$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa File: 29ec1ac4-8552-3747-b6af-11d9e96d9683.roa (raw, json) Hash identifier: NgOpKgZ9W+E7KDhT41mEiTqf1bBIgI6HOy5uOZnYlDw= Subject key identifier: 70:BE:78:3F:34:FC:DD:C1:99:4C:CF:09:DD:4F:DF:AC:B8:37:61:F8 Certificate issuer: /CN=65b88e69-185f-4918-be77-5fca89cf3c16 Certificate serial: 010D0C9F4328584D5F7FA7762B075BDC63F0D280 Authority key identifier: C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 19156 IP address blocks: 2604:77c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a7:76:2b:07:5b:dc:63:f0:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b88e69-185f-4918-be77-5fca89cf3c16 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=a10a89da-afe0-43cc-8ad3-e8d674ad0f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:f3:3e:3e:4b:6a:b7:cc:10:f9:23:4c:5c: a9:68:74:3f:97:d7:d1:fe:a9:33:3b:f2:66:cf:9c: 49:89:a8:dd:9a:cb:5f:20:d0:98:ad:33:c7:17:b1: 47:4d:d0:a3:6f:85:fb:bb:1f:73:99:c3:6d:a1:46: 15:62:91:fe:e7:80:81:5b:55:2e:2c:09:eb:bf:92: d0:10:43:92:9b:1b:e5:9c:a1:d7:05:98:ab:60:6f: 74:ea:ce:a1:e1:8a:9f:25:ce:35:f4:08:dc:75:33: 79:81:50:8c:41:76:b5:1e:b8:a9:24:b1:89:07:aa: ed:a8:9e:68:6b:19:dc:9a:f3:57:cd:60:00:03:9c: de:d7:c8:ec:69:6b:83:06:c7:62:fe:0e:d6:cc:44: 92:00:6d:16:4f:3a:49:a6:cd:10:58:ec:de:64:9e: 8c:ba:73:66:9d:4e:11:4e:c1:12:42:fd:b8:68:f6: dc:24:f4:bb:12:13:54:43:54:0e:31:1d:f2:82:53: ee:c1:60:0d:c9:9c:ae:e7:68:6e:16:e8:75:a8:6c: 3b:0a:13:3d:b8:3a:df:20:f9:04:3c:12:96:55:fa: 7e:36:45:6f:35:51:ba:49:d5:8d:d5:84:56:0b:89: 08:21:52:8c:03:75:ed:1c:01:68:dc:0b:57:95:dd: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BE:78:3F:34:FC:DD:C1:99:4C:CF:09:DD:4F:DF:AC:B8:37:61:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/29ec1ac4-8552-3747-b6af-11d9e96d9683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16/65b88e69-185f-4918-be77-5fca89cf3c16.crl X509v3 Authority Key Identifier: keyid:C9:C8:ED:37:AB:AA:F8:A2:6C:2E:F6:9E:99:A0:A3:5F:57:0D:2C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/65b88e69-185f-4918-be77-5fca89cf3c16.cer sbgp-ipAddrBlock: critical IPv6: 2604:77c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e8:e8:31:43:bb:b1:d2:77:51:24:b5:cb:2d:cd:a1:7d:39: 7a:db:0f:f1:1c:59:92:dd:75:58:be:01:2e:56:2f:c7:c2:08: a8:a8:43:01:26:9a:a5:0b:e4:4e:ec:ca:5d:36:77:e5:c9:bc: 09:b9:17:71:67:a7:26:3f:e2:a4:e7:1a:3a:2b:24:39:31:07: 6e:1f:9c:ca:74:b7:92:17:07:8a:52:9d:48:31:05:7a:69:ba: 0f:e9:bd:8c:d5:b9:c2:f3:16:b2:af:8f:45:61:ed:68:be:6a: f6:e4:e5:7e:7b:8a:47:41:ca:17:d1:63:dd:b7:2e:cb:d9:9c: 45:62:2a:57:64:9a:c9:c7:38:68:31:56:a5:f6:55:8b:01:d4: 00:2c:68:34:1b:6a:8b:e3:ce:10:8c:32:8a:46:c9:34:9e:22: c7:ce:f2:11:f0:0b:54:f4:12:0c:54:4f:64:cc:59:f5:6f:a5: 1a:a4:c6:c3:43:28:72:6b:17:55:d0:62:43:bc:59:ac:e6:ce: f0:dd:b0:51:cb:d9:46:8e:da:17:a8:c9:9d:0b:16:4e:76:8f: 2e:3a:b9:97:ae:de:dc:0d:e0:bd:cf:22:a2:f3:07:0b:a3:e4: b6:5d:43:49:0d:54:b0:dc:bf:55:c3:3f:83:c5:d0:0e:be:2a: 62:d3:7d:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1ff6d2Kwdb3GPw0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViODhlNjktMTg1Zi00OTE4LWJlNzctNWZjYTg5Y2Yz YzE2MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk YTEwYTg5ZGEtYWZlMC00M2NjLThhZDMtZThkNjc0YWQwZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrfzPj5LarfMEPkjTFypaHQ/l9fR/qkzO/Jm z5xJiajdmstfINCYrTPHF7FHTdCjb4X7ux9zmcNtoUYVYpH+54CBW1UuLAnrv5LQ EEOSmxvlnKHXBZirYG906s6h4YqfJc419AjcdTN5gVCMQXa1HripJLGJB6rtqJ5o axncmvNXzWAAA5ze18jsaWuDBsdi/g7WzESSAG0WTzpJps0QWOzeZJ6MunNmnU4R TsESQv24aPbcJPS7EhNUQ1QOMR3yglPuwWANyZyu52huFuh1qGw7ChM9uDrfIPkE PBKWVfp+NkVvNVG6SdWN1YRWC4kIIVKMA3XtHAFo3AtXld3wmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHC+eD80/N3BmUzPCd1P36y4N2H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4 OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNhODljZjNjMTYvMjllYzFhYzQtODU1Mi0z NzQ3LWI2YWYtMTFkOWU5NmQ5NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjViODhlNjktMTg1Zi00OTE4LWJl NzctNWZjYTg5Y2YzYzE2LzY1Yjg4ZTY5LTE4NWYtNDkxOC1iZTc3LTVmY2E4OWNm M2MxNi5jcmwwHwYDVR0jBBgwFoAUycjtN6uq+KJsLvaemaCjX1cNLHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NWI4OGU2OS0xODVmLTQ5MTgtYmU3Ny01ZmNh ODljZjNjMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR3wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJ6OgxQ7ux0ndRJLXLLc2hfTl62w/xHFmS3XVYvgEuVi/HwgioqEMB JpqlC+RO7MpdNnflybwJuRdxZ6cmP+Kk5xo6KyQ5MQduH5zKdLeSFweKUp1IMQV6 aboP6b2M1bnC8xayr49FYe1ovmr25OV+e4pHQcoX0WPdty7L2ZxFYipXZJrJxzho MVal9lWLAdQALGg0G2qL484QjDKKRsk0niLHzvIR8AtU9BIMVE9kzFn1b6UapMbD QyhyaxdV0GJDvFms5s7w3bBRy9lGjtoXqMmdCxZOdo8uOrmXrt7cDeC9zyKi8wcL o+S2XUNJDVSw3L9Vwz+DxdAOvipi031i -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:19 2026 by rpki-client