$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa File: cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa (raw, json) Hash identifier: e+XHo/tWVOv5NtUjSIKBA48TXn0D3gkVWwpvTGxxE3U= Subject key identifier: 73:A6:8E:A5:A6:A2:28:8E:41:09:8D:6A:F5:35:6F:E1:0A:8F:62:E0 Certificate issuer: /CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Certificate serial: 010D0C9F4328584D667A524D07F7C1B9521CF700 Authority key identifier: 13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 25635 IP address blocks: 2605:5640::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:52:4d:07:f7:c1:b9:52:1c:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31a463c-a0cd-410a-8aab-0fadfe97c69f Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=42730224-25c2-4059-8a37-dddc7576ff28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:93:57:69:fe:e3:3a:14:aa:60:57:c6:e5: e2:e7:88:43:1e:84:0d:f3:6e:c4:82:b4:be:fa:05: 88:d3:1f:44:53:d9:02:60:d1:6f:3b:19:f5:f2:5d: de:03:2a:25:17:ae:ea:99:fe:59:58:31:0f:e0:30: 72:7c:03:82:2b:34:e9:21:f5:7f:f9:b8:63:d3:4a: fa:54:21:b5:c2:e6:07:eb:88:d4:5c:7d:fe:31:6b: 32:1f:e8:c1:f4:f0:5c:e5:8f:c5:c6:f3:2c:7c:95: 94:cf:55:5c:d1:f3:cd:5c:1c:17:6d:31:73:36:2b: 20:51:88:1a:86:3c:75:9a:d6:73:68:dd:85:7e:19: df:7b:65:b3:b9:f1:65:4c:37:72:1a:81:05:57:e4: 40:9c:c2:ac:8a:56:eb:11:25:97:bd:68:39:a5:0f: 24:48:19:a3:f8:a3:0e:5d:f3:24:a9:f7:bd:9d:49: 42:e6:ae:5c:d7:80:2d:fb:f3:d0:a2:fa:49:64:56: 03:48:a6:b5:2a:03:b1:76:29:67:a4:96:c9:b4:69: f9:e2:fa:67:19:d8:5d:c3:d0:91:f1:db:78:82:b8: 44:fc:6e:5a:cf:4e:53:e9:56:4c:49:e9:3f:f6:57: 14:2c:08:e6:be:c5:3e:8b:da:0d:34:e8:a4:dd:63: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:8E:A5:A6:A2:28:8E:41:09:8D:6A:F5:35:6F:E1:0A:8F:62:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/cd12a9d7-4e3a-3052-bc1c-869e27da883f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f/d31a463c-a0cd-410a-8aab-0fadfe97c69f.crl X509v3 Authority Key Identifier: keyid:13:76:8A:28:97:A6:DD:B7:51:AA:5A:58:D3:DE:DA:76:AC:DA:66:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d31a463c-a0cd-410a-8aab-0fadfe97c69f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5640::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f7:59:78:87:b6:18:02:b9:4c:44:ac:b0:b3:d8:66:6d:bd: 11:13:b0:e7:b7:3f:82:da:36:65:73:77:a0:4b:45:26:95:23: 66:3f:f8:88:60:4a:f4:86:75:a5:1b:fd:bf:cf:4c:96:df:ce: 05:8c:d9:c7:da:b1:a4:78:63:d4:45:82:a1:d2:2f:5e:e4:9e: 48:70:4a:b5:2a:38:d0:ac:48:ce:73:74:7b:af:a6:71:32:18: 93:38:1f:d4:ae:27:58:e5:3b:bc:d8:20:ad:fe:63:6f:e4:e4: 9d:0b:d8:7d:d7:0e:3f:a5:39:00:23:ed:0e:9a:43:41:3c:29: bc:8a:0c:d5:e8:11:5a:da:11:3b:cc:5c:fa:cd:89:32:5b:ae: a4:01:62:54:66:58:77:0a:0c:c6:86:c6:c1:cd:d7:29:75:de: ec:c1:51:0c:eb:d7:12:1e:db:54:29:19:4d:8e:b4:bf:06:61: 31:29:42:e6:da:2e:c9:04:e3:9d:ee:22:c0:b3:a7:ca:c1:c6: 56:42:0c:cf:87:a7:d0:ab:9b:a0:ae:51:00:6d:fb:2f:65:96: c0:23:ec:0c:23:e7:f9:a7:d1:7d:79:16:dd:84:dd:dd:e8:40: a6:d1:84:10:3b:b2:b5:3a:63:d7:28:ec:9b:52:78:89:38:93: 63:20:8f:03 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1melJNB/fBuVIc9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxYTQ2M2MtYTBjZC00MTBhLThhYWItMGZhZGZlOTdj NjlmMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NDI3MzAyMjQtMjVjMi00MDU5LThhMzctZGRkYzc1NzZmZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbOTV2n+4zoUqmBXxuXi54hDHoQN827EgrS+ +gWI0x9EU9kCYNFvOxn18l3eAyolF67qmf5ZWDEP4DByfAOCKzTpIfV/+bhj00r6 VCG1wuYH64jUXH3+MWsyH+jB9PBc5Y/FxvMsfJWUz1Vc0fPNXBwXbTFzNisgUYga hjx1mtZzaN2Ffhnfe2WzufFlTDdyGoEFV+RAnMKsilbrESWXvWg5pQ8kSBmj+KMO XfMkqfe9nUlC5q5c14At+/PQovpJZFYDSKa1KgOxdilnpJbJtGn54vpnGdhdw9CR 8dt4grhE/G5az05T6VZMSek/9lcULAjmvsU+i9oNNOik3WNmhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHOmjqWmoiiOQQmNavU1b+EKj2LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFh NDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFkZmU5N2M2OWYvY2QxMmE5ZDctNGUzYS0z MDUyLWJjMWMtODY5ZTI3ZGE4ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDMxYTQ2M2MtYTBjZC00MTBhLThh YWItMGZhZGZlOTdjNjlmL2QzMWE0NjNjLWEwY2QtNDEwYS04YWFiLTBmYWRmZTk3 YzY5Zi5jcmwwHwYDVR0jBBgwFoAUE3aKKJem3bdRqlpY097adqzaZmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMzFhNDYzYy1hMGNkLTQxMGEtOGFhYi0wZmFk ZmU5N2M2OWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgVWQAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGvdZeIe2GAK5TESssLPYZm29EROw57c/gto2ZXN3oEtFJpUjZj/4 iGBK9IZ1pRv9v89Mlt/OBYzZx9qxpHhj1EWCodIvXuSeSHBKtSo40KxIznN0e6+m cTIYkzgf1K4nWOU7vNggrf5jb+TknQvYfdcOP6U5ACPtDppDQTwpvIoM1egRWtoR O8xc+s2JMluupAFiVGZYdwoMxobGwc3XKXXe7MFRDOvXEh7bVCkZTY60vwZhMSlC 5touyQTjne4iwLOnysHGVkIMz4en0KuboK5RAG37L2WWwCPsDCPn+afRfXkW3YTd 3ehAptGEEDuytTpj1yjsm1J4iTiTYyCPAw== -----END CERTIFICATE-----Generated at Tue Apr 7 16:30:56 2026 by rpki-client