$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa File: a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa (raw, json) Hash identifier: kbKOghu5vCYK/j1xnFKCzWgl7f3YSDY8EDbjALjGzYo= Subject key identifier: C1:2B:60:CE:79:93:BD:C2:C1:7A:D8:A6:2A:32:C2:7D:C3:72:F6:F9 Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584DA81585B14339C3D9CEE05D00 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 394056 IP address blocks: 2607:3640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:85:b1:43:39:c3:d9:ce:e0:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=0f7dfc00-e3f2-4176-aa18-43a2c30cd0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:00:14:a8:e0:66:e2:67:83:9a:30:7a:9c: 99:1d:e7:7f:7a:9a:64:d8:04:ae:ef:32:c0:f2:fb: 83:ec:65:bf:cd:f4:0b:08:1b:f9:1f:66:ed:b9:be: a1:d1:57:4d:18:86:01:1f:15:49:2b:4f:d6:06:63: 79:7a:9d:6f:7e:3e:9c:5d:f6:b4:bd:aa:1b:13:20: 12:78:d7:27:92:83:73:20:91:e4:e7:08:b1:a5:45: 4f:65:08:b6:1b:20:36:e7:c8:33:02:8c:3f:82:56: 46:13:6b:c7:93:f7:60:c4:2b:1f:5e:e7:da:b7:ee: c2:28:3e:62:ac:e0:f5:f8:74:e3:8a:f9:51:87:f6: 1e:2a:db:d9:f1:c3:55:95:d6:44:65:5c:e7:6e:70: eb:aa:54:de:6c:92:d3:6d:05:17:fa:e5:ac:a1:fa: 56:79:42:36:d8:01:02:11:45:ce:34:b1:44:bd:57: e7:c3:3b:00:b6:55:14:88:a5:b2:14:17:ee:ba:1c: fd:c5:7d:93:75:d0:8f:90:f5:39:fe:7a:12:67:22: 44:4a:30:14:96:91:19:0a:4d:d9:74:5b:b0:14:0a: d0:29:85:44:ab:85:92:c7:23:fc:7d:82:93:83:d6: 93:a7:e4:d3:69:93:b4:cd:8f:32:dc:cf:10:52:1e: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:60:CE:79:93:BD:C2:C1:7A:D8:A6:2A:32:C2:7D:C3:72:F6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/a4288eed-4f4e-30fd-b1d7-a516b085f2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:77:b8:a8:73:f7:80:24:31:02:ca:f9:00:30:92:6d:ba:57: 75:6d:37:09:f4:c0:7c:48:72:67:64:38:68:31:d0:cf:80:9f: 9e:88:fa:3f:e4:62:d4:ea:7e:38:04:e6:fe:30:f9:84:9b:51: 45:b8:99:7b:06:60:41:70:0a:35:5f:93:e6:06:d5:b6:16:68: bc:1d:71:75:d4:72:cd:1c:9c:53:99:2a:5a:75:71:92:c3:51: 5d:4a:fe:1b:1a:b6:a7:5f:c5:5c:f4:3f:49:fd:29:5e:50:f7: b6:fa:3a:3b:99:b5:e4:9e:ee:3a:c2:a0:b3:63:04:73:d8:8c: 80:2d:7e:7c:b0:a9:61:ba:f4:64:52:0d:4c:5c:10:86:61:8b: b1:ef:7e:cd:0a:1c:13:ec:59:11:3b:23:ca:5f:35:0d:7a:90: 40:83:54:e6:ea:7d:57:8d:63:70:eb:86:88:38:47:67:03:b4: a1:61:b4:2a:52:b1:86:0d:ee:17:89:ea:36:5c:88:f9:a6:3c: 3d:ae:b6:d8:1c:51:ef:10:49:e8:10:e9:2f:db:f0:f9:4a:73: b8:92:42:59:15:26:cf:be:14:17:bf:19:de:d5:d7:37:30:b2: 81:ce:06:19:62:8a:a3:b5:0d:2b:2a:4b:c9:8a:c5:16:99:06: 66:c5:79:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFYWxQznD2c7gXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MGY3ZGZjMDAtZTNmMi00MTc2LWFhMTgtNDNhMmMzMGNkMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM8AFKjgZuJng5owepyZHed/eppk2ASu7zLA 8vuD7GW/zfQLCBv5H2btub6h0VdNGIYBHxVJK0/WBmN5ep1vfj6cXfa0vaobEyAS eNcnkoNzIJHk5wixpUVPZQi2GyA258gzAow/glZGE2vHk/dgxCsfXufat+7CKD5i rOD1+HTjivlRh/YeKtvZ8cNVldZEZVznbnDrqlTebJLTbQUX+uWsofpWeUI22AEC EUXONLFEvVfnwzsAtlUUiKWyFBfuuhz9xX2TddCPkPU5/noSZyJESjAUlpEZCk3Z dFuwFArQKYVEq4WSxyP8fYKTg9aTp+TTaZO0zY8y3M8QUh736wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMErYM55k73CwXrYpioywn3Dcvb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvYTQyODhlZWQtNGY0ZS0z MGZkLWIxZDctYTUxNmIwODVmMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBed7ioc/eAJDECyvkAMJJtuld1bTcJ9MB8SHJnZDhoMdDPgJ+eiPo/ 5GLU6n44BOb+MPmEm1FFuJl7BmBBcAo1X5PmBtW2Fmi8HXF11HLNHJxTmSpadXGS w1FdSv4bGranX8Vc9D9J/SleUPe2+jo7mbXknu46wqCzYwRz2IyALX58sKlhuvRk Ug1MXBCGYYux737NChwT7FkROyPKXzUNepBAg1Tm6n1XjWNw64aIOEdnA7ShYbQq UrGGDe4Xieo2XIj5pjw9rrbYHFHvEEnoEOkv2/D5SnO4kkJZFSbPvhQXvxne1dc3 MLKBzgYZYoqjtQ0rKkvJisUWmQZmxXkO -----END CERTIFICATE-----Generated at Sun May 3 17:52:58 2026 by rpki-client