$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa File: e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa (raw, json) Hash identifier: C71QK6+nbZp+hCEQqXyUFAM7nmSDX4suALKqfImXMJM= Subject key identifier: BE:93:BD:E5:E3:0C:DB:5D:1D:24:15:82:3B:89:4B:97:CF:36:AB:4E Certificate issuer: /CN=ec23d019-d079-49df-94b6-ad79d138e90f Certificate serial: 010D0C9F4328584D0EA7B834AC4EC5FA6F5A2720 Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 210527 IP address blocks: 2606:7540:f010::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b8:34:ac:4e:c5:fa:6f:5a:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=b1f238d8-7ab5-4570-b8e4-bf4ec7320556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:c0:88:4b:d4:95:90:13:58:a7:d8:cf:d1: c8:fa:c7:aa:fd:4f:7f:e5:ca:be:0e:21:c0:8a:cd: 65:69:eb:68:59:69:27:54:92:3b:5b:c5:d6:e1:2e: 5f:ae:36:a0:f0:08:c1:b6:64:e7:cb:02:2d:ae:f8: 06:90:e7:b0:25:44:74:2e:55:8d:79:32:3c:a2:9c: 3b:b2:af:76:fa:2a:bc:83:0e:2c:e4:c3:bd:35:69: 0a:6a:3c:57:63:06:ad:7e:dd:d6:71:b4:2d:3d:65: 6d:3c:33:2c:e6:d4:3a:8e:e2:0d:8a:ab:e4:6c:74: 89:16:de:14:ae:1b:89:41:81:17:6e:34:45:d4:ae: fc:14:48:84:56:72:be:90:52:fa:47:a2:6c:4a:39: 1c:54:cd:bd:b9:39:eb:e3:6d:93:9d:92:98:1b:bb: 21:b7:c4:8f:be:e1:71:f6:25:df:57:9e:c1:3a:d9: 09:0d:89:04:ea:25:72:cb:45:cb:68:c9:e6:e2:33: 9d:1c:0f:94:61:5d:5e:18:da:04:85:0a:db:6c:51: 7c:ab:14:8c:da:8a:38:23:d5:98:c4:14:ed:0f:d0: ff:8b:2d:91:cf:ca:b7:07:2f:5d:98:07:0e:98:da: ea:9f:61:63:ed:a6:0f:8c:d2:92:ae:f8:ea:b1:11: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:93:BD:E5:E3:0C:DB:5D:1D:24:15:82:3B:89:4B:97:CF:36:AB:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/e3ed2319-0a50-3776-9dbe-a5edd2a06292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl X509v3 Authority Key Identifier: keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer sbgp-ipAddrBlock: critical IPv6: 2606:7540:f010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e4:4a:9e:d7:25:ff:9f:d4:a3:00:57:d8:b9:78:77:65:b7: 2f:cb:d4:b6:1c:67:8b:a3:c2:20:6f:4c:fa:81:2e:14:56:98: 99:e9:98:26:d5:d1:c5:36:b7:19:41:9e:a2:23:6d:27:9c:5a: 1e:61:59:3e:0d:9c:ef:9c:f2:34:b2:38:2a:20:9d:13:e9:e9: 17:01:ec:72:7a:c2:62:7f:b8:26:77:0d:dc:9d:48:23:d7:59: 72:5e:0c:40:a8:04:ad:b7:8d:31:67:5d:35:b2:25:29:a0:be: f1:e1:c2:f1:95:f9:c0:e9:9f:c7:24:82:91:51:96:76:09:7f: e7:70:cc:d6:6c:ab:73:bd:33:52:ff:28:ad:6a:5e:7a:50:31: d0:03:19:4a:d9:f7:ed:cc:de:c3:fa:e9:79:21:e1:9a:a1:96: 30:e6:a2:c7:89:c5:0d:91:7a:e2:b8:98:a8:34:f5:1f:61:d4: 95:f4:79:2e:c3:f0:74:4f:6c:df:ae:4a:cf:6e:80:ff:5d:8e: 85:f9:46:68:e7:24:fd:9a:30:0a:e0:bb:2f:30:2d:28:ca:36: dd:50:c2:a5:87:64:79:44:1a:d0:e7:17:7d:15:4b:a0:3f:ae: ad:27:47:be:fb:4b:c4:3d:31:bb:11:8a:5d:07:1b:47:a2:cd: 78:4e:30:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Op7g0rE7F+m9aJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyM2QwMTktZDA3OS00OWRmLTk0YjYtYWQ3OWQxMzhl OTBmMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YjFmMjM4ZDgtN2FiNS00NTcwLWI4ZTQtYmY0ZWM3MzIwNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZHAiEvUlZATWKfYz9HI+seq/U9/5cq+DiHA is1laetoWWknVJI7W8XW4S5frjag8AjBtmTnywItrvgGkOewJUR0LlWNeTI8opw7 sq92+iq8gw4s5MO9NWkKajxXYwatft3WcbQtPWVtPDMs5tQ6juINiqvkbHSJFt4U rhuJQYEXbjRF1K78FEiEVnK+kFL6R6JsSjkcVM29uTnr422TnZKYG7sht8SPvuFx 9iXfV57BOtkJDYkE6iVyy0XLaMnm4jOdHA+UYV1eGNoEhQrbbFF8qxSM2oo4I9WY xBTtD9D/iy2Rz8q3By9dmAcOmNrqn2Fj7aYPjNKSrvjqsRFg8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL6TveXjDNtdHSQVgjuJS5fPNqtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIz ZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5ZDEzOGU5MGYvZTNlZDIzMTktMGE1MC0z Nzc2LTlkYmUtYTVlZGQyYTA2MjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWMyM2QwMTktZDA3OS00OWRmLTk0 YjYtYWQ3OWQxMzhlOTBmL2VjMjNkMDE5LWQwNzktNDlkZi05NGI2LWFkNzlkMTM4 ZTkwZi5jcmwwHwYDVR0jBBgwFoAUe0UZCmdxB86avEumT2PdgXWkusAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIzZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5 ZDEzOGU5MGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ1QPAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAjkSp7XJf+f1KMAV9i5eHdlty/L1LYcZ4ujwiBvTPqBLhRWmJnp mCbV0cU2txlBnqIjbSecWh5hWT4NnO+c8jSyOCognRPp6RcB7HJ6wmJ/uCZ3Ddyd SCPXWXJeDECoBK23jTFnXTWyJSmgvvHhwvGV+cDpn8ckgpFRlnYJf+dwzNZsq3O9 M1L/KK1qXnpQMdADGUrZ9+3M3sP66Xkh4ZqhljDmoseJxQ2ReuK4mKg09R9h1JX0 eS7D8HRPbN+uSs9ugP9djoX5RmjnJP2aMArguy8wLSjKNt1QwqWHZHlEGtDnF30V S6A/rq0nR777S8Q9MbsRil0HG0eizXhOMOQ= -----END CERTIFICATE-----Generated at Tue Mar 10 21:43:23 2026 by rpki-client