$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa File: 34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa (raw, json) Hash identifier: 0zhPvYfCdVjjsu3iDyAaQpmWEo7GcEsuQH4wFydLJTk= Subject key identifier: 16:00:8F:BC:94:C9:1A:67:A1:AB:06:7B:89:D6:9A:D1:D6:EA:B4:A3 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584D703FE27BDFA2D4551F555640 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 8075 IP address blocks: 2606:e540:c00::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e2:7b:df:a2:d4:55:1f:55:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=7e6587bf-df3e-4c97-a0f9-583c36f7176c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d6:ae:bd:1a:74:44:e7:39:57:f5:6b:15:43: a3:06:95:e4:06:a5:11:64:19:8a:66:5f:4b:7b:73: 44:8e:a0:c4:db:13:7f:bf:b9:92:f5:68:5a:c7:4c: 1a:46:48:44:5a:c5:b7:eb:b3:2d:0b:61:73:a8:84: 27:19:b1:1e:28:4c:f0:46:6b:5a:e6:a9:a4:e4:b4: 23:5c:cd:6c:ea:96:3a:ee:5e:f3:4e:41:69:1b:68: 9e:dd:a8:2a:14:34:d5:ca:01:7c:a8:99:86:bd:9c: b3:ea:d6:aa:9d:12:b1:af:99:37:9e:9b:34:5a:51: c4:89:d5:98:ed:19:bf:3d:07:4d:f4:65:f1:61:7f: 37:7d:91:f3:40:2d:70:97:bc:d5:93:4c:0c:d1:16: 3f:0c:28:98:bf:26:69:8d:c3:8a:fb:6a:1b:cb:f8: 5c:fe:bb:9d:c1:7e:a5:72:c9:e7:11:80:3f:35:45: fd:a6:4a:be:ce:c0:ec:d1:b8:78:d0:84:ae:21:33: 3b:88:3d:e6:48:6f:80:42:77:1a:58:69:43:b9:dc: 36:88:99:b2:81:80:37:97:56:29:e8:15:26:46:4b: be:af:97:cd:d4:c6:a9:50:05:62:a3:08:bf:8b:4c: 29:62:c9:56:87:b2:3d:b6:54:0c:ae:d5:3a:60:71: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:00:8F:BC:94:C9:1A:67:A1:AB:06:7B:89:D6:9A:D1:D6:EA:B4:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/34ce1e22-d80b-3394-974b-ed5e2ba8c51d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2f:9e:48:0b:42:52:dd:6f:ab:6e:6b:21:f1:76:70:1c:ff: 12:a1:21:b1:10:41:68:07:49:21:ff:ca:69:b2:15:58:fd:1d: c8:ce:86:63:0a:0f:e5:bb:a2:d1:02:94:3b:dc:27:33:8f:bf: c0:dc:c1:72:7d:41:58:65:3a:04:42:8a:28:04:5b:2c:89:22: 11:c6:0d:90:13:a8:68:7d:89:28:df:b3:40:02:6c:fe:92:0d: 6f:c6:a7:ad:10:30:e0:bc:bf:39:19:f7:41:43:4a:3a:8c:2c: 5e:95:c8:67:51:96:be:eb:af:0e:ab:49:bd:21:d7:d0:fa:3c: ba:67:99:76:3e:71:56:92:4d:41:4c:92:84:89:29:ae:66:27: ac:55:9e:47:a9:2d:73:ad:45:a0:a8:e6:6c:4b:b8:f1:a5:5d: 8b:2d:c2:83:18:ac:ee:a5:f7:42:73:49:0c:1d:cb:9f:6f:fa: d3:f5:52:10:a1:e3:21:88:6f:85:b5:85:ed:1e:3a:0f:b0:cb: bb:aa:20:06:cd:5d:a8:05:0c:65:92:7b:07:17:7b:44:1e:b2: 1e:f7:b0:52:d0:3c:03:6a:80:4a:d5:ee:a9:92:60:46:c8:d0: e3:53:35:fa:26:43:a7:de:3d:ab:74:6d:c4:4d:68:ff:b2:65: 46:d4:6f:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1wP+J736LUVR9VVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk N2U2NTg3YmYtZGYzZS00Yzk3LWEwZjktNTgzYzM2ZjcxNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tauvRp0ROc5V/VrFUOjBpXkBqURZBmKZl9L e3NEjqDE2xN/v7mS9Whax0waRkhEWsW367MtC2FzqIQnGbEeKEzwRmta5qmk5LQj XM1s6pY67l7zTkFpG2ie3agqFDTVygF8qJmGvZyz6taqnRKxr5k3nps0WlHEidWY 7Rm/PQdN9GXxYX83fZHzQC1wl7zVk0wM0RY/DCiYvyZpjcOK+2oby/hc/rudwX6l csnnEYA/NUX9pkq+zsDs0bh40ISuITM7iD3mSG+AQncaWGlDudw2iJmygYA3l1Yp 6BUmRku+r5fN1MapUAViowi/i0wpYslWh7I9tlQMrtU6YHEnDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYAj7yUyRpnoasGe4nWmtHW6rSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvMzRjZTFlMjItZDgwYi0z Mzk0LTk3NGItZWQ1ZTJiYThjNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgvnkgLQlLdb6tuayHxdnAc/xKhIbEQQWgHSSH/ymmyFVj9HcjO hmMKD+W7otEClDvcJzOPv8DcwXJ9QVhlOgRCiigEWyyJIhHGDZATqGh9iSjfs0AC bP6SDW/Gp60QMOC8vzkZ90FDSjqMLF6VyGdRlr7rrw6rSb0h19D6PLpnmXY+cVaS TUFMkoSJKa5mJ6xVnkepLXOtRaCo5mxLuPGlXYstwoMYrO6l90JzSQwdy59v+tP1 UhCh4yGIb4W1he0eOg+wy7uqIAbNXagFDGWSewcXe0Qesh73sFLQPANqgErV7qmS YEbI0ONTNfomQ6fePat0bcRNaP+yZUbUb5A= -----END CERTIFICATE-----Generated at Fri Apr 17 03:45:00 2026 by rpki-client