$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa File: 09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json) Hash identifier: w4bjCgjbPefI0SrNUsLLo2DGHy+zgWFndj7pqdXD5M4= Subject key identifier: 24:6C:CE:D0:01:F5:89:CE:73:C2:E8:74:44:6C:8E:BE:29:BD:C3:23 Certificate issuer: /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15 Certificate serial: 010D0C9F4328584D0EA7B03A0A3882C7DF0163C0 Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 399078 IP address blocks: 2606:42c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b0:3a:0a:38:82:c7:df:01:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ea9b1b12-fa99-44c6-a93c-a3bf05000fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:3b:7c:30:ee:7d:c6:f4:59:1e:50:81:85: d2:71:44:86:bb:4d:d0:7e:9e:ab:55:05:0c:07:29: f3:d1:3b:07:b3:2e:54:46:4c:62:68:2b:f1:9d:f6: f5:59:19:d5:ad:df:4c:3b:41:91:65:c5:da:02:55: 43:3b:11:a3:f3:ef:2f:c4:bf:b3:c0:f1:2f:a3:1d: 9d:ee:e2:32:dc:c7:c1:5e:5d:b5:2e:91:9d:af:63: f9:60:f7:5a:b4:e9:72:11:d8:a2:b2:e8:12:bd:ec: da:a9:1f:05:2f:b0:fd:4e:56:eb:95:67:3b:89:b3: f0:54:11:50:c2:35:c5:fe:b7:75:27:69:bd:44:0b: 10:05:23:d1:71:e7:a1:57:b4:07:a8:a4:4a:d0:06: 0b:a2:12:1a:c0:76:44:a5:48:75:7e:ce:8e:73:34: dd:14:6f:d7:65:0f:8b:12:8a:42:69:42:61:a1:4b: 3b:ac:d1:7f:57:ca:40:53:82:9f:fc:e2:cc:8f:e3: 89:6a:f8:97:0b:e8:5b:8d:0b:0e:8f:81:9f:b4:95: 86:b6:83:da:2b:70:20:f8:a8:2b:84:25:55:be:7d: 51:38:d7:2c:a9:a5:72:ea:c7:32:7c:9f:e6:a2:3b: 35:3d:d5:e8:4b:2a:a2:bb:09:ab:3b:6c:3a:81:eb: 38:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:CE:D0:01:F5:89:CE:73:C2:E8:74:44:6C:8E:BE:29:BD:C3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl X509v3 Authority Key Identifier: keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer sbgp-ipAddrBlock: critical IPv6: 2606:42c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4f:69:91:d3:66:a2:b0:2a:8a:c5:d6:87:1f:6c:75:7e:94: 40:db:9a:ee:db:51:a5:dc:82:4f:46:c1:ab:ae:e2:6b:f4:8b: 79:67:8e:b5:57:99:e9:1b:9f:d9:92:3b:07:a0:ac:9c:7d:24: de:21:34:8d:88:50:b2:46:98:ff:56:6f:bf:1b:2c:57:01:e8: 00:6d:18:c8:57:f5:dd:52:60:45:49:c1:a3:10:aa:a7:d9:d0: 92:81:ea:a0:32:08:d9:8c:a4:82:ac:12:37:56:e9:0b:34:99: 8e:c3:1e:75:9d:4c:39:46:57:8e:a9:52:d9:a7:9b:ac:aa:9b: b2:93:45:ec:a3:d3:a3:8b:71:e8:2e:68:2e:26:a9:e9:f0:b9: 1a:86:8b:3c:32:1d:bc:0a:6d:3f:2b:c4:13:bb:16:e8:4d:18: 6b:83:64:f7:ae:dc:74:52:60:c8:46:a0:80:f3:80:af:e7:06: db:8c:d9:06:aa:0a:25:e3:7b:cb:5b:e9:c1:92:9a:6d:18:69: 2c:dc:94:0e:fc:b1:90:8f:56:30:02:b1:39:d7:24:9b:3e:26: ab:2b:4a:ba:45:7d:1f:26:85:97:91:2e:b3:a0:6d:69:cf:d6: 25:05:ff:a9:fc:42:9a:51:bd:08:33:19:a0:59:8e:66:ad:c4: 8a:36:04:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0Op7A6CjiCx98BY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIzY2E5ZDktMTRmMi00ODI0LWIxYmEtMTZiYzAzMGNj ZjE1MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZWE5YjFiMTItZmE5OS00NGM2LWE5M2MtYTNiZjA1MDAwZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAw7fDDufcb0WR5QgYXScUSGu03Qfp6rVQUM Bynz0TsHsy5URkxiaCvxnfb1WRnVrd9MO0GRZcXaAlVDOxGj8+8vxL+zwPEvox2d 7uIy3MfBXl21LpGdr2P5YPdatOlyEdiisugSvezaqR8FL7D9TlbrlWc7ibPwVBFQ wjXF/rd1J2m9RAsQBSPRceehV7QHqKRK0AYLohIawHZEpUh1fs6OczTdFG/XZQ+L EopCaUJhoUs7rNF/V8pAU4Kf/OLMj+OJaviXC+hbjQsOj4GftJWGtoPaK3Ag+Kgr hCVVvn1RONcsqaVy6scyfJ/mojs1PdXoSyqiuwmrO2w6ges4jwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCRsztAB9YnOc8LodERsjr4pvcMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNj YTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJjMDMwY2NmMTUvMDljNzU5N2YtZmRkNS0z NzQyLWFhOWEtNmEzNjBiNGNhYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjIzY2E5ZDktMTRmMi00ODI0LWIx YmEtMTZiYzAzMGNjZjE1LzIyM2NhOWQ5LTE0ZjItNDgyNC1iMWJhLTE2YmMwMzBj Y2YxNS5jcmwwHwYDVR0jBBgwFoAUani5rNsZfoddLthS4SX+IZmx0+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNjYTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJj MDMwY2NmMTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUT2mR02aisCqKxdaHH2x1fpRA25ru21Gl3IJPRsGrruJr9It5Z461 V5npG5/ZkjsHoKycfSTeITSNiFCyRpj/Vm+/GyxXAegAbRjIV/XdUmBFScGjEKqn 2dCSgeqgMgjZjKSCrBI3VukLNJmOwx51nUw5RleOqVLZp5usqpuyk0Xso9Oji3Ho LmguJqnp8Lkahos8Mh28Cm0/K8QTuxboTRhrg2T3rtx0UmDIRqCA84Cv5wbbjNkG qgol43vLW+nBkpptGGks3JQO/LGQj1YwArE51ySbPiarK0q6RX0fJoWXkS6zoG1p z9YlBf+p/EKaUb0IMxmgWY5mrcSKNgQS -----END CERTIFICATE-----Generated at Sat Mar 14 20:59:02 2026 by rpki-client