$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa File: f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa (raw, json) Hash identifier: Ngcgl9hQEF8rrkYp4T2yk+cLrQ6HFJUk444x90xt6ow= Subject key identifier: 7B:EC:3A:59:52:3D:C9:74:44:4B:0E:E5:B6:02:E2:9C:1B:95:1F:22 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584D2BDA2520FAB9C417BCCEAF80 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 397543 IP address blocks: 2607:f8f0:c21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:25:20:fa:b9:c4:17:bc:ce:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=10f054a7-3311-42fa-b96c-ba81aa1be486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:65:65:44:5e:a5:be:11:39:59:8d:13:96:81: 1e:d0:32:a0:c2:77:85:a4:37:c2:f3:60:69:d5:31: fe:a4:a4:bf:81:b7:4e:07:6c:cb:91:75:03:97:33: 04:36:06:6f:e6:f8:ed:bc:24:25:fe:2a:ea:02:1f: 0b:f4:ea:7f:f9:21:85:40:5d:d9:5a:92:c7:a1:6f: 84:e1:72:e3:38:5a:b3:71:c5:02:29:d1:3c:11:72: 99:02:29:80:a5:b7:ca:52:d6:64:c8:84:7a:1f:db: f8:7b:30:7b:3f:c3:56:8d:20:86:b7:c6:84:a3:c9: aa:8c:d7:f9:7a:27:89:5b:9a:3f:ad:e1:0f:7c:86: 0e:4c:c5:54:ab:e3:c1:8c:5f:90:80:5b:2f:b1:ed: 53:f0:d3:bb:83:40:52:e1:fb:8d:82:18:26:e7:12: 3a:a7:9a:ab:9b:04:0f:39:b6:e4:36:36:02:39:5d: ee:3f:32:fc:55:ff:59:2e:58:1d:8e:1b:53:84:03: ca:98:24:74:09:91:04:b0:56:c3:b5:73:45:a8:b3: 0e:c6:63:21:cd:33:95:c4:8a:31:b7:97:75:1a:87: f5:57:71:c3:3e:36:ad:30:01:69:d3:41:9c:e8:46: 5b:6c:c5:67:2e:49:e8:26:76:19:08:bb:c3:1b:75: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EC:3A:59:52:3D:C9:74:44:4B:0E:E5:B6:02:E2:9C:1B:95:1F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f6422793-5a68-38d8-9dfa-1aa909f4e1bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:c21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8b:f0:39:3e:fc:74:89:76:22:90:b7:41:2d:ce:d9:19:66: f0:69:8a:54:b5:ed:54:c4:44:9a:70:4c:37:a0:5a:62:9a:8b: c8:00:83:89:a3:7c:b8:7d:4c:5f:2f:e8:6d:f8:51:c3:8a:07: f5:36:58:bd:2d:c2:96:f3:18:5e:39:da:42:df:e9:70:de:24: 6f:ec:69:92:f9:b2:51:e2:25:f3:bc:23:74:0e:c1:31:fd:2f: 54:e4:18:5d:b7:2b:7a:08:b9:23:28:1d:33:8a:41:1f:41:fe: b2:97:76:ca:2b:d7:06:07:88:8c:f0:e7:07:ea:44:a5:08:45: f9:6a:42:58:9d:fc:73:d4:df:ec:d1:cf:88:e7:2e:f4:af:89: 4d:d7:80:42:57:1a:40:cc:0d:7d:52:64:0d:f1:81:a2:b8:81: 2f:68:98:ee:4b:61:75:ff:bc:74:36:93:3e:04:54:55:50:f8: 81:76:4b:fa:a6:7f:ad:68:19:f2:ce:8d:13:10:95:07:4d:08: 49:9b:99:19:31:cb:e6:75:1c:04:7e:5e:11:53:07:b6:e3:71: 09:e4:7e:12:ef:35:12:7a:b5:f6:06:25:e5:f1:b9:7d:19:8b: 2b:07:87:43:e3:33:bf:38:a4:87:a4:ad:e0:13:37:c9:ad:37: 53:5b:a4:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0r2iUg+rnEF7zOr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MTBmMDU0YTctMzMxMS00MmZhLWI5NmMtYmE4MWFhMWJlNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWVlRF6lvhE5WY0TloEe0DKgwneFpDfC82Bp 1TH+pKS/gbdOB2zLkXUDlzMENgZv5vjtvCQl/irqAh8L9Op/+SGFQF3ZWpLHoW+E 4XLjOFqzccUCKdE8EXKZAimApbfKUtZkyIR6H9v4ezB7P8NWjSCGt8aEo8mqjNf5 eieJW5o/reEPfIYOTMVUq+PBjF+QgFsvse1T8NO7g0BS4fuNghgm5xI6p5qrmwQP ObbkNjYCOV3uPzL8Vf9ZLlgdjhtThAPKmCR0CZEEsFbDtXNFqLMOxmMhzTOVxIox t5d1Gof1V3HDPjatMAFp00Gc6EZbbMVnLknoJnYZCLvDG3XrJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHvsOllSPcl0REsO5bYC4pwblR8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjY0MjI3OTMtNWE2OC0z OGQ4LTlkZmEtMWFhOTA5ZjRlMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48Awh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+L8Dk+/HSJdiKQt0EtztkZZvBpilS17VTERJpwTDegWmKai8gA g4mjfLh9TF8v6G34UcOKB/U2WL0twpbzGF452kLf6XDeJG/saZL5slHiJfO8I3QO wTH9L1TkGF23K3oIuSMoHTOKQR9B/rKXdsor1wYHiIzw5wfqRKUIRflqQlid/HPU 3+zRz4jnLvSviU3XgEJXGkDMDX1SZA3xgaK4gS9omO5LYXX/vHQ2kz4EVFVQ+IF2 S/qmf61oGfLOjRMQlQdNCEmbmRkxy+Z1HAR+XhFTB7bjcQnkfhLvNRJ6tfYGJeXx uX0ZiysHh0PjM784pIekreATN8mtN1NbpEU= -----END CERTIFICATE-----Generated at Mon Mar 16 15:20:19 2026 by rpki-client