$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa File: e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa (raw, json) Hash identifier: vTWhzvOT/xGYOm4LNTUbkG+zV+5EG9Y1sxv+Dy1iHhg= Subject key identifier: 61:F9:8C:08:14:78:D3:8D:22:D9:4A:3F:89:6E:74:C1:65:7F:8D:0C Certificate issuer: /CN=3e08da12-c2b8-4581-b1af-e8322645d15e Certificate serial: 010D0C9F4328584D60E50AA16AE91F11FF09C580 Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 398448 IP address blocks: 2607:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0a:a1:6a:e9:1f:11:ff:09:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=84e25149-0c35-40c5-8edb-270ccb539b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:e3:62:1e:0c:de:f8:d3:c1:c8:3e:b2:51: 89:c3:70:06:8b:42:69:af:c0:e2:f7:ef:d2:5e:d2: 56:e4:f7:b4:a5:fd:38:d1:8f:9c:ba:e9:f0:af:62: c2:be:ad:ba:3f:39:54:a8:fc:3b:7d:f3:56:70:a9: bb:64:22:33:79:46:1b:7a:50:23:ea:57:4e:77:26: e0:70:b9:f9:bc:2b:b6:32:db:8d:05:a9:45:c8:26: 01:e5:83:ab:b2:b7:a9:5d:ee:75:21:05:07:8b:44: 71:e8:0b:c2:a2:7a:b3:d2:b5:9d:86:81:d9:81:f4: ce:7a:86:84:d2:b7:38:5e:e6:e2:24:27:3a:33:a3: a3:eb:a8:b2:78:2d:d5:b5:f3:8f:3b:6a:c7:a3:cb: 0a:b1:c8:1f:5a:3c:91:b1:b4:d2:62:af:11:31:f3: 78:ba:55:01:28:5d:b9:9a:f8:64:81:c9:7e:c1:3c: 47:59:8c:19:27:d4:32:a9:6b:0a:97:10:a5:72:bb: a1:4f:52:89:16:b9:c8:53:19:d0:03:34:50:25:f1: 49:22:e4:72:09:9b:43:e9:52:5c:61:23:f8:95:65: 52:69:46:05:be:35:dd:7f:31:75:00:66:e2:9d:47: 07:13:11:26:38:82:34:d9:78:38:a8:66:6e:9b:8e: 37:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F9:8C:08:14:78:D3:8D:22:D9:4A:3F:89:6E:74:C1:65:7F:8D:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/e0e99561-e212-3132-9e8b-78a6db5e8bf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl X509v3 Authority Key Identifier: keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer sbgp-ipAddrBlock: critical IPv6: 2607:a340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:06:aa:1d:78:31:7d:7b:56:eb:44:b1:55:ab:14:4f:69:50: 4d:72:90:74:32:08:3f:bf:60:e1:41:69:b1:b0:ad:ee:b7:bc: 98:78:52:9e:bb:78:ac:45:72:2d:33:ea:23:b3:9b:cb:54:f0: d4:0f:45:8d:e7:48:1a:ff:92:7c:1e:fd:91:b3:24:77:9f:5b: bd:0a:c5:45:c7:de:b7:82:2e:54:58:6d:e7:84:ff:21:eb:b8: d0:b4:8e:27:67:fb:46:cf:94:38:0f:ac:9f:4b:20:a2:3d:b1: 10:17:02:c3:6c:3b:7d:13:d1:ec:4b:34:05:e1:81:70:72:e3: 8a:c8:75:19:f0:ba:24:a3:93:d8:e1:1e:7c:83:f3:ad:d1:fe: 58:38:50:70:80:f0:10:a2:b3:8a:2c:2c:e1:87:62:56:ad:62: b7:1f:42:a5:a2:c7:d2:55:d4:d6:db:db:57:74:01:30:f7:a5: 42:df:ce:da:51:2b:21:f1:3c:fa:73:be:4d:33:3f:c3:0f:6a: d1:0c:14:9c:05:a1:2e:56:4d:0f:c4:69:7c:40:80:23:16:db: 9a:8a:76:ad:39:d2:6e:4f:9f:76:53:9d:07:cf:75:5e:1d:86: cc:71:fa:c9:88:e9:e3:c8:3e:8e:cc:8d:54:bb:a6:c3:b7:49: 60:9e:30:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1g5QqhaukfEf8JxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVk MTVlMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ODRlMjUxNDktMGMzNS00MGM1LThlZGItMjcwY2NiNTM5YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA197jYh4M3vjTwcg+slGJw3AGi0Jpr8Di9+/S XtJW5Pe0pf040Y+cuunwr2LCvq26PzlUqPw7ffNWcKm7ZCIzeUYbelAj6ldOdybg cLn5vCu2MtuNBalFyCYB5YOrsrepXe51IQUHi0Rx6AvConqz0rWdhoHZgfTOeoaE 0rc4XubiJCc6M6Oj66iyeC3VtfOPO2rHo8sKscgfWjyRsbTSYq8RMfN4ulUBKF25 mvhkgcl+wTxHWYwZJ9QyqWsKlxClcruhT1KJFrnIUxnQAzRQJfFJIuRyCZtD6VJc YSP4lWVSaUYFvjXdfzF1AGbinUcHExEmOII02Xg4qGZum443/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGH5jAgUeNONItlKP4ludMFlf40MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTA4 ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvZTBlOTk1NjEtZTIxMi0z MTMyLTllOGItNzhhNmRiNWU4YmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UwOGRhMTItYzJiOC00NTgxLWIx YWYtZTgzMjI2NDVkMTVlLzNlMDhkYTEyLWMyYjgtNDU4MS1iMWFmLWU4MzIyNjQ1 ZDE1ZS5jcmwwHwYDVR0jBBgwFoAUj08rWNpeVzJWK/eXMxgyPBcpDUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMy MjY0NWQxNWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgejQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCOBqodeDF9e1brRLFVqxRPaVBNcpB0Mgg/v2DhQWmxsK3ut7yYeFKe u3isRXItM+ojs5vLVPDUD0WN50ga/5J8Hv2RsyR3n1u9CsVFx963gi5UWG3nhP8h 67jQtI4nZ/tGz5Q4D6yfSyCiPbEQFwLDbDt9E9HsSzQF4YFwcuOKyHUZ8Loko5PY 4R58g/Ot0f5YOFBwgPAQorOKLCzhh2JWrWK3H0KlosfSVdTW29tXdAEw96VC387a USsh8Tz6c75NMz/DD2rRDBScBaEuVk0PxGl8QIAjFtuainatOdJuT592U50Hz3Ve HYbMcfrJiOnjyD6OzI1Uu6bDt0lgnjCz -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:41 2026 by rpki-client