$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa File: 131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa (raw, json) Hash identifier: 66AvoFzIh2/tDarU6lRFHlmCEA65fkncsI9vA2htgik= Subject key identifier: BF:E6:CA:9D:28:BD:8F:B6:60:9F:C9:B0:7D:34:DD:07:44:60:44:2B Certificate issuer: /CN=387b8a97-889c-48cd-b72e-4329cc21745b Certificate serial: 010D0C9F4328584D9B85579CE8A5ECD7E5FF3780 Authority key identifier: B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 396530 IP address blocks: 2607:a6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:57:9c:e8:a5:ec:d7:e5:ff:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387b8a97-889c-48cd-b72e-4329cc21745b Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=c3d63b67-5f07-4779-91d5-a5e658c46aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:ed:9b:73:10:4e:18:ea:8b:a4:c0:49:55: e7:c8:b5:c8:32:c9:a5:96:92:0b:74:23:96:64:ae: 61:ef:83:46:36:23:a0:e0:78:66:2d:c8:d2:7b:a7: 65:b9:30:24:68:89:b7:a3:5e:f1:28:23:23:15:53: 22:c4:3d:dd:ba:09:49:d5:b8:c6:40:85:0e:45:14: 11:40:0d:75:1c:47:be:43:00:a1:dc:ce:28:21:37: 52:cd:3e:8c:11:72:36:c0:56:64:14:ad:10:31:41: b1:73:34:36:f8:32:d9:7c:7c:1e:5f:7d:45:c2:93: 58:ac:90:88:01:95:9f:01:61:1a:dc:54:8c:5f:d3: c3:51:8d:bd:e4:ba:e6:78:01:93:c1:33:46:f0:a0: c9:34:ae:78:dd:bb:09:78:ca:35:03:a7:ca:07:49: 22:20:d2:3e:fd:b9:47:fa:87:90:80:94:f0:fe:36: a9:bc:3a:db:55:26:9c:6d:ae:14:1c:27:8b:08:63: 22:93:49:8d:29:05:c6:23:0e:1c:bc:6c:08:ac:27: df:07:c6:0b:e6:8d:81:9e:a8:e3:9f:ba:ed:7c:1d: cc:22:ef:f0:65:f5:18:0b:c9:55:86:32:ae:98:c9: 3c:71:74:f1:4f:dc:b6:81:f0:ec:18:f7:c3:ba:ca: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E6:CA:9D:28:BD:8F:B6:60:9F:C9:B0:7D:34:DD:07:44:60:44:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/131ef14c-4202-31aa-a2b5-69b4a64a3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b/387b8a97-889c-48cd-b72e-4329cc21745b.crl X509v3 Authority Key Identifier: keyid:B1:70:09:21:ED:33:25:24:3C:22:B1:A2:3C:B0:84:F7:2E:7C:54:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/387b8a97-889c-48cd-b72e-4329cc21745b.cer sbgp-ipAddrBlock: critical IPv6: 2607:a6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c0:78:49:d6:ef:e7:13:35:b7:c5:b7:41:60:e6:07:50:cc: 6f:62:24:ec:b7:62:98:df:08:71:44:85:6a:48:33:95:e8:0c: 29:77:8c:6e:bf:af:26:06:e2:7a:4e:d4:03:dc:55:3e:a8:7d: e7:28:e5:2b:40:56:c0:01:22:de:0c:64:52:ac:07:45:06:de: 8f:e5:86:88:4b:79:3c:ad:0e:4e:c9:f9:c0:77:36:70:00:db: 39:e0:d3:e4:a8:74:f8:33:e4:1b:35:54:9d:c9:26:2b:b1:86: 45:db:ca:d0:af:13:50:92:40:01:7e:cb:19:5f:b3:bc:81:10: e3:a5:13:09:2f:6e:79:a0:26:4d:a3:a1:f9:4e:5e:68:45:55: 19:c2:76:9a:4d:88:eb:b1:c4:e4:0e:ab:78:da:bb:b0:0f:dd: a6:d8:b7:70:8c:1b:9a:89:30:f5:d9:8f:4a:33:c9:80:53:53: fd:9a:db:3f:54:94:7a:3a:9c:f2:f5:82:da:ea:ed:ba:2d:00: 58:4f:34:f8:e5:a8:14:6c:3e:ff:1e:72:37:d8:be:e3:10:78: c9:9d:ad:0d:e5:01:ca:97:32:a9:1b:1b:cb:8c:ae:dd:2f:68: 55:32:3d:3f:34:b3:05:59:67:1e:29:74:58:54:bd:e2:cb:37: 88:2c:22:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2bhVec6KXs1+X/N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg3YjhhOTctODg5Yy00OGNkLWI3MmUtNDMyOWNjMjE3 NDViMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk YzNkNjNiNjctNWYwNy00Nzc5LTkxZDUtYTVlNjU4YzQ2YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPtm3MQThjqi6TASVXnyLXIMsmllpILdCOW ZK5h74NGNiOg4HhmLcjSe6dluTAkaIm3o17xKCMjFVMixD3duglJ1bjGQIUORRQR QA11HEe+QwCh3M4oITdSzT6MEXI2wFZkFK0QMUGxczQ2+DLZfHweX31FwpNYrJCI AZWfAWEa3FSMX9PDUY295LrmeAGTwTNG8KDJNK543bsJeMo1A6fKB0kiINI+/blH +oeQgJTw/japvDrbVSacba4UHCeLCGMik0mNKQXGIw4cvGwIrCffB8YL5o2Bnqjj n7rtfB3MIu/wZfUYC8lVhjKumMk8cXTxT9y2gfDsGPfDusr0bQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL/myp0ovY+2YJ/JsH003QdEYEQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zODdi OGE5Ny04ODljLTQ4Y2QtYjcyZS00MzI5Y2MyMTc0NWIvMTMxZWYxNGMtNDIwMi0z MWFhLWEyYjUtNjliNGE2NGEzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzg3YjhhOTctODg5Yy00OGNkLWI3 MmUtNDMyOWNjMjE3NDViLzM4N2I4YTk3LTg4OWMtNDhjZC1iNzJlLTQzMjljYzIx NzQ1Yi5jcmwwHwYDVR0jBBgwFoAUsXAJIe0zJSQ8IrGiPLCE9y58VIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zODdiOGE5Ny04ODljLTQ4Y2QtYjcyZS00MzI5 Y2MyMTc0NWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgemwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAtwHhJ1u/nEzW3xbdBYOYHUMxvYiTst2KY3whxRIVqSDOV6Awpd4xu v68mBuJ6TtQD3FU+qH3nKOUrQFbAASLeDGRSrAdFBt6P5YaIS3k8rQ5OyfnAdzZw ANs54NPkqHT4M+QbNVSdySYrsYZF28rQrxNQkkABfssZX7O8gRDjpRMJL255oCZN o6H5Tl5oRVUZwnaaTYjrscTkDqt42ruwD92m2LdwjBuaiTD12Y9KM8mAU1P9mts/ VJR6Opzy9YLa6u26LQBYTzT45agUbD7/HnI32L7jEHjJna0N5QHKlzKpGxvLjK7d L2hVMj0/NLMFWWceKXRYVL3iyzeILCLV -----END CERTIFICATE-----Generated at Wed Apr 29 15:33:09 2026 by rpki-client