$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa File: 7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa (raw, json) Hash identifier: bV+jt1AyZfl7rhniFQb/GoqJ4oavDY7B2IHRQnfX8HE= Subject key identifier: 83:C6:0D:86:3F:10:8D:13:8C:29:F0:32:20:75:A5:C9:6A:74:0D:86 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D19B4BA765ED0C45B924AF0C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11090 IP address blocks: 2607:f398::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ba:76:5e:d0:c4:5b:92:4a:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=5f4bff30-d9d9-410f-8fae-7cfb13c4b740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:a7:24:c0:18:1a:2e:9f:b6:14:9d:51:96: 02:ca:da:0e:b2:96:15:f1:7d:41:c3:be:32:bb:a2: 87:55:d5:05:fb:ca:59:d8:46:ab:23:af:10:c4:d1: 8c:e6:4a:71:3c:13:32:96:d6:13:79:7e:07:24:f6: 10:de:19:e1:64:77:5d:55:50:11:b1:d8:d4:b3:6c: 9c:7c:a5:6d:f1:1d:b0:e8:5a:75:05:8a:51:58:b5: 45:68:19:6c:38:5c:81:ee:7f:a2:44:9a:b5:d7:5e: b5:4d:75:86:50:79:52:a9:95:d4:1d:49:c4:d3:cb: bc:96:70:e9:f0:8f:b0:70:ff:0b:14:0d:f9:3d:0e: 5f:e8:2e:05:5c:d2:7a:32:3d:c7:a4:68:9c:f5:27: c7:fc:ff:5c:6a:db:b5:f1:45:7c:33:09:2b:4e:47: 49:45:f0:1e:79:89:8d:01:b5:46:4b:a0:8c:de:56: 25:ef:1b:e6:12:aa:ad:45:74:cf:dd:89:68:ce:9c: ce:47:c3:73:37:1b:0e:aa:02:ae:2c:46:02:ef:a3: 7f:1d:99:b2:85:5f:a0:8c:3a:24:46:44:72:d6:ff: be:e8:f2:c6:66:2d:1e:f3:6b:3b:fe:5f:97:7b:ba: 00:61:aa:77:9f:54:99:03:3a:0c:6b:60:b8:60:04: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C6:0D:86:3F:10:8D:13:8C:29:F0:32:20:75:A5:C9:6A:74:0D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv6: 2607:f398::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:11:a5:82:ec:55:69:e7:94:f6:d6:b7:b9:a9:4a:52:ce:5b: 94:b9:c5:eb:70:0b:9e:36:5e:ca:71:77:0a:af:5e:4c:d0:d0: d3:fb:c7:83:b7:61:d5:04:e2:9a:fd:36:74:6f:28:d6:2f:15: 97:d5:27:ef:0f:3f:ef:bf:db:94:3a:41:8a:22:1c:33:7d:4e: 72:57:fa:b2:9c:49:f3:5b:8d:22:f1:0a:16:8c:49:36:38:be: 4b:a0:37:6c:cc:b1:bc:4b:05:29:e5:41:f7:d3:27:81:79:e5: 95:5d:1e:17:4c:60:cc:c3:4e:55:0b:4d:d0:bf:a4:2b:6e:45: 13:22:ea:25:37:78:e0:3c:56:89:50:af:51:b0:a1:29:03:a0: c4:50:06:a7:6c:f4:74:e5:fd:ca:e2:39:ba:b4:0e:55:65:fd: df:2b:3f:b4:f7:c2:5a:37:d5:d6:9a:03:fb:08:3c:c2:8c:63: 11:88:64:00:38:5e:fa:35:af:de:bc:e9:a7:fc:c7:52:d3:ee: 00:4b:45:fa:5a:8e:a0:93:e6:03:a8:d6:76:42:96:09:de:11: e9:9b:1c:c4:54:29:91:10:03:b7:22:16:12:cd:2f:80:9a:eb: 70:be:c7:1a:79:14:a6:4e:49:61:08:c1:eb:aa:a5:fe:72:36: f9:55:6e:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0ZtLp2XtDEW5JK8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NWY0YmZmMzAtZDlkOS00MTBmLThmYWUtN2NmYjEzYzRiNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqnJMAYGi6fthSdUZYCytoOspYV8X1Bw74y u6KHVdUF+8pZ2EarI68QxNGM5kpxPBMyltYTeX4HJPYQ3hnhZHddVVARsdjUs2yc fKVt8R2w6Fp1BYpRWLVFaBlsOFyB7n+iRJq11161TXWGUHlSqZXUHUnE08u8lnDp 8I+wcP8LFA35PQ5f6C4FXNJ6Mj3HpGic9SfH/P9catu18UV8MwkrTkdJRfAeeYmN AbVGS6CM3lYl7xvmEqqtRXTP3YlozpzOR8NzNxsOqgKuLEYC76N/HZmyhV+gjDok RkRy1v++6PLGZi0e82s7/l+Xe7oAYap3n1SZAzoMa2C4YAR3MwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIPGDYY/EI0TjCnwMiB1pclqdA2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2ZiNDhjOGItMzVlYS0z N2FmLWI5ZmYtNzVhNmE1OWRiZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfzmDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAlEaWC7FVp55T21re5qUpSzluUucXrcAueNl7KcXcKr15M0NDT+8eD t2HVBOKa/TZ0byjWLxWX1SfvDz/vv9uUOkGKIhwzfU5yV/qynEnzW40i8QoWjEk2 OL5LoDdszLG8SwUp5UH30yeBeeWVXR4XTGDMw05VC03Qv6QrbkUTIuolN3jgPFaJ UK9RsKEpA6DEUAanbPR05f3K4jm6tA5VZf3fKz+098JaN9XWmgP7CDzCjGMRiGQA OF76Na/evOmn/MdS0+4AS0X6Wo6gk+YDqNZ2QpYJ3hHpmxzEVCmREAO3IhYSzS+A mutwvscaeRSmTklhCMHrqqX+cjb5VW5g -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:57 2026 by rpki-client