$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa File: fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa (raw, json) Hash identifier: vBw1H0Hetevwa6GMAfazNRvrNtXlf7YJcz4Fw2oyEcc= Subject key identifier: 40:8D:27:3E:A8:5F:C2:23:2B:37:0B:93:8C:07:99:7B:F3:7B:2D:46 Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584D651528F94045F6834C2CE980 Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 0 IP address blocks: 2001:505:140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:28:f9:40:45:f6:83:4c:2c:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=e7cb179d-c834-42ef-99b6-2d6b8d623947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:db:bd:ec:e5:6a:47:53:81:59:bb:81:8a: 57:12:1c:0d:42:fd:0b:a2:b9:f5:3f:86:57:a8:e3: 85:bd:42:7f:b9:91:70:a4:b4:10:21:2a:99:f5:f0: 41:03:8a:b1:05:72:49:4d:70:9b:bf:fc:c8:b5:10: 53:61:3c:d4:56:07:c2:ec:d0:dd:ef:78:4f:35:22: 9b:8d:8f:43:23:e0:b1:46:9f:06:d5:6c:fc:c4:44: af:e2:54:aa:14:26:a6:97:3b:47:06:e4:f6:7e:2a: e2:83:99:e5:49:1e:ca:85:6a:c8:55:11:aa:be:28: 7e:6a:46:1b:d7:28:49:ce:7b:4f:85:fa:06:4d:fb: b2:22:06:34:15:a9:c8:8f:ac:12:ce:a8:2a:cb:96: 27:e0:fa:26:4e:4f:1a:4a:6a:f4:20:b8:b1:22:e0: d5:f4:f8:1d:b9:33:f1:ae:74:73:d6:6c:8a:c5:c8: c2:fc:79:89:a2:66:08:19:75:d9:91:4b:0e:ad:01: 07:38:f6:c8:f8:47:86:91:a8:b2:e8:fe:87:66:67: c6:68:70:9b:f4:08:41:d9:38:c9:fb:3a:ee:68:69: 66:dd:3e:a7:71:ff:92:86:de:1f:ff:fa:bb:f5:59: d9:61:0a:9c:1c:5e:a1:81:cb:28:69:17:c4:77:1c: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:27:3E:A8:5F:C2:23:2B:37:0B:93:8C:07:99:7B:F3:7B:2D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/fdfedfac-bfba-3c69-a98f-34d5f68f6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv6: 2001:505:140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:73:22:7a:e7:12:19:82:bb:c5:a7:c8:15:0e:93:f8:81:e0: ac:fe:de:40:eb:d3:5e:01:03:29:eb:5f:2f:de:0c:5b:7c:ba: 52:1a:37:d9:d4:e4:fa:b9:82:ab:62:28:3f:02:6a:c7:e6:1a: 77:cb:68:a7:de:a8:18:67:26:2d:fd:89:90:2b:b9:ee:b1:ab: 8c:90:7f:27:77:e8:a6:1d:53:73:83:78:5c:4d:19:da:56:44: ae:58:d1:e3:27:6e:97:ac:d6:3c:ad:01:d2:fb:0e:69:0d:10: 6f:0e:04:70:50:5e:63:d6:81:9b:13:78:e1:a0:be:b0:bd:60: d1:4e:4d:e9:4e:9d:e7:35:4d:11:35:34:c5:12:ec:c8:50:b6: f7:20:60:c6:9d:d0:55:c7:78:a5:c1:d9:da:79:4e:81:c5:7f: eb:d6:73:5a:b4:dd:13:fb:f7:47:10:8e:7e:f4:87:f8:1a:c7: 07:91:3a:6f:f1:42:c3:df:3c:26:d2:7c:0a:06:91:7e:a8:fa: bb:cf:da:b5:1d:71:34:3a:3e:88:d4:cc:28:92:71:55:d3:a4: e3:ad:7e:c4:11:71:6f:f0:ba:ab:7a:fb:1e:62:fd:eb:71:75: f5:f5:2a:a6:a2:f4:ec:de:c6:1d:f5:b9:d8:6f:55:49:bd:7c: 42:b2:ce:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFSj5QEX2g0ws6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZTdjYjE3OWQtYzgzNC00MmVmLTk5YjYtMmQ2YjhkNjIzOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKzbvezlakdTgVm7gYpXEhwNQv0Lorn1P4ZX qOOFvUJ/uZFwpLQQISqZ9fBBA4qxBXJJTXCbv/zItRBTYTzUVgfC7NDd73hPNSKb jY9DI+CxRp8G1Wz8xESv4lSqFCamlztHBuT2firig5nlSR7KhWrIVRGqvih+akYb 1yhJzntPhfoGTfuyIgY0FanIj6wSzqgqy5Yn4PomTk8aSmr0ILixIuDV9PgduTPx rnRz1myKxcjC/HmJomYIGXXZkUsOrQEHOPbI+EeGkaiy6P6HZmfGaHCb9AhB2TjJ +zruaGlm3T6ncf+Sht4f//q79VnZYQqcHF6hgcsoaRfEdxxNqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECNJz6oX8IjKzcLk4wHmXvzey1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvZmRmZWRmYWMtYmZiYS0z YzY5LWE5OGYtMzRkNWY2OGY2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBQFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBzInrnEhmCu8WnyBUOk/iB4Kz+3kDr014BAynrXy/eDFt8ulIa N9nU5Pq5gqtiKD8CasfmGnfLaKfeqBhnJi39iZArue6xq4yQfyd36KYdU3ODeFxN GdpWRK5Y0eMnbpes1jytAdL7DmkNEG8OBHBQXmPWgZsTeOGgvrC9YNFOTelOnec1 TRE1NMUS7MhQtvcgYMad0FXHeKXB2dp5ToHFf+vWc1q03RP790cQjn70h/gaxweR Om/xQsPfPCbSfAoGkX6o+rvP2rUdcTQ6PojUzCiScVXTpOOtfsQRcW/wuqt6+x5i /etxdfX1Kqai9Ozexh31udhvVUm9fEKyzqc= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:23 2026 by rpki-client