$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa File: 7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json) Hash identifier: fWDtR6BZXR+nGHbnN7jkzVyOkrsDz9pRCyrx/abyr6Y= Subject key identifier: 50:F2:6A:49:1B:40:28:D2:74:0E:F5:E9:B4:E5:94:D5:55:BA:9E:30 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584D91C0170D0C8FC82E4D7AEF80 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 4226 IP address blocks: 2604:f580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:17:0d:0c:8f:c8:2e:4d:7a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=44275e65-6f20-49fa-a05e-0d93c2f60fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:cc:68:ac:a2:7a:a5:d6:84:64:49:f4:45: c4:82:dc:31:59:fe:29:52:cc:fd:ac:8c:8a:16:1b: 41:06:e6:f9:2a:7e:68:e5:50:81:b1:50:f6:4b:e8: 33:96:c7:0b:13:d4:d2:03:c3:41:56:d9:62:eb:ca: 95:47:0e:f2:fd:6a:a3:ac:26:c7:6f:5a:0c:2e:d5: dc:95:ab:f2:7e:0a:d9:47:4f:0a:55:ee:3e:57:96: 28:2c:89:ad:2b:03:5f:f5:66:fc:44:38:a8:5b:9f: 36:64:9c:f0:d9:62:db:e9:60:c0:93:ef:91:c0:3f: fa:03:93:c1:df:e9:9f:ae:e5:14:e7:92:83:21:21: 0f:35:16:fb:f9:de:6e:10:22:f4:46:5b:cd:28:05: 67:60:ba:1f:ee:09:11:d2:bf:27:35:a5:43:78:f9: 78:a7:92:24:1c:6a:ff:a9:37:13:bf:a5:7d:a3:93: be:9f:e9:82:c1:1c:8b:e3:0c:e5:88:5c:32:5e:49: b8:b7:27:89:be:e6:8f:1d:22:29:a4:bb:5b:9a:76: d3:6f:70:3d:fe:6e:62:29:91:e5:9f:15:09:36:26: 07:4b:27:50:89:12:4e:0e:86:ef:03:4a:10:a3:d5: 43:ee:ad:af:05:df:b5:f4:c7:5e:3b:3e:e1:c6:ea: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F2:6A:49:1B:40:28:D2:74:0E:F5:E9:B4:E5:94:D5:55:BA:9E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:73:d1:ba:10:62:58:84:07:97:3c:72:5c:84:8b:c7:90:5c: 0a:e7:25:79:38:7d:03:e0:ca:bb:27:80:87:00:21:33:9a:4b: 4d:58:b0:25:a6:86:8a:f2:e2:a5:c7:5b:f4:d7:34:32:01:9e: 79:12:7b:b0:d8:fd:3d:0a:68:cf:1e:22:4b:d5:14:e7:e2:b8: 37:5f:23:c7:17:bf:1a:d5:3a:b0:e7:02:e8:da:c3:00:f3:3e: ba:29:34:40:3e:c3:65:51:7f:b3:de:15:38:55:fe:92:7c:0a: e4:84:3a:ad:1e:36:2a:5f:08:86:dd:28:3c:dd:bf:94:e3:ca: 28:67:fe:5c:3d:84:56:3c:a7:43:9e:c2:83:f7:8c:b6:e9:a5: b2:99:17:f7:e6:35:9e:45:5d:30:86:1b:1d:d4:c5:b4:46:61: 9b:b4:b8:46:c5:5e:e1:66:ae:51:5f:fb:63:ac:84:20:01:d4: d4:f5:6f:c6:36:d9:e4:43:ac:c1:a4:86:ed:a2:fe:54:d1:84: 30:3e:d7:13:38:ea:e4:13:7c:a1:e7:52:2d:9d:88:a8:33:6f: e0:29:09:11:3d:d9:70:79:73:1c:09:5c:37:31:67:7d:9c:7a: 2c:06:04:35:0a:33:3d:81:9a:74:40:9a:04:06:8e:6b:7b:69: d7:d9:99:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwBcNDI/ILk1674AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NDQyNzVlNjUtNmYyMC00OWZhLWEwNWUtMGQ5M2MyZjYwZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJvMaKyieqXWhGRJ9EXEgtwxWf4pUsz9rIyK FhtBBub5Kn5o5VCBsVD2S+gzlscLE9TSA8NBVtli68qVRw7y/WqjrCbHb1oMLtXc lavyfgrZR08KVe4+V5YoLImtKwNf9Wb8RDioW582ZJzw2WLb6WDAk++RwD/6A5PB 3+mfruUU55KDISEPNRb7+d5uECL0RlvNKAVnYLof7gkR0r8nNaVDePl4p5IkHGr/ qTcTv6V9o5O+n+mCwRyL4wzliFwyXkm4tyeJvuaPHSIppLtbmnbTb3A9/m5iKZHl nxUJNiYHSydQiRJODobvA0oQo9VD7q2vBd+19MdeOz7hxuoIOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFDyakkbQCjSdA716bTllNVVup4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNzUyMWE2MTQtMTg3Yy0z MTIzLWI3N2UtYmQ1OGQ1NmJmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCc9G6EGJYhAeXPHJchIvHkFwK5yV5OH0D4Mq7J4CHACEzmktNWLAl poaK8uKlx1v01zQyAZ55Enuw2P09CmjPHiJL1RTn4rg3XyPHF78a1Tqw5wLo2sMA 8z66KTRAPsNlUX+z3hU4Vf6SfArkhDqtHjYqXwiG3Sg83b+U48ooZ/5cPYRWPKdD nsKD94y26aWymRf35jWeRV0whhsd1MW0RmGbtLhGxV7hZq5RX/tjrIQgAdTU9W/G NtnkQ6zBpIbtov5U0YQwPtcTOOrkE3yh51ItnYioM2/gKQkRPdlweXMcCVw3MWd9 nHosBgQ1CjM9gZp0QJoEBo5re2nX2Zmv -----END CERTIFICATE-----Generated at Wed Apr 29 08:49:43 2026 by rpki-client