$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa File: c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa (raw, json) Hash identifier: ShxyXyxn8Ey78u35IgDA0RA7rnlwKk0z5d3B1IERvYI= Subject key identifier: B0:A0:B3:24:0B:47:C8:80:3C:E1:5A:D8:B6:4B:4F:7A:C2:52:15:6D Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584D91C016731720EBBBFDCF1E40 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 399575 IP address blocks: 2606:67c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:16:73:17:20:eb:bb:fd:cf:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=cd4801b2-9764-4263-916f-1a99645fd4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:ec:1f:de:53:33:53:31:a3:df:53:1e:b5: fd:ef:68:24:36:89:29:31:cc:72:89:ad:77:ea:d2: 3a:99:87:0c:a6:cd:5f:f9:ae:64:7f:fe:14:33:ab: 24:98:f0:b5:21:a8:f9:6f:5e:5b:1c:94:0a:8b:67: c4:e7:0c:13:7a:89:99:ac:4f:0b:78:6a:f5:6c:45: 94:f2:78:cf:24:0a:2f:38:cd:8a:38:eb:4d:55:1c: c0:90:4a:66:c3:84:3a:b0:00:f1:f1:0b:3f:90:90: 9d:dc:d1:68:fa:92:f4:97:ad:22:c2:c0:4b:a0:12: 56:23:1c:7a:59:92:24:c6:c4:5e:10:44:c9:36:fc: 8b:16:12:fb:60:b8:da:49:0f:ab:3c:d6:af:41:2e: 31:f1:28:b1:ff:b9:89:7d:78:06:e8:7a:59:ce:3f: d0:79:76:07:b7:6a:54:92:b6:91:d6:3f:44:c9:80: 76:b3:4c:77:9e:5c:7b:aa:5f:83:34:f5:4e:86:53: 7d:03:58:c3:c1:e5:b1:78:ad:6d:70:e4:0a:88:30: 7f:20:c4:d1:67:e7:a1:c7:8c:7d:bf:ba:03:92:a7: 05:e7:74:f0:d9:bc:8b:55:ef:af:90:c3:dd:6c:1d: 46:4a:d1:b4:31:1b:fa:49:21:9a:a5:96:3c:52:09: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:B3:24:0B:47:C8:80:3C:E1:5A:D8:B6:4B:4F:7A:C2:52:15:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/c1ba5f8b-a587-3aea-996d-c1d9594cec65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv6: 2606:67c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ea:26:1c:39:65:5f:0b:5d:89:b8:7b:53:d9:b6:ae:23:c9: b7:91:bb:02:b2:f3:a6:bd:73:16:8c:f9:8a:a0:d2:85:96:85: 01:b9:f2:da:06:90:32:e3:0e:0f:c3:54:f1:47:a7:52:ac:ba: fa:dc:b1:5a:5e:ad:c2:8b:30:d9:5c:05:43:ca:41:5a:3e:63: 3d:c8:30:d8:d6:90:e9:20:de:bb:bc:c3:18:f9:24:9b:41:9e: 56:07:c5:63:03:e5:ca:ce:e5:23:d1:46:6a:87:07:b6:90:5d: 12:fc:d3:f2:3e:9f:de:c8:09:58:29:7c:40:b8:1b:7e:21:9d: 69:31:59:1c:d9:58:27:15:b1:41:26:01:0f:7e:5f:01:83:cd: c5:78:5e:36:ec:84:c5:8e:bb:f5:9b:57:11:3c:f6:4d:af:86: eb:34:d2:f7:57:ef:6a:97:51:32:eb:5d:c2:06:ac:8d:b6:29: cc:c3:79:ac:d9:42:a3:e8:17:40:df:a0:2f:47:93:61:9b:c8: 89:62:b5:41:54:26:76:e2:15:6b:62:f2:8c:34:b6:1e:d6:78: a1:6c:c7:36:d4:70:24:a1:22:c3:b0:d7:48:f5:92:99:23:43: 43:36:d1:86:6e:33:3f:71:af:59:9b:1a:ce:e9:e7:fd:ee:b8: 22:5c:ef:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwBZzFyDru/3PHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk Y2Q0ODAxYjItOTc2NC00MjYzLTkxNmYtMWE5OTY0NWZkNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJbsH95TM1Mxo99THrX972gkNokpMcxyia13 6tI6mYcMps1f+a5kf/4UM6skmPC1Iaj5b15bHJQKi2fE5wwTeomZrE8LeGr1bEWU 8njPJAovOM2KOOtNVRzAkEpmw4Q6sADx8Qs/kJCd3NFo+pL0l60iwsBLoBJWIxx6 WZIkxsReEETJNvyLFhL7YLjaSQ+rPNavQS4x8Six/7mJfXgG6HpZzj/QeXYHt2pU kraR1j9EyYB2s0x3nlx7ql+DNPVOhlN9A1jDweWxeK1tcOQKiDB/IMTRZ+ehx4x9 v7oDkqcF53Tw2byLVe+vkMPdbB1GStG0MRv6SSGapZY8UgkecQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLCgsyQLR8iAPOFa2LZLT3rCUhVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYzFiYTVmOGItYTU4Ny0z YWVhLTk5NmQtYzFkOTU5NGNlYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAT6iYcOWVfC12JuHtT2bauI8m3kbsCsvOmvXMWjPmKoNKFloUBufLa BpAy4w4Pw1TxR6dSrLr63LFaXq3CizDZXAVDykFaPmM9yDDY1pDpIN67vMMY+SSb QZ5WB8VjA+XKzuUj0UZqhwe2kF0S/NPyPp/eyAlYKXxAuBt+IZ1pMVkc2VgnFbFB JgEPfl8Bg83FeF427ITFjrv1m1cRPPZNr4brNNL3V+9ql1Ey613CBqyNtinMw3ms 2UKj6BdA36AvR5Nhm8iJYrVBVCZ24hVrYvKMNLYe1nihbMc21HAkoSLDsNdI9ZKZ I0NDNtGGbjM/ca9ZmxrO6ef97rgiXO+G -----END CERTIFICATE-----Generated at Wed Apr 29 15:30:53 2026 by rpki-client