$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/ec8a5bbc-be28-3f31-b98c-fa6007e5a453.roa File: ec8a5bbc-be28-3f31-b98c-fa6007e5a453.roa (raw, json) Hash identifier: qsP9lSK16x7abSNZpM9TWBy7uRtN8dIWPJwOdQHZ9TI= Subject key identifier: AA:C2:BD:9F:5B:CC:BB:5B:A9:3E:B4:0F:D8:31:E4:10:5C:97:12:59 Certificate issuer: /CN=d0468ae1-e635-48f2-8764-2794b700581d Certificate serial: 010D0C9F4328584DAB746E46906DA8CBB34AD300 Authority key identifier: F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/ec8a5bbc-be28-3f31-b98c-fa6007e5a453.roa Signing time: Wed 29 Apr 2026 17:59:24 +0000 ROA not before: Wed 29 Apr 2026 17:59:24 +0000 ROA not after: Tue 28 Jul 2026 17:59:24 +0000 asID: 18685 IP address blocks: 2620:df:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:74:6e:46:90:6d:a8:cb:b3:4a:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0468ae1-e635-48f2-8764-2794b700581d Validity Not Before: Apr 29 17:59:24 2026 GMT Not After : Jul 28 17:59:24 2026 GMT Subject: CN=df44d98c-162d-4728-8ec7-944b4a2b2f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:01:73:ae:c1:4f:cc:ee:f2:75:af:5c:d5:05: d2:4d:dd:a0:61:af:83:d9:db:2a:e1:c4:4d:86:ff: 45:07:c6:34:76:8c:89:f8:41:8d:b7:b4:07:bd:f9: f6:67:23:a0:86:55:56:f8:17:80:35:45:cf:70:e3: 02:13:8c:60:b9:bf:06:6e:cf:1f:9f:67:5d:29:7c: 4d:8a:81:c9:e1:08:7e:38:d7:fa:e3:93:59:52:75: eb:5d:ad:ad:61:c6:78:85:4d:63:63:de:1b:09:e1: c3:8a:a7:72:9b:8f:c6:67:79:e2:1b:07:ef:8f:8b: ee:50:08:69:cf:87:f7:24:5d:82:cd:1c:2f:d1:3d: 6a:c1:df:ba:ed:30:29:e7:5a:80:ee:03:cf:47:27: 26:cc:3c:eb:99:ba:a3:56:96:2c:ac:ba:c1:66:3d: 64:ce:b2:cc:82:21:7e:45:30:5f:43:3c:0c:c0:28: 4b:b8:78:a8:a1:51:57:22:e2:27:7c:72:81:0f:15: 2f:2d:2f:44:26:19:5e:e8:4c:24:ca:53:2a:b6:e3: d1:b8:1c:1f:75:65:f5:eb:c9:86:fa:70:4b:3d:3d: c3:83:00:9c:67:96:4d:90:da:e6:0e:18:54:04:34: 71:e9:e7:a7:9d:ff:60:c7:93:bf:e7:8e:fb:2c:ce: c7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:BD:9F:5B:CC:BB:5B:A9:3E:B4:0F:D8:31:E4:10:5C:97:12:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/ec8a5bbc-be28-3f31-b98c-fa6007e5a453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.crl X509v3 Authority Key Identifier: keyid:F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer sbgp-ipAddrBlock: critical IPv6: 2620:df:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:09:ab:a4:8a:07:68:ec:a5:6e:a6:65:69:9c:a0:c6:e0:dd: 38:9a:40:50:26:8c:d8:1b:f4:28:a3:58:18:34:bc:36:5b:6d: 6e:af:fd:7f:b4:d2:71:4b:45:96:28:1a:ad:a2:b9:a4:f1:3b: 53:58:10:5f:5c:31:9f:ec:ec:9e:d5:f4:96:bc:c3:54:aa:95: f1:6f:96:d1:11:b7:3d:5c:70:ff:a4:ac:0e:64:eb:74:53:08: 2c:02:69:ba:19:ca:ad:e6:c6:cd:43:1a:78:d3:66:93:3a:59: 38:bf:f0:61:18:e9:66:6b:75:48:bb:7b:b2:0c:ab:38:51:c3: 31:84:a3:4c:8d:40:68:39:36:19:96:7d:eb:88:e2:c2:2d:c8: e1:f4:7e:f3:e7:45:c6:06:6d:d6:64:ef:e9:9d:23:78:6a:9a: 15:89:c6:8f:e0:3d:fd:03:dc:0f:4e:87:64:85:f6:db:d3:f0: 5c:3d:03:c6:0c:a7:99:6c:c4:d3:ce:c6:94:7f:29:1f:ee:47: a1:64:51:6a:ee:5a:f5:c5:e9:81:01:87:07:4c:64:cf:e2:c0: 65:1d:9d:d3:7e:d1:f8:23:2b:d7:3b:c0:66:a5:1d:e6:a2:2b: c3:97:71:7d:9f:79:75:a6:25:a4:cf:4c:f8:4f:57:4e:b4:e8: 28:99:a2:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2rdG5GkG2oy7NK0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA0NjhhZTEtZTYzNS00OGYyLTg3NjQtMjc5NGI3MDA1 ODFkMB4XDTI2MDQyOTE3NTkyNFoXDTI2MDcyODE3NTkyNFowLzEtMCsGA1UEAxMk ZGY0NGQ5OGMtMTYyZC00NzI4LThlYzctOTQ0YjRhMmIyZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAFzrsFPzO7yda9c1QXSTd2gYa+D2dsq4cRN hv9FB8Y0doyJ+EGNt7QHvfn2ZyOghlVW+BeANUXPcOMCE4xgub8Gbs8fn2ddKXxN ioHJ4Qh+ONf645NZUnXrXa2tYcZ4hU1jY94bCeHDiqdym4/GZ3niGwfvj4vuUAhp z4f3JF2CzRwv0T1qwd+67TAp51qA7gPPRycmzDzrmbqjVpYsrLrBZj1kzrLMgiF+ RTBfQzwMwChLuHiooVFXIuInfHKBDxUvLS9EJhle6EwkylMqtuPRuBwfdWX168mG +nBLPT3DgwCcZ5ZNkNrmDhhUBDRx6eennf9gx5O/5477LM7H/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKrCvZ9bzLtbqT60D9gx5BBclxJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kMDQ2 OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0YjcwMDU4MWQvZWM4YTViYmMtYmUyOC0z ZjMxLWI5OGMtZmE2MDA3ZTVhNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDA0NjhhZTEtZTYzNS00OGYyLTg3 NjQtMjc5NGI3MDA1ODFkL2QwNDY4YWUxLWU2MzUtNDhmMi04NzY0LTI3OTRiNzAw NTgxZC5jcmwwHwYDVR0jBBgwFoAU8Z14961JW7jyNgC7tEVUT0MmftMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kMDQ2OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0 YjcwMDU4MWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA3+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0Jq6SKB2jspW6mZWmcoMbg3TiaQFAmjNgb9CijWBg0vDZbbW6v /X+00nFLRZYoGq2iuaTxO1NYEF9cMZ/s7J7V9Ja8w1SqlfFvltERtz1ccP+krA5k 63RTCCwCaboZyq3mxs1DGnjTZpM6WTi/8GEY6WZrdUi7e7IMqzhRwzGEo0yNQGg5 NhmWfeuI4sItyOH0fvPnRcYGbdZk7+mdI3hqmhWJxo/gPf0D3A9Oh2SF9tvT8Fw9 A8YMp5lsxNPOxpR/KR/uR6FkUWruWvXF6YEBhwdMZM/iwGUdndN+0fgjK9c7wGal HeaiK8OXcX2feXWmJaTPTPhPV0606CiZovE= -----END CERTIFICATE-----Generated at Thu Apr 30 12:42:09 2026 by rpki-client