$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa File: 00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json) Hash identifier: fwIzWtAy8oACfpOP+9lAYgf7qqwXXBnwXPYCd4l5j2k= Subject key identifier: 8D:AF:66:27:24:A3:72:98:AD:0D:A9:3C:EF:75:C1:07:C5:ED:63:AC Certificate issuer: /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Certificate serial: 010D0C9F4328584D100CFDA2AAAD303C7F2352F0 Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 49 IP address blocks: 2610:20:6f97::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:fd:a2:aa:ad:30:3c:7f:23:52:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=85f4f494-ed1f-4baa-9dbc-7051ad6ddcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3f:e1:26:0c:88:9d:db:5d:75:16:31:61:5f: ad:1e:85:2a:6a:7c:8f:ea:80:7f:11:a5:80:f6:20: 3c:99:45:f1:a4:ac:ca:9c:84:a2:f8:8e:2c:fd:d2: b7:be:03:55:1b:7b:9b:9f:a7:55:01:ce:e3:28:dd: d1:9f:15:4e:9d:df:30:1b:94:00:90:f2:83:3b:9d: 88:d5:f2:8d:a9:6c:c3:ba:92:0c:17:45:7e:b6:b6: c0:08:72:fe:65:49:86:44:cd:e7:7c:74:60:cb:47: 03:61:9a:be:10:20:a7:39:07:2b:36:00:8b:e2:ee: 64:78:d1:9f:0e:ed:1d:a9:c1:95:ce:1b:71:dd:9b: 44:13:fd:b0:63:fa:d6:21:ca:63:8a:28:42:f0:27: 8a:e5:3c:4e:a3:7b:44:2a:f4:61:5d:37:92:19:01: 2a:ec:fb:3e:d6:3b:b8:bb:49:29:ff:35:ec:1d:52: 3a:10:93:3d:e4:2e:4c:13:ca:cd:6a:67:90:23:b4: 6b:fb:4d:63:90:e1:63:00:78:e5:37:fe:d5:84:28: fa:e4:56:23:ec:7d:10:1f:b8:fe:55:3b:d9:93:bd: 39:e9:3c:d1:5e:e6:4a:30:26:92:84:6e:b6:45:9c: db:64:2a:4a:46:bc:2a:a2:c4:57:f6:e0:87:c8:e6: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AF:66:27:24:A3:72:98:AD:0D:A9:3C:EF:75:C1:07:C5:ED:63:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl X509v3 Authority Key Identifier: keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer sbgp-ipAddrBlock: critical IPv6: 2610:20:6f97::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:32:9e:c7:56:c9:e1:1d:56:32:bc:3d:e6:e1:fc:48:8d:33: 92:6a:e2:f3:07:4a:95:69:ce:40:1c:f0:71:b2:39:f1:25:8c: 3a:a5:5b:67:9d:f1:c0:cc:75:0b:14:6e:ea:62:e9:d3:5d:7c: ef:fd:45:c1:b1:90:db:ea:f8:f4:71:cd:36:bd:10:0c:d3:5a: 70:e7:a2:63:6b:6f:c1:31:0b:0d:76:d9:40:6a:81:26:38:54: d6:76:c5:c9:b9:9c:06:39:c1:2b:c5:57:2c:2c:0f:2a:04:e2: 9e:0e:e9:af:40:d9:30:73:42:2a:54:5e:33:7a:69:b9:05:eb: e4:28:b3:c6:79:80:0e:0c:5c:f1:8d:88:49:87:f2:ec:93:dd: 14:82:7f:52:2a:b2:69:ac:91:e2:1f:81:2f:9b:c4:72:84:f4: 3f:44:02:03:49:20:5b:33:eb:5e:cb:a8:3d:e3:e7:6e:ed:d4: a8:9c:85:f0:f2:e0:c7:d4:5d:01:d6:e6:10:ed:53:43:09:19: 41:04:ed:00:e4:08:b1:1d:78:fe:b6:d5:29:fb:46:16:f9:20: 8b:b9:3a:86:8c:e8:64:90:8c:60:95:44:98:ec:78:45:c8:fd: 16:61:0a:b4:79:21:5a:2e:d4:a5:25:ef:52:68:cd:ad:5c:24: 7c:46:95:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0QDP2iqq0wPH8jUvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAyMWM0M2YtYjc4YS00OTZmLWE4Y2MtODE0YWJjMTFh N2U5MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk ODVmNGY0OTQtZWQxZi00YmFhLTlkYmMtNzA1MWFkNmRkY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT/hJgyIndtddRYxYV+tHoUqanyP6oB/EaWA 9iA8mUXxpKzKnISi+I4s/dK3vgNVG3ubn6dVAc7jKN3RnxVOnd8wG5QAkPKDO52I 1fKNqWzDupIMF0V+trbACHL+ZUmGRM3nfHRgy0cDYZq+ECCnOQcrNgCL4u5keNGf Du0dqcGVzhtx3ZtEE/2wY/rWIcpjiihC8CeK5TxOo3tEKvRhXTeSGQEq7Ps+1ju4 u0kp/zXsHVI6EJM95C5ME8rNameQI7Rr+01jkOFjAHjlN/7VhCj65FYj7H0QH7j+ VTvZk7056TzRXuZKMCaShG62RZzbZCpKRrwqosRX9uCHyOZoRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI2vZicko3KYrQ2pPO91wQfF7WOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MDIx YzQzZi1iNzhhLTQ5NmYtYThjYy04MTRhYmMxMWE3ZTkvMDA4MTVhOTktYTQ1OC0z MDkxLWEzNzQtYTZlNWQ4NDNiZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDAyMWM0M2YtYjc4YS00OTZmLWE4 Y2MtODE0YWJjMTFhN2U5LzQwMjFjNDNmLWI3OGEtNDk2Zi1hOGNjLTgxNGFiYzEx YTdlOS5jcmwwHwYDVR0jBBgwFoAUGc1MW2xbN6s15QYAo+MXri+DU1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MDIxYzQzZi1iNzhhLTQ5NmYtYThjYy04MTRh YmMxMWE3ZTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIG+X MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcynsdWyeEdVjK8Pebh/EiNM5Jq4vMHSpVpzkAc8HGyOfEljDql W2ed8cDMdQsUbupi6dNdfO/9RcGxkNvq+PRxzTa9EAzTWnDnomNrb8ExCw122UBq gSY4VNZ2xcm5nAY5wSvFVywsDyoE4p4O6a9A2TBzQipUXjN6abkF6+Qos8Z5gA4M XPGNiEmH8uyT3RSCf1IqsmmskeIfgS+bxHKE9D9EAgNJIFsz617LqD3j527t1Kic hfDy4MfUXQHW5hDtU0MJGUEE7QDkCLEdeP621Sn7Rhb5IIu5OoaM6GSQjGCVRJjs eEXI/RZhCrR5IVou1KUl71Joza1cJHxGlXE= -----END CERTIFICATE-----Generated at Sun Mar 22 14:59:11 2026 by rpki-client