$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa File: 553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json) Hash identifier: acrHwWbnZwGc8YKJ7CIjQqEXOvaP+hF+v6Z5DBDB2jo= Subject key identifier: DD:CC:D8:E4:8A:FC:29:51:FF:37:56:6F:B1:FA:09:B1:0F:DE:00:8B Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584D6AAA775FB0B0A3495E839080 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 3663 IP address blocks: 2604:aa00::/32 maxlen: 56 2607:f430::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:77:5f:b0:b0:a3:49:5e:83:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=8172f9b9-5498-4c8c-9d30-bfca68ee78f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f7:03:b5:2d:eb:c9:e6:8d:76:9e:f8:d4:7a: 60:ca:8e:c8:60:ed:57:31:7b:f3:30:16:52:86:c3: f2:49:03:26:88:8a:28:16:1a:54:ed:cc:f1:93:a0: db:86:4b:d6:e3:2d:a7:c1:72:ea:c5:c6:4f:c8:e5: 3c:22:b4:ea:db:f2:09:e2:b3:77:48:8c:98:e2:4c: 68:c3:ce:af:ac:73:7a:d9:e6:4b:ee:14:72:e9:dc: df:e2:56:c7:ac:8a:92:c7:e9:ab:cf:39:27:df:0e: 40:a0:83:82:35:07:61:6c:36:b8:86:96:5d:d4:b4: 77:84:b1:85:a8:dd:3f:71:62:85:6a:26:e5:89:2c: e7:65:04:b4:32:45:09:07:9b:9d:2b:f5:16:ad:e4: 24:fa:df:fe:2d:a1:98:90:c2:ad:00:eb:b8:a0:cb: 01:0e:0e:25:6f:31:e2:51:db:b0:41:50:1e:43:02: 69:cf:46:49:7e:9e:c4:58:2d:3a:6c:0b:00:8c:7c: f9:57:fe:25:24:ff:1a:6f:ef:eb:09:66:1b:21:cc: 55:33:28:6c:96:cd:a4:11:ea:c1:62:bb:5b:2a:5b: 85:aa:94:44:fb:89:a7:46:03:cd:61:97:a0:c9:01: 49:45:fb:3d:08:e8:c1:34:c7:e8:44:71:3d:d0:b7: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CC:D8:E4:8A:FC:29:51:FF:37:56:6F:B1:FA:09:B1:0F:DE:00:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 2607:f430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b4:92:45:7f:6d:45:54:ea:9f:1e:9b:98:83:c7:c7:a3:7b: 04:e7:7f:7f:c2:5e:0e:90:e2:1f:09:14:88:9c:96:13:42:2a: 2d:d6:27:5c:ab:f4:d3:8f:65:51:2e:35:b8:2f:31:60:af:b9: 3b:5f:90:bc:2b:eb:45:cd:df:c4:73:51:fc:0e:fe:3c:9f:01: 9c:7a:17:79:6c:24:92:7a:72:5c:52:14:5b:73:a9:7e:26:2a: a9:fb:bd:7a:71:ff:53:a1:02:5f:98:fc:70:7f:ff:a3:ee:8a: 11:04:14:16:ac:f2:af:f3:cf:66:3f:12:54:ef:5c:e8:73:ae: 7b:9f:26:bf:93:bc:66:f5:27:4f:3d:da:22:06:3d:d5:0e:dd: f5:47:59:c1:2d:63:95:2b:da:ff:c1:e6:e9:f6:06:7d:27:f6: 95:be:b1:3c:9f:1b:49:29:92:ff:98:e2:a7:9c:7c:e2:ea:46: 13:e8:26:8f:bd:3d:ba:77:be:c6:62:da:d1:71:b5:68:24:9c: de:e9:32:78:7f:f1:9a:7e:e8:fb:6b:0e:83:76:42:00:6c:32: ba:bf:7c:9e:d8:f5:83:d7:61:67:d1:35:e6:15:b3:26:1b:52: 12:97:90:a1:cc:12:0e:c7:e6:6b:f8:fa:e5:88:21:ba:c1:a6: 85:41:85:e0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1qqndfsLCjSV6DkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ODE3MmY5YjktNTQ5OC00YzhjLTlkMzAtYmZjYTY4ZWU3OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+vcDtS3ryeaNdp741Hpgyo7IYO1XMXvzMBZS hsPySQMmiIooFhpU7czxk6DbhkvW4y2nwXLqxcZPyOU8IrTq2/IJ4rN3SIyY4kxo w86vrHN62eZL7hRy6dzf4lbHrIqSx+mrzzkn3w5AoIOCNQdhbDa4hpZd1LR3hLGF qN0/cWKFaibliSznZQS0MkUJB5udK/UWreQk+t/+LaGYkMKtAOu4oMsBDg4lbzHi UduwQVAeQwJpz0ZJfp7EWC06bAsAjHz5V/4lJP8ab+/rCWYbIcxVMyhsls2kEerB YrtbKluFqpRE+4mnRgPNYZegyQFJRfs9COjBNMfoRHE90LeKRwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFN3M2OSK/ClR/zdWb7H6CbEP3gCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNTUzYWRmNGMtOTRmYS0z OGZiLWJjZTYtMjFhZGJiYzJiZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgSqAAMF ACYH9DAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEALrSSRX9tRVTqnx6bmIPHx6N7BOd/f8JeDpDiHwkUiJyW E0IqLdYnXKv0049lUS41uC8xYK+5O1+QvCvrRc3fxHNR/A7+PJ8BnHoXeWwkknpy XFIUW3OpfiYqqfu9enH/U6ECX5j8cH//o+6KEQQUFqzyr/PPZj8SVO9c6HOue58m v5O8ZvUnTz3aIgY91Q7d9UdZwS1jlSva/8Hm6fYGfSf2lb6xPJ8bSSmS/5jip5x8 4upGE+gmj709une+xmLa0XG1aCSc3ukyeH/xmn7o+2sOg3ZCAGwyur98ntj1g9dh Z9E15hWzJhtSEpeQocwSDsfma/j65YghusGmhUGF4A== -----END CERTIFICATE-----Generated at Thu Apr 9 02:48:55 2026 by rpki-client