$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa File: 289733c9-8d24-3a26-be24-969a85591062.roa (raw, json) Hash identifier: PjLqaJlv9Jg5A+0DAOLTBeSnjBVZhvlfJJitwefkD9M= Subject key identifier: D1:F9:AC:9B:22:F9:04:C1:59:4C:38:7C:6D:4D:1C:B6:88:E9:86:0A Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584DAAE033B30FE8C81EFFE2BF80 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 393885 IP address blocks: 2604:4a00:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:33:b3:0f:e8:c8:1e:ff:e2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=415ea811-0bd1-4a20-bcd5-343a771ab749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:ba:e1:0d:54:b6:34:a4:eb:b9:d7:9a:46: 8a:6f:29:fe:b7:db:1c:a3:af:c3:d1:1a:6e:8f:97: e5:a2:c2:b0:3c:c3:f3:e0:e2:f5:ed:9f:71:e8:e1: 53:a4:a5:f8:0f:99:29:d1:e9:b0:38:3a:fd:42:e3: 34:4f:69:4f:c0:58:6e:a2:1a:7c:e5:d1:8a:bc:58: 38:c4:10:4e:61:d8:b1:01:f0:e6:85:23:4b:bf:cb: 31:54:e8:45:8e:04:51:f8:56:44:cf:3c:37:91:78: 9a:52:50:60:01:8b:45:1a:68:95:21:03:ac:22:bf: 5a:cc:45:4c:30:23:32:91:5e:59:29:70:ad:cb:4a: c4:7e:4a:b3:47:e8:6d:3c:c0:4c:09:0b:1d:fb:1d: 2d:31:98:70:3c:20:1c:2e:11:d8:16:1a:02:d3:fe: 76:3b:a6:1a:dd:2e:34:a7:be:81:ad:46:db:8e:67: 58:52:94:18:4a:3f:9b:ae:9d:75:a0:47:db:4c:90: fd:73:cc:0f:24:73:ef:83:34:5a:eb:c2:22:d9:d8: c9:67:79:61:a1:84:a2:74:fc:a0:9b:12:70:41:18: 6e:ca:4f:da:88:6a:b9:bf:04:24:11:3a:58:d6:aa: 02:ff:eb:0c:92:95:76:8d:36:4b:23:45:08:62:d4: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F9:AC:9B:22:F9:04:C1:59:4C:38:7C:6D:4D:1C:B6:88:E9:86:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:d000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2a:5f:48:b7:9c:1c:6b:41:43:31:b7:75:b4:1b:80:58:8e: 4c:13:0d:79:d8:1a:3e:2d:2d:9c:24:9a:95:07:02:76:47:6a: 42:b7:31:55:20:2f:84:c9:23:56:7a:40:73:ae:9d:b3:0b:09: 7c:61:2a:28:d2:40:2c:9f:6f:cc:9f:b6:5e:59:fa:de:7d:c5: fe:52:72:33:2d:62:32:97:39:c6:f1:08:95:32:f7:57:71:0a: b5:cd:1d:a3:3d:39:1e:f8:ef:da:21:a5:f0:96:53:e6:5d:a4: 27:cd:36:97:8a:12:f3:42:c6:c7:72:f5:ff:73:de:a8:59:e6: bf:5f:cf:33:52:b8:af:b4:31:3e:fb:39:20:63:80:6c:14:ad: 2f:fc:1d:78:ce:4e:94:7e:02:7d:04:44:c0:4a:33:fa:04:88: 70:d0:b1:10:00:5e:9a:e5:a6:8a:d1:59:6d:54:a3:c9:e1:61: ac:34:01:d1:40:dd:92:13:1b:99:42:dc:97:a5:e7:da:f1:81: 7b:ec:d9:60:66:7f:bf:77:7c:07:d6:d0:0f:d8:b5:ff:44:9b: d1:05:8c:f1:58:17:48:4e:7b:ad:ca:65:11:e4:06:a4:ca:b8: 4c:6b:8d:88:a4:69:0c:82:6c:0d:c0:6f:1e:e5:21:49:c6:81: 75:16:f1:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2q4DOzD+jIHv/iv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NDE1ZWE4MTEtMGJkMS00YTIwLWJjZDUtMzQzYTc3MWFiNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DW64Q1UtjSk67nXmkaKbyn+t9sco6/D0Rpu j5flosKwPMPz4OL17Z9x6OFTpKX4D5kp0emwODr9QuM0T2lPwFhuohp85dGKvFg4 xBBOYdixAfDmhSNLv8sxVOhFjgRR+FZEzzw3kXiaUlBgAYtFGmiVIQOsIr9azEVM MCMykV5ZKXCty0rEfkqzR+htPMBMCQsd+x0tMZhwPCAcLhHYFhoC0/52O6Ya3S40 p76BrUbbjmdYUpQYSj+brp11oEfbTJD9c8wPJHPvgzRa68Ii2djJZ3lhoYSidPyg mxJwQRhuyk/aiGq5vwQkETpY1qoC/+sMkpV2jTZLI0UIYtT6+QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNH5rJsi+QTBWUw4fG1NHLaI6YYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMjg5NzMzYzktOGQyNC0z YTI2LWJlMjQtOTY5YTg1NTkxMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKANAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEASypfSLecHGtBQzG3dbQbgFiOTBMNedgaPi0tnCSalQcCdkdqQrcx VSAvhMkjVnpAc66dswsJfGEqKNJALJ9vzJ+2Xln63n3F/lJyMy1iMpc5xvEIlTL3 V3EKtc0doz05Hvjv2iGl8JZT5l2kJ802l4oS80LGx3L1/3PeqFnmv1/PM1K4r7Qx Pvs5IGOAbBStL/wdeM5OlH4CfQREwEoz+gSIcNCxEABemuWmitFZbVSjyeFhrDQB 0UDdkhMbmULcl6Xn2vGBe+zZYGZ/v3d8B9bQD9i1/0Sb0QWM8VgXSE57rcplEeQG pMq4TGuNiKRpDIJsDcBvHuUhScaBdRbxEA== -----END CERTIFICATE-----Generated at Fri May 1 16:48:14 2026 by rpki-client