyrw7Wr0ZWpHizRHGNtw0Cq3kvmcUl gBMKzacmPdPQTwiYayMjOOif4M1l688KYHpRNEAMNNBV2JU5WSmk5idRf8Ll6fV1 HfemMtf2tNTfhW2ip6EVs26eTI97UI+Z6rizR2XCbNsHBrCQLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF0u34U+5snULbFfbVRNRKKfd1RHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5 MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvZjMzODI5NWMtNmU2Yy0z YjNjLTk4ZGQtMWU4MGMxOTU3NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmE2OTFhNDQtMjBjZi00NTBjLThh YmUtYzU0OGRkNmJkNWJlL2JhNjkxYTQ0LTIwY2YtNDUwYy04YWJlLWM1NDhkZDZi ZDViZS5jcmwwHwYDVR0jBBgwFoAUkTurmw4XCTV7QqotqsMGwPraJh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4 ZGQ2YmQ1YmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAApIhg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAOVWnh70ph/BXX+fmDNsaBX4KjxkGNEZj20zmz+XdtVRRtdwamEF RJ2HLI32RwVDTFnBiIB5zIOffu+F2o521rploQARQGo1ihmEcCoaQEVF5IJxo47j iId9SWXYKJ2KP/16Docn4B3nUSd3xmXfr5qrYJ8I8E4n31uS/Jk+dORUHiYnj52N 0PoMa8eWiJClNxXCLMjCUGE03xTVsQB7hcf/5H0io5y4+5TTrGIo5tr4qpWb9efP HZWueaH6ZyDBbIdXs7DvZ3HDS4XkO+OHb+SkxkrS2SEK9HxuOhIc27L5hw3cn2r5 Gmg+WzaymQAC0/GnsFXTPOImuMNfVp15W5U= -----END CERTIFICATE-----Generated at Fri Mar 13 09:54:05 2026 by rpki-client