$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa File: cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json) Hash identifier: LfhiffMuVTmPcSMhGWk6ciTnRL0VQp5KGZmylHuSoxA= Subject key identifier: 84:EE:8A:77:36:76:53:FB:27:B5:71:65:D9:68:ED:6D:8D:14:AE:40 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584DAAE033CB72EF848C77CD3F80 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 393885 IP address blocks: 2604:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:33:cb:72:ef:84:8c:77:cd:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=ea8cedf5-47fb-4b6c-996d-eb2f0941387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:9b:61:0c:12:02:c0:d8:8b:1a:6e:e0:95: 4a:c2:3d:ac:dd:f8:8b:6e:49:8c:ba:e6:13:42:d2: 51:2b:c4:c8:1d:6f:ae:20:d9:39:1f:7c:ad:92:6d: 2e:30:59:98:30:cf:7e:2b:8d:ba:ff:01:5b:84:e8: 4e:28:db:65:0a:a0:01:3b:39:01:af:77:85:64:a4: 87:0b:b2:b2:81:9a:1f:37:a4:b3:a1:86:32:df:08: de:a8:51:50:a8:be:75:1c:1a:3a:ed:1e:fb:67:e0: d9:cf:69:61:ba:eb:3c:24:fb:86:7a:6e:1d:52:80: 63:86:45:44:52:a8:bf:6e:07:f5:3e:09:7f:9e:4d: 48:b9:84:e5:0e:3a:1e:bb:9b:32:b0:76:4b:b7:73: fb:c8:15:7f:d1:9d:32:cc:c9:35:e1:c9:02:e7:27: d4:57:e7:ee:29:6c:d9:98:a4:20:76:ca:8b:25:17: 0a:d7:ce:bd:40:2d:fb:ba:09:65:83:5c:d8:95:71: 7b:98:2a:ae:fc:44:8c:d2:79:fb:1b:c8:b5:1d:16: 54:67:2a:1d:d9:0f:a5:bb:6e:19:24:37:98:e1:85: d8:a7:4a:44:ea:21:80:66:3b:66:77:29:55:db:cd: 92:63:58:7b:00:89:f8:ba:22:c8:8b:ef:82:e9:69: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:8A:77:36:76:53:FB:27:B5:71:65:D9:68:ED:6D:8D:14:AE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:98:db:54:f6:e8:4a:9b:ff:09:8b:63:72:53:18:b1:18:07: c6:90:be:67:3e:1c:17:b5:a3:af:56:a8:7e:13:ca:1f:8e:55: ac:66:37:a1:38:23:f8:3f:38:5b:84:2c:74:8a:cb:c7:a6:40: cf:af:df:14:f3:7a:70:c1:bc:96:68:cf:ad:aa:70:d3:b5:5e: 07:b5:8f:de:9b:a3:47:f5:8e:a2:f8:92:8d:7f:8a:49:ef:a8: 60:e5:ad:66:0c:cf:dd:09:5d:d0:37:65:19:72:64:e1:17:09: 04:32:19:37:e4:73:75:f3:a6:f0:6c:34:5b:48:8b:bc:da:ff: 97:4b:d6:da:cd:bf:08:6a:a9:d7:ba:72:d4:e5:69:24:c8:26: 88:b9:9a:ae:39:89:a0:df:94:6d:3c:ef:8c:5d:99:4a:dc:7c: 70:92:34:1b:ee:90:3a:01:bb:a7:f3:92:29:45:93:f3:14:f9: 04:6f:8a:23:e8:8e:d7:da:81:32:cd:93:ce:26:46:c9:47:3a: 7b:f6:98:9b:5a:3e:22:17:4c:d2:ae:a2:87:f3:48:0c:12:17: c7:d1:f4:8f:e7:13:e2:18:3e:c8:fc:d2:00:c0:42:2a:f4:96: d4:62:79:4a:93:c1:5a:4d:bd:8d:d7:12:2f:11:c7:8c:0b:4b: c2:03:df:16 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2q4DPLcu+EjHfNP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZWE4Y2VkZjUtNDdmYi00YjZjLTk5NmQtZWIyZjA5NDEzODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzmbYQwSAsDYixpu4JVKwj2s3fiLbkmMuuYT QtJRK8TIHW+uINk5H3ytkm0uMFmYMM9+K426/wFbhOhOKNtlCqABOzkBr3eFZKSH C7KygZofN6SzoYYy3wjeqFFQqL51HBo67R77Z+DZz2lhuus8JPuGem4dUoBjhkVE Uqi/bgf1Pgl/nk1IuYTlDjoeu5sysHZLt3P7yBV/0Z0yzMk14ckC5yfUV+fuKWzZ mKQgdsqLJRcK1869QC37ugllg1zYlXF7mCqu/ESM0nn7G8i1HRZUZyod2Q+lu24Z JDeY4YXYp0pE6iGAZjtmdylV282SY1h7AIn4uiLIi++C6WnTjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFITuinc2dlP7J7VxZdlo7W2NFK5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvY2ZjMGFhMTMtMmRmOS0z OTUyLTg0OGEtMmMxZGY3ODc5MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA0pjbVPboSpv/CYtjclMYsRgHxpC+Zz4cF7Wjr1aofhPKH45VrGY3 oTgj+D84W4QsdIrLx6ZAz6/fFPN6cMG8lmjPrapw07VeB7WP3pujR/WOoviSjX+K Se+oYOWtZgzP3Qld0DdlGXJk4RcJBDIZN+RzdfOm8Gw0W0iLvNr/l0vW2s2/CGqp 17py1OVpJMgmiLmarjmJoN+UbTzvjF2ZStx8cJI0G+6QOgG7p/OSKUWT8xT5BG+K I+iO19qBMs2TziZGyUc6e/aYm1o+IhdM0q6ih/NIDBIXx9H0j+cT4hg+yPzSAMBC KvSW1GJ5SpPBWk29jdcSLxHHjAtLwgPfFg== -----END CERTIFICATE-----Generated at Fri May 1 16:45:44 2026 by rpki-client