$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa File: 0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa (raw, json) Hash identifier: IzSQV/6zKq3XDpKr8ovPCot8WMyBxq5+noYPcsKmwIQ= Subject key identifier: A5:70:1E:CB:13:03:1D:56:91:84:C8:BB:A9:96:F0:E0:4A:14:3E:7A Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584D2BDA2220CB76456FC434AF80 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 36391 IP address blocks: 2607:f8f0:660::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:22:20:cb:76:45:6f:c4:34:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=f7121673-8b69-49fe-ab20-71eb91f4e621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:60:50:b2:eb:4b:a8:34:d6:0a:69:b5:f5:5c: 51:a4:5f:85:dc:5b:59:1e:08:74:12:ed:a4:8e:18: 82:a3:d4:7d:ea:27:00:bd:4d:0a:cc:23:d5:1f:26: 8d:0a:a5:9e:96:b2:a9:71:ee:87:69:1f:7f:3b:4c: 3b:d1:6c:91:4f:94:95:69:16:13:be:11:64:15:b0: 22:da:ba:a4:d2:4d:8c:02:3c:e0:c3:9a:88:3b:2b: 8c:93:e3:ac:d7:d8:a3:c2:ae:33:50:f6:61:9f:e9: 89:8a:b4:bc:15:c4:9d:00:0d:8c:09:95:b1:bf:d9: fe:7b:ec:45:36:6e:71:06:bb:09:03:db:9b:a0:12: 41:e6:08:ba:3e:7a:59:93:83:17:de:db:8e:dc:3b: 6e:f4:5b:4c:78:d8:51:60:5e:8f:36:40:9e:26:6c: 1f:4e:55:07:cd:d4:6b:ff:d2:30:06:45:3e:2d:27: e8:09:86:48:b1:0d:51:15:fa:d1:35:29:0a:a2:35: f9:00:4b:a8:fe:09:46:b4:7d:9b:26:fc:8d:39:01: 35:eb:18:53:51:cc:c2:55:c6:01:e1:20:fa:7a:4f: f5:f4:7a:6b:1e:c0:78:dd:83:45:19:8b:0f:fb:d4: e5:82:8d:2b:45:5d:2c:74:df:d2:1a:2e:6b:ec:16: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:1E:CB:13:03:1D:56:91:84:C8:BB:A9:96:F0:E0:4A:14:3E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/0ea5ffa4-32c6-3e7f-a483-49de9fc59b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:660::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a9:f3:ce:72:63:c6:09:e2:fc:e5:34:34:55:1d:16:f9:62: 47:17:53:59:d4:f0:96:b1:77:8b:e4:3e:b8:25:08:47:67:fa: 60:a8:ea:30:01:3e:d5:30:66:9d:ff:c6:3e:a2:f7:65:db:c3: 55:5b:84:cd:3b:26:01:d6:29:b1:52:d4:f5:82:ad:10:5c:4e: 5c:cc:7c:86:36:56:bf:97:e5:e7:e5:32:1e:5d:36:a5:ed:d4: 51:64:71:b0:4c:ce:54:24:18:e9:7f:cc:17:fa:ab:0d:4e:80: 6e:13:28:55:bc:2b:c2:f5:6c:20:19:2f:c6:2e:60:cc:7d:80: 73:c8:2f:3b:3a:6c:0a:24:40:f8:32:03:63:ad:19:b9:9f:69: 45:3e:ad:21:9b:77:4a:a9:e1:7d:1f:7c:c5:6d:96:3b:91:df: 40:47:9e:42:17:43:d7:13:4f:45:b4:08:ba:a5:43:32:5f:85: 55:f1:a0:97:c0:72:17:98:da:3f:1b:2c:83:fb:59:b4:2d:70: 24:a1:c7:17:43:f5:ff:9f:40:fd:51:5e:b8:07:f4:1c:66:81: 8f:1b:5d:6f:60:be:da:d9:26:42:b3:0b:c3:3b:8e:7d:00:d0: 53:ef:11:79:6c:fe:7b:e9:11:db:67:a1:ad:9d:6c:c4:29:e6: 8e:60:f4:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0r2iIgy3ZFb8Q0r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZjcxMjE2NzMtOGI2OS00OWZlLWFiMjAtNzFlYjkxZjRlNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmBQsutLqDTWCmm19VxRpF+F3FtZHgh0Eu2k jhiCo9R96icAvU0KzCPVHyaNCqWelrKpce6HaR9/O0w70WyRT5SVaRYTvhFkFbAi 2rqk0k2MAjzgw5qIOyuMk+Os19ijwq4zUPZhn+mJirS8FcSdAA2MCZWxv9n+e+xF Nm5xBrsJA9uboBJB5gi6PnpZk4MX3tuO3Dtu9FtMeNhRYF6PNkCeJmwfTlUHzdRr /9IwBkU+LSfoCYZIsQ1RFfrRNSkKojX5AEuo/glGtH2bJvyNOQE16xhTUczCVcYB 4SD6ek/19HprHsB43YNFGYsP+9Tlgo0rRV0sdN/SGi5r7BZrVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVwHssTAx1WkYTIu6mW8OBKFD56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMGVhNWZmYTQtMzJjNi0z ZTdmLWE0ODMtNDlkZTlmYzU5YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AZg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGp885yY8YJ4vzlNDRVHRb5YkcXU1nU8Jaxd4vkPrglCEdn+mCo 6jABPtUwZp3/xj6i92Xbw1VbhM07JgHWKbFS1PWCrRBcTlzMfIY2Vr+X5eflMh5d NqXt1FFkcbBMzlQkGOl/zBf6qw1OgG4TKFW8K8L1bCAZL8YuYMx9gHPILzs6bAok QPgyA2OtGbmfaUU+rSGbd0qp4X0ffMVtljuR30BHnkIXQ9cTT0W0CLqlQzJfhVXx oJfAcheY2j8bLIP7WbQtcCShxxdD9f+fQP1RXrgH9BxmgY8bXW9gvtrZJkKzC8M7 jn0A0FPvEXls/nvpEdtnoa2dbMQp5o5g9Dk= -----END CERTIFICATE-----Generated at Mon Mar 16 15:12:14 2026 by rpki-client