$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa File: 69592875-b7cb-3401-bb4e-78d533ad8011.roa (raw, json) Hash identifier: m8wjBKexf3ALUFO+kJ6fnhrBDmSmELCb5M7l1axzEkY= Subject key identifier: 3E:39:C1:7B:E5:D7:A2:B9:BB:31:4B:6E:E2:4F:29:5E:97:CD:91:ED Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D300A39F8EEDF99B543B9CB20 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 19637 IP address blocks: 2604:b040:588::/48 maxlen: 48 2604:b040:589::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:39:f8:ee:df:99:b5:43:b9:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d6210c32-ad09-4cbf-8100-c84a48937cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:36:75:2a:98:d9:75:2d:d1:08:4f:d2:07: c0:7c:f4:ce:b2:9c:3e:65:22:fe:ce:5c:7c:92:4e: 7e:13:ff:d1:61:af:4e:24:b9:4e:f6:f0:cc:6e:35: de:3f:55:34:24:db:81:3f:74:d6:c8:95:bd:d7:13: 71:dc:99:cb:64:14:dc:e4:c2:c0:a8:b9:01:c3:6f: 67:5f:c9:46:c1:b4:c7:b4:07:8f:47:09:df:37:da: ed:a6:31:77:34:27:a9:c0:5c:66:f7:79:04:6c:6a: f4:a5:4f:e7:5a:1d:1b:d1:80:bf:15:2e:90:b2:95: 36:34:aa:2c:fb:91:9d:04:59:54:f8:21:f3:b8:41: 93:20:37:1e:83:76:b7:33:18:9c:58:8a:f3:be:90: 96:3f:23:96:58:1d:e7:7f:cc:c5:56:ee:04:7e:d1: 43:b1:45:81:14:1d:ec:7f:fc:ae:b2:08:60:47:c6: fa:05:b3:3d:79:31:b8:83:4a:38:ef:84:fb:07:ab: 21:26:08:26:04:f5:15:54:f0:54:ec:22:07:4c:53: dc:87:33:47:53:94:ed:c5:a5:1e:19:30:bb:6a:1d: b0:15:35:ac:01:91:64:15:8d:db:61:38:78:10:dc: 73:66:60:32:7b:2f:10:b9:65:18:73:60:5c:fd:53: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:39:C1:7B:E5:D7:A2:B9:BB:31:4B:6E:E2:4F:29:5E:97:CD:91:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:588::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:53:a1:dd:7f:a1:c5:0d:43:15:07:f5:35:4b:63:06:69:fe: c0:8f:17:5a:0d:34:3c:85:5a:34:39:6f:78:57:bf:6d:56:c3: be:74:bd:ec:85:9d:2e:7e:08:da:51:e2:24:68:36:b0:27:69: 47:5e:49:ba:12:b0:c6:f5:26:26:fa:68:16:27:76:d3:9e:51: d9:1f:45:c6:8e:1a:59:fe:9a:38:ce:0a:35:48:6a:0f:ba:64: e2:7d:92:0c:d2:f7:7a:62:af:06:ee:24:37:68:16:50:ef:36: 31:81:7e:b4:b6:3e:96:3e:42:21:25:17:18:ce:b6:20:9f:30: c1:00:43:53:be:f2:a4:2c:81:49:70:a2:6a:ca:52:bc:66:05: d9:59:cb:8e:4e:df:03:e3:99:ae:bc:05:96:d2:4e:4f:21:0c: 12:eb:ac:c4:e5:f1:48:24:b9:2b:a1:b3:f0:d3:c8:e9:30:9f: a2:1c:d2:29:e6:47:ca:10:ca:99:08:69:a0:21:11:66:37:b3: 14:f6:00:4d:36:a1:a0:4d:0a:95:7a:b0:c5:31:a1:65:96:9d: 53:6a:6a:ff:4e:f3:8c:38:5c:01:27:48:39:2a:8c:41:5f:af: c7:15:93:df:48:c8:b8:89:c1:05:e1:b2:2d:f7:ce:28:5d:bc: a2:8b:e1:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0wCjn47t+ZtUO5yyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDYyMTBjMzItYWQwOS00Y2JmLTgxMDAtYzg0YTQ4OTM3Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCU2dSqY2XUt0QhP0gfAfPTOspw+ZSL+zlx8 kk5+E//RYa9OJLlO9vDMbjXeP1U0JNuBP3TWyJW91xNx3JnLZBTc5MLAqLkBw29n X8lGwbTHtAePRwnfN9rtpjF3NCepwFxm93kEbGr0pU/nWh0b0YC/FS6QspU2NKos +5GdBFlU+CHzuEGTIDceg3a3MxicWIrzvpCWPyOWWB3nf8zFVu4EftFDsUWBFB3s f/yusghgR8b6BbM9eTG4g0o474T7B6shJggmBPUVVPBU7CIHTFPchzNHU5TtxaUe GTC7ah2wFTWsAZFkFY3bYTh4ENxzZmAyey8QuWUYc2Bc/VMsbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD45wXvl16K5uzFLbuJPKV6XzZHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNjk1OTI4NzUtYjdjYi0z NDAxLWJiNGUtNzhkNTMzYWQ4MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgSwQAWI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxTod1/ocUNQxUH9TVLYwZp/sCPF1oNNDyFWjQ5b3hXv21Ww750 veyFnS5+CNpR4iRoNrAnaUdeSboSsMb1Jib6aBYndtOeUdkfRcaOGln+mjjOCjVI ag+6ZOJ9kgzS93pirwbuJDdoFlDvNjGBfrS2PpY+QiElFxjOtiCfMMEAQ1O+8qQs gUlwomrKUrxmBdlZy45O3wPjma68BZbSTk8hDBLrrMTl8UgkuSuhs/DTyOkwn6Ic 0inmR8oQypkIaaAhEWY3sxT2AE02oaBNCpV6sMUxoWWWnVNqav9O84w4XAEnSDkq jEFfr8cVk99IyLiJwQXhsi33zihdvKKL4XU= -----END CERTIFICATE-----Generated at Sat Mar 21 15:23:28 2026 by rpki-client