$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa File: d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa (raw, json) Hash identifier: 01UTrIrhA7rJ2zpBc+za+82QKLFcxCKNB0mwLJ8fyf8= Subject key identifier: 3F:2F:FE:D5:B5:92:2B:B5:97:BF:96:D0:82:7E:6D:1B:10:47:5F:8A Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584DA8157DEBC3D1BF2BD4914880 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 20253 IP address blocks: 2606:bc40:f15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7d:eb:c3:d1:bf:2b:d4:91:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=cfa68bd2-fe5c-4a68-96b0-48e296ac8a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:84:bf:c7:ad:9f:5e:d8:69:b7:f4:32:44: f0:d6:56:12:ea:26:1e:9f:a8:10:e3:34:88:c9:de: 78:f9:e1:0d:8a:99:af:5a:a6:4b:05:ca:92:db:7b: c4:35:8a:d6:72:96:d7:76:0e:c7:22:90:46:10:ba: ea:0e:99:40:ca:ae:1d:70:6b:8a:4b:28:2d:02:a9: 60:bf:94:2d:d9:6a:09:fe:59:ac:67:18:e2:c1:e4: 9a:31:cd:db:25:9c:ee:49:c8:53:c9:08:f5:79:42: a4:6a:aa:e3:a6:4b:b9:dd:ca:62:57:d0:31:16:9b: 30:ec:44:d5:7f:09:59:5f:96:73:52:9a:ec:5e:d6: 16:b4:31:bd:31:48:71:e7:11:d0:5d:90:4f:08:be: 74:71:a9:bf:24:90:d1:f0:98:4b:b3:76:70:8f:cc: 68:36:de:b3:83:23:b6:58:b4:57:f0:00:da:17:27: 00:45:80:de:16:37:21:5e:6a:75:b7:c2:eb:59:f2: 01:16:75:5b:d4:2f:04:25:ea:55:ab:21:8f:de:fd: e2:49:63:d8:34:2b:80:45:52:a6:0e:e5:7b:78:37: 0e:96:92:85:0c:3c:df:b1:22:e6:97:e9:89:00:a0: c9:c0:a2:39:cc:80:0b:84:16:d8:be:2c:8f:07:88: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:FE:D5:B5:92:2B:B5:97:BF:96:D0:82:7E:6D:1B:10:47:5F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/d67807c8-cb52-3110-92e9-dfa4e3a57f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f15::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:41:18:03:66:48:d1:77:34:ca:9a:02:6e:97:3d:8c:a1:6f: 28:cb:76:d3:31:2c:39:b7:fb:52:9a:e7:e5:54:52:36:60:bf: de:fe:a4:70:63:3d:25:5e:44:16:be:b0:41:f9:ba:f7:db:33: 29:27:bb:2a:67:da:80:8c:db:d5:c3:1c:67:4f:89:c1:b6:69: 89:63:52:d8:98:68:5e:34:0f:a1:34:d6:20:4e:c6:77:93:53: 9e:07:7e:ed:ee:61:af:97:6c:e8:1f:89:ae:ec:93:23:35:51: 14:e1:24:24:c0:78:1b:94:a4:9f:8e:40:12:5b:9b:6c:22:3c: c6:a3:71:45:ea:32:b4:e1:17:40:e3:45:d7:bd:51:14:65:71: ce:60:5c:d1:81:58:9f:3d:9b:fa:26:20:69:bf:39:16:ba:c6: 89:c9:81:92:7f:0f:84:9d:0a:ab:85:39:0f:6f:35:13:74:55: 11:f7:9c:99:9d:ab:37:13:10:f4:42:5c:9d:6c:19:90:4e:c4: f3:e6:5e:e0:6e:c9:da:f2:7c:37:0d:4c:db:92:51:2c:4f:ea: 76:5b:fd:64:dc:7c:90:80:4b:80:8f:b7:d5:d0:6c:7e:ec:ed: 78:9a:8f:41:7e:bf:f2:af:66:d2:f2:03:09:8b:49:56:4e:0c: 7d:e1:63:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oFX3rw9G/K9SRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk Y2ZhNjhiZDItZmU1Yy00YTY4LTk2YjAtNDhlMjk2YWM4YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkuEv8etn17Yabf0MkTw1lYS6iYen6gQ4zSI yd54+eENipmvWqZLBcqS23vENYrWcpbXdg7HIpBGELrqDplAyq4dcGuKSygtAqlg v5Qt2WoJ/lmsZxjiweSaMc3bJZzuSchTyQj1eUKkaqrjpku53cpiV9AxFpsw7ETV fwlZX5ZzUprsXtYWtDG9MUhx5xHQXZBPCL50cam/JJDR8JhLs3Zwj8xoNt6zgyO2 WLRX8ADaFycARYDeFjchXmp1t8LrWfIBFnVb1C8EJepVqyGP3v3iSWPYNCuARVKm DuV7eDcOlpKFDDzfsSLml+mJAKDJwKI5zIALhBbYviyPB4i5dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8v/tW1kiu1l7+W0IJ+bRsQR1+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZDY3ODA3YzgtY2I1Mi0z MTEwLTkyZTktZGZhNGUzYTU3ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8V MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxBGANmSNF3NMqaAm6XPYyhbyjLdtMxLDm3+1Ka5+VUUjZgv97+ pHBjPSVeRBa+sEH5uvfbMyknuypn2oCM29XDHGdPicG2aYljUtiYaF40D6E01iBO xneTU54Hfu3uYa+XbOgfia7skyM1URThJCTAeBuUpJ+OQBJbm2wiPMajcUXqMrTh F0DjRde9URRlcc5gXNGBWJ89m/omIGm/ORa6xonJgZJ/D4SdCquFOQ9vNRN0VRH3 nJmdqzcTEPRCXJ1sGZBOxPPmXuBuydryfDcNTNuSUSxP6nZb/WTcfJCAS4CPt9XQ bH7s7Xiaj0F+v/KvZtLyAwmLSVZODH3hY6g= -----END CERTIFICATE-----Generated at Fri May 1 17:01:57 2026 by rpki-client