$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa File: ffce5557-acd7-3635-8203-19ad10e6eb7c.roa (raw, json) Hash identifier: gOEPlb+7QkZXSk4PTj6o8slwPmsGmt9MP09GtVouE3I= Subject key identifier: C6:7E:B3:4F:9A:EE:2B:CB:9E:DE:48:B8:C6:BC:99:A9:FE:D0:1F:BE Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584DAAE0331AB28892F90CB3A7F0 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 393885 IP address blocks: 2604:4a00:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:33:1a:b2:88:92:f9:0c:b3:a7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=21924c40-3935-4f28-b9da-16ddc0ff1dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:e6:ca:3c:96:df:dd:dd:05:f1:a0:fa:ea: c6:54:a1:ac:f9:32:75:7c:a5:fe:fe:41:75:08:5b: f0:9f:61:09:15:7d:f2:25:3b:62:98:36:b2:08:7b: 39:6e:90:9b:70:aa:0b:ae:92:60:7e:d0:85:23:03: b6:6d:bd:73:ed:e3:c2:e2:33:c8:90:61:52:0b:58: b5:cc:5b:d5:9c:9b:51:49:67:81:49:ba:62:7e:9a: 23:74:a0:78:6e:13:2a:6c:4e:72:6b:e9:22:f5:80: ec:62:7f:dd:9b:9a:2b:f1:8a:67:37:b8:87:8d:20: d8:a1:df:80:1b:1f:2c:e4:db:2d:92:c8:85:9a:1f: a6:e5:5f:26:0a:ad:c4:88:f5:91:a4:c1:ef:cc:1b: 67:d1:83:3f:7d:11:35:e9:e5:57:1c:f3:68:95:4a: 1a:21:8e:61:14:07:d3:cc:b8:8f:ff:b6:db:d9:d7: 57:04:04:0f:16:c4:b7:84:3d:c0:49:00:e3:ce:00: b1:91:ec:6e:f0:0a:c1:5e:1a:03:3f:90:39:c2:61: 8d:6e:8b:67:74:6b:26:1c:eb:53:29:a6:71:f0:ee: 3f:61:12:1d:94:94:48:25:18:25:0b:51:7e:3d:e3: 41:56:56:4f:da:80:60:78:e2:e3:2c:e1:ce:d2:09: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:B3:4F:9A:EE:2B:CB:9E:DE:48:B8:C6:BC:99:A9:FE:D0:1F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/ffce5557-acd7-3635-8203-19ad10e6eb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:69:6f:4d:30:e6:c4:39:a5:ce:f3:fd:49:d8:a5:04:6f:11: 2c:fb:85:d4:4b:2a:6f:19:06:0c:14:e2:9b:e9:9f:f9:a1:67: 54:31:21:34:c7:58:45:89:a6:00:1a:d3:da:f9:9a:73:51:e5: 20:28:b6:b7:6f:7b:af:f7:e7:ff:a8:ab:9b:3c:56:4e:6a:e6: bc:17:d3:88:20:40:ba:80:cf:88:d4:f3:c7:e1:98:81:f3:d0: 6f:f6:68:3e:f6:7e:ee:e7:d2:b9:4e:71:71:d2:c1:08:cd:09: 20:85:3e:4d:e1:f5:3e:5c:59:11:67:0b:4b:ff:1f:01:79:e3: c6:56:80:80:29:1e:1b:62:23:53:56:be:04:64:63:25:b8:41: 99:70:49:e7:f3:ae:e0:ac:56:62:6d:4b:47:01:eb:f3:10:c2: 88:11:59:05:55:99:d5:61:04:e5:1b:33:25:5c:ba:ee:82:13: 14:c3:c0:58:12:b9:51:82:c2:03:f2:b5:55:c5:a8:08:86:59: 0e:06:cd:34:c7:9c:f1:c2:2a:b5:34:9f:dd:7e:c0:e3:0a:bb: 68:3e:80:85:c3:17:18:d6:3d:31:96:ad:1f:f1:82:31:a1:96: de:da:df:a2:4d:d2:9d:03:a7:47:0d:26:cf:ed:ca:52:68:bd: a5:d8:f0:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2q4DMasoiS+Qyzp/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MjE5MjRjNDAtMzkzNS00ZjI4LWI5ZGEtMTZkZGMwZmYxZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitbmyjyW393dBfGg+urGVKGs+TJ1fKX+/kF1 CFvwn2EJFX3yJTtimDayCHs5bpCbcKoLrpJgftCFIwO2bb1z7ePC4jPIkGFSC1i1 zFvVnJtRSWeBSbpifpojdKB4bhMqbE5ya+ki9YDsYn/dm5or8YpnN7iHjSDYod+A Gx8s5NstksiFmh+m5V8mCq3EiPWRpMHvzBtn0YM/fRE16eVXHPNolUoaIY5hFAfT zLiP/7bb2ddXBAQPFsS3hD3ASQDjzgCxkexu8ArBXhoDP5A5wmGNbotndGsmHOtT KaZx8O4/YRIdlJRIJRglC1F+PeNBVlZP2oBgeOLjLOHO0gnhdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMZ+s0+a7ivLnt5IuMa8man+0B++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvZmZjZTU1NTctYWNkNy0z NjM1LTgyMDMtMTlhZDEwZTZlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKABAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFmlvTTDmxDmlzvP9SdilBG8RLPuF1EsqbxkGDBTim+mf+aFnVDEh NMdYRYmmABrT2vmac1HlICi2t297r/fn/6irmzxWTmrmvBfTiCBAuoDPiNTzx+GY gfPQb/ZoPvZ+7ufSuU5xcdLBCM0JIIU+TeH1PlxZEWcLS/8fAXnjxlaAgCkeG2Ij U1a+BGRjJbhBmXBJ5/Ou4KxWYm1LRwHr8xDCiBFZBVWZ1WEE5RszJVy67oITFMPA WBK5UYLCA/K1VcWoCIZZDgbNNMec8cIqtTSf3X7A4wq7aD6AhcMXGNY9MZatH/GC MaGW3trfok3SnQOnRw0mz+3KUmi9pdjwIw== -----END CERTIFICATE-----Generated at Fri May 1 16:47:16 2026 by rpki-client