$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa File: 56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa (raw, json) Hash identifier: 9RFDvU3oFEAyX+4dovhdm5/Yc8pgAy6VDmZDa7QEsTk= Subject key identifier: 35:40:48:8A:EB:2D:49:16:78:FE:34:9E:70:62:12:DA:8B:16:C0:39 Certificate issuer: /CN=641fbbfd-7877-429d-ba4c-4decd1bb342b Certificate serial: 010D0C9F4328584D992F056C5449CE5A77AE4860 Authority key identifier: EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa Signing time: Thu 23 Apr 2026 04:55:00 +0000 ROA not before: Thu 23 Apr 2026 04:55:00 +0000 ROA not after: Wed 22 Jul 2026 04:55:00 +0000 asID: 30084 IP address blocks: 2604:2a20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:99:2f:05:6c:54:49:ce:5a:77:ae:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641fbbfd-7877-429d-ba4c-4decd1bb342b Validity Not Before: Apr 23 04:55:00 2026 GMT Not After : Jul 22 04:55:00 2026 GMT Subject: CN=1e044da8-ec8e-498f-a01e-62e9a3709047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:f9:4e:8e:67:c5:e1:cd:99:fb:a4:e6:45: 3c:6f:69:6e:17:27:1f:db:72:bb:81:3b:8c:f2:b7: 3c:79:a9:e7:50:c7:62:99:6c:36:40:62:af:91:3a: 44:73:c4:bf:45:aa:81:ff:16:ea:8a:95:b6:4a:1b: b9:1b:40:a4:cb:7e:c9:a2:a9:b2:e6:48:c5:40:29: d4:ba:27:c9:b3:a0:f1:a8:d1:b7:a4:cb:0e:bc:bd: ef:3f:75:21:62:69:79:60:b7:cf:2e:ed:07:8e:c5: 5f:d3:ec:24:d1:5c:dd:0d:8d:bb:2f:8d:09:39:3c: 12:74:bf:5b:a3:ea:64:f5:b1:51:98:ed:d7:57:13: 1b:9f:7e:38:8e:45:a5:57:41:06:ec:26:98:79:1f: 4b:57:4f:ef:eb:8a:09:ea:33:5a:49:d7:a3:55:ee: d3:77:5b:a1:6b:a3:c6:b4:9c:8a:b4:ca:f5:7c:9c: c5:c7:7c:f4:30:73:e9:0c:2f:d6:2c:b6:5b:67:f5: 7e:a3:34:df:59:0f:d5:7a:76:c4:7d:42:83:c4:1a: fa:ef:7f:2b:b0:ef:2d:d7:fb:8b:65:91:7e:24:58: 69:ec:48:80:7e:71:d0:8d:69:84:a8:9b:47:de:90: cc:03:ab:b2:9e:dd:ae:60:d5:4d:12:50:88:8e:e0: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:48:8A:EB:2D:49:16:78:FE:34:9E:70:62:12:DA:8B:16:C0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/56422e29-cab3-39ab-ac6a-8bf1909ee4c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b/641fbbfd-7877-429d-ba4c-4decd1bb342b.crl X509v3 Authority Key Identifier: keyid:EB:61:3F:EB:72:DE:F4:33:A1:22:45:F9:C6:D3:34:4B:E9:A4:73:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/641fbbfd-7877-429d-ba4c-4decd1bb342b.cer sbgp-ipAddrBlock: critical IPv6: 2604:2a20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9d:bf:19:dc:50:06:c1:34:e3:2f:8b:ba:e4:80:18:fa:4b: ef:cf:f1:39:06:50:19:ba:67:18:99:e5:01:ca:85:6b:47:20: b3:89:a1:25:2f:43:85:6b:f1:4c:d1:29:4e:45:d9:36:f9:0a: 41:86:3a:00:0f:98:50:ba:4e:6e:08:f6:35:0d:2d:4c:4f:db: b8:69:79:45:14:82:01:60:75:61:46:ec:1f:59:8b:af:a2:3f: ec:f1:86:ab:ed:90:6d:0a:0e:34:37:48:a2:dd:89:7f:0d:61: 52:95:2e:22:4f:1a:d4:53:86:aa:aa:54:34:51:ce:68:62:35: be:2f:39:3f:d3:00:fd:bb:a1:57:29:e4:cd:ff:1f:c8:3e:b7: 38:c8:9a:b3:6a:7c:f9:35:9b:9f:75:aa:e1:28:c6:21:cd:e0: 9f:5c:38:76:0f:24:aa:c2:f3:b2:0c:65:ce:14:eb:80:10:b6: 7a:c6:de:ba:5c:4a:a7:77:23:74:1e:78:c0:84:21:48:50:dc: 7b:b3:cf:a6:ae:f9:14:c6:ea:1e:de:e9:ea:e5:7c:33:c2:d1: 1e:92:b6:71:01:7f:38:9d:4c:59:f7:33:59:13:0f:cf:1a:0e: c5:2d:d9:c6:d3:90:f6:9b:12:bc:97:f2:e4:94:02:21:19:e8: 3c:d6:11:fd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2ZLwVsVEnOWneuSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQxZmJiZmQtNzg3Ny00MjlkLWJhNGMtNGRlY2QxYmIz NDJiMB4XDTI2MDQyMzA0NTUwMFoXDTI2MDcyMjA0NTUwMFowLzEtMCsGA1UEAxMk MWUwNDRkYTgtZWM4ZS00OThmLWEwMWUtNjJlOWEzNzA5MDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp35To5nxeHNmfuk5kU8b2luFycf23K7gTuM 8rc8eannUMdimWw2QGKvkTpEc8S/RaqB/xbqipW2Shu5G0Cky37Joqmy5kjFQCnU uifJs6DxqNG3pMsOvL3vP3UhYml5YLfPLu0HjsVf0+wk0VzdDY27L40JOTwSdL9b o+pk9bFRmO3XVxMbn344jkWlV0EG7CaYeR9LV0/v64oJ6jNaSdejVe7Td1uha6PG tJyKtMr1fJzFx3z0MHPpDC/WLLZbZ/V+ozTfWQ/VenbEfUKDxBr6738rsO8t1/uL ZZF+JFhp7EiAfnHQjWmEqJtH3pDMA6uynt2uYNVNElCIjuA63wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDVASIrrLUkWeP40nnBiEtqLFsA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NDFm YmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVjZDFiYjM0MmIvNTY0MjJlMjktY2FiMy0z OWFiLWFjNmEtOGJmMTkwOWVlNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjQxZmJiZmQtNzg3Ny00MjlkLWJh NGMtNGRlY2QxYmIzNDJiLzY0MWZiYmZkLTc4NzctNDI5ZC1iYTRjLTRkZWNkMWJi MzQyYi5jcmwwHwYDVR0jBBgwFoAU62E/63Le9DOhIkX5xtM0S+mkc/cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NDFmYmJmZC03ODc3LTQyOWQtYmE0Yy00ZGVj ZDFiYjM0MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQqIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjnb8Z3FAGwTTjL4u65IAY+kvvz/E5BlAZumcYmeUByoVrRyCziaEl L0OFa/FM0SlORdk2+QpBhjoAD5hQuk5uCPY1DS1MT9u4aXlFFIIBYHVhRuwfWYuv oj/s8Yar7ZBtCg40N0ii3Yl/DWFSlS4iTxrUU4aqqlQ0Uc5oYjW+Lzk/0wD9u6FX KeTN/x/IPrc4yJqzanz5NZufdarhKMYhzeCfXDh2DySqwvOyDGXOFOuAELZ6xt66 XEqndyN0HnjAhCFIUNx7s8+mrvkUxuoe3unq5XwzwtEekrZxAX84nUxZ9zNZEw/P Gg7FLdnG05D2mxK8l/LklAIhGeg81hH9 -----END CERTIFICATE-----Generated at Mon Apr 27 22:38:57 2026 by rpki-client