$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: vHGHlAkOLBu6C5j560KirnRfVGjs8srTKef1n5exTag= Subject key identifier: A9:D8:00:7A:DA:44:D9:D8:50:32:27:0C:09:4F:01:14:8D:0C:F0:23 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584CCE71F67582F55BABE4D84440 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:71:f6:75:82:f5:5b:ab:e4:d8:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=83bfb20f-bfb0-44f4-91df-9dd01c1ab3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:ed:a2:4e:7a:74:91:83:fc:b4:8f:08:04: 11:ec:53:be:33:6f:13:dd:76:9f:0b:32:b8:66:a8: f0:04:91:a9:74:f0:db:33:a9:ec:a1:d2:ee:5b:0e: 59:4a:7b:51:58:16:12:f2:0c:ac:a1:53:1d:1e:9f: 77:3e:97:a8:8d:ad:ca:26:03:f7:94:94:dc:e1:f0: 8a:42:1c:49:05:58:86:ee:03:29:2c:33:4d:81:b8: 36:f6:bf:49:83:ad:de:c9:bb:38:e3:82:ae:35:4b: 00:23:66:c9:3f:cd:c3:34:bb:23:dc:f8:f2:76:c1: 8e:c3:42:93:f1:01:7b:05:68:f6:fd:4f:06:7c:41: 0c:15:6f:6f:fe:2e:e2:2e:00:f0:b6:b6:e6:92:57: ec:e8:bf:7b:f1:84:9d:33:28:c5:46:a7:00:03:4a: 72:b1:98:98:e5:70:48:2a:ea:3b:4a:33:65:fa:b2: ff:2b:96:02:3f:45:54:1e:5c:86:7d:ba:90:2c:c7: c6:61:ff:a5:4c:cc:5c:68:18:2e:48:91:84:81:71: b9:0f:62:ac:f9:97:aa:48:d1:16:a0:b0:b3:3f:22: 5e:b6:80:48:62:f0:a7:3c:dc:02:9a:98:e1:71:38: cc:fb:a2:4f:7b:2c:20:78:8c:1c:7a:04:08:48:78: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D8:00:7A:DA:44:D9:D8:50:32:27:0C:09:4F:01:14:8D:0C:F0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b8:96:98:e0:a4:4c:9c:b1:d7:cb:24:fd:ce:b6:7c:2d:76: 2f:df:64:23:59:bf:1e:45:a8:ea:25:c8:16:d3:f0:89:d7:f1: f0:8b:5f:79:02:68:1b:37:49:a5:b4:08:53:33:30:d8:43:b9: 60:2d:b6:21:fd:3f:4c:8a:a9:8d:0c:bc:0e:f3:67:e9:4c:28: bb:38:db:aa:cf:1d:fb:84:1c:ba:8d:f4:fe:ac:96:94:d9:1a: 21:ee:c2:2c:ec:16:50:6b:66:a5:0d:0e:b1:48:51:a0:a7:2b: d5:37:6a:f5:a6:a3:90:e5:95:75:0b:b7:52:62:2f:f5:6e:50: 2f:aa:6e:19:54:ea:fb:4f:f7:73:82:ed:ee:f0:39:d1:18:b3: a1:df:f0:bc:34:5e:fd:4f:46:1a:fc:c5:c9:90:b8:c3:d4:04: 98:e8:e4:77:56:af:d8:cc:4a:f1:6a:92:23:62:53:52:97:ed: cf:84:c3:e5:e1:99:be:3e:33:3a:fc:bc:d0:cd:d4:5c:6a:0f: b9:a3:4d:48:05:cd:7c:7b:56:88:83:15:65:e7:d6:31:fd:fb: d4:57:3e:f9:4f:2e:5d:9e:e0:10:3f:07:ab:f1:b3:2c:9b:a6: fe:fd:72:04:f5:e3:9a:95:94:61:56:38:30:df:6a:ff:32:63: e5:a4:8b:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzOcfZ1gvVbq+TYREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk ODNiZmIyMGYtYmZiMC00NGY0LTkxZGYtOWRkMDFjMWFiM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty/tok56dJGD/LSPCAQR7FO+M28T3XafCzK4 ZqjwBJGpdPDbM6nsodLuWw5ZSntRWBYS8gysoVMdHp93Ppeoja3KJgP3lJTc4fCK QhxJBViG7gMpLDNNgbg29r9Jg63eybs444KuNUsAI2bJP83DNLsj3PjydsGOw0KT 8QF7BWj2/U8GfEEMFW9v/i7iLgDwtrbmklfs6L978YSdMyjFRqcAA0pysZiY5XBI Kuo7SjNl+rL/K5YCP0VUHlyGfbqQLMfGYf+lTMxcaBguSJGEgXG5D2Ks+ZeqSNEW oLCzPyJetoBIYvCnPNwCmpjhcTjM+6JPeywgeIwcegQISHh41QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnYAHraRNnYUDInDAlPARSNDPAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBquJaY4KRMnLHXyyT9zrZ8LXYv32QjWb8eRajqJcgW0/CJ1/Hwi195 AmgbN0mltAhTMzDYQ7lgLbYh/T9MiqmNDLwO82fpTCi7ONuqzx37hBy6jfT+rJaU 2Roh7sIs7BZQa2alDQ6xSFGgpyvVN2r1pqOQ5ZV1C7dSYi/1blAvqm4ZVOr7T/dz gu3u8DnRGLOh3/C8NF79T0Ya/MXJkLjD1ASY6OR3Vq/YzErxapIjYlNSl+3PhMPl 4Zm+PjM6/LzQzdRcag+5o01IBc18e1aIgxVl59Yx/fvUVz75Ty5dnuAQPwer8bMs m6b+/XIE9eOalZRhVjgw32r/MmPlpIs9 -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:14 2026 by rpki-client