$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa File: 064bb556-40a8-3b7a-9c55-3217f244b17d.roa (raw, json) Hash identifier: zXykmkng3T/9iup67gFaFVmN3rP46ZtX21tT3+S5NYw= Subject key identifier: 8E:63:4A:4F:44:54:59:5D:82:F5:87:84:C3:15:9C:DB:1A:0F:28:33 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB5EE339CD6368E0AD580 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 205544 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b5:ee:33:9c:d6:36:8e:0a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=959cf571-8c88-4ad2-8ec9-e9c873f1f399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:00:bb:bd:c8:0d:7b:04:37:6a:4e:93:1e: 40:97:1f:78:a6:47:de:2a:ec:56:47:b2:de:a1:74: 4b:24:84:07:c0:d2:97:21:66:3b:44:bd:11:e7:e1: 9b:2c:27:6d:52:32:e5:ba:b0:d1:8a:7c:c1:85:a2: 08:c9:3d:8f:96:18:f2:9d:d8:16:46:3b:9b:ef:5f: 50:70:ea:15:9d:71:c4:f6:67:7f:d9:25:c8:81:6c: 47:31:5d:80:fb:b6:87:03:84:d6:da:61:44:1c:07: 23:60:f9:20:a9:b7:94:21:d7:1a:ce:a2:21:1a:38: a2:9b:e5:78:d8:70:5c:9a:57:21:95:0e:1e:9a:39: 4c:cb:07:0d:42:82:56:e4:b1:1c:21:6d:27:1e:a2: a7:0f:a3:38:18:a4:1c:2f:dd:8e:bb:f6:41:c5:33: 8f:38:78:e3:6c:6d:ec:b4:f1:13:47:7d:47:f7:7c: f0:fa:2f:83:21:5a:83:63:50:6c:99:87:56:6b:ba: f9:83:fc:93:d0:ee:f5:c4:c9:d6:d2:7e:b9:ca:43: e5:89:68:2e:89:ab:a2:47:c2:eb:6e:96:0b:49:8a: 18:26:b4:46:f7:ce:b9:2d:0c:fb:da:98:79:7f:94: 73:09:03:42:1b:73:82:58:5d:80:7e:73:aa:b6:2a: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:4A:4F:44:54:59:5D:82:F5:87:84:C3:15:9C:DB:1A:0F:28:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/064bb556-40a8-3b7a-9c55-3217f244b17d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:65:d2:ad:7d:47:4f:49:13:df:7a:5a:6b:b6:5d:a4:83:5f: 51:dc:2a:3f:0e:b2:52:98:d2:4d:51:01:36:30:73:3b:3d:23: ee:96:01:96:c4:f8:ad:03:a3:7f:b1:f8:be:20:6a:09:d4:19: 35:96:ef:08:68:76:5f:5e:a3:94:b4:38:69:d9:3d:b5:15:53: d6:c8:7a:29:91:90:a0:aa:16:5b:4d:73:6f:33:5a:35:b1:d4: 5b:53:5c:b3:cb:c8:2b:95:d4:0b:f6:ce:d7:d5:2d:f5:5f:54: ba:77:ee:1b:e8:55:a3:e1:28:e9:a7:b0:d5:e3:3b:54:51:50: 6f:0b:c3:83:13:3b:8b:47:57:1e:26:80:c0:af:26:0f:c7:f5: fa:7b:f7:2c:c0:83:9b:0b:aa:53:ec:5f:b0:54:00:7b:0a:15: 96:d5:8a:0c:3c:08:20:fa:a0:32:c2:3d:3d:6a:87:6f:a3:23: cc:10:78:e4:70:04:ac:4a:30:92:73:7f:d4:9f:d3:81:94:99: ae:9e:16:1c:fe:9e:94:72:06:a8:3f:df:10:a2:30:6c:7d:db: 12:39:ca:0d:97:a7:3f:a7:ef:bd:72:66:b9:9b:14:01:48:32: dc:72:4d:44:64:b2:ae:bf:c0:8f:5d:7d:5d:ea:c3:db:ad:e7: af:e4:23:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7XuM5zWNo4K1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OTU5Y2Y1NzEtOGM4OC00YWQyLThlYzktZTljODczZjFmMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1oAu73IDXsEN2pOkx5Alx94pkfeKuxWR7Le oXRLJIQHwNKXIWY7RL0R5+GbLCdtUjLlurDRinzBhaIIyT2PlhjyndgWRjub719Q cOoVnXHE9md/2SXIgWxHMV2A+7aHA4TW2mFEHAcjYPkgqbeUIdcazqIhGjiim+V4 2HBcmlchlQ4emjlMywcNQoJW5LEcIW0nHqKnD6M4GKQcL92Ou/ZBxTOPOHjjbG3s tPETR31H93zw+i+DIVqDY1BsmYdWa7r5g/yT0O71xMnW0n65ykPliWguiauiR8Lr bpYLSYoYJrRG9865LQz72ph5f5RzCQNCG3OCWF2AfnOqtirubwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI5jSk9EVFldgvWHhMMVnNsaDygzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMDY0YmI1NTYtNDBhOC0z YjdhLTljNTUtMzIxN2YyNDRiMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdl0q19R09JE996Wmu2XaSDX1HcKj8OslKY0k1RATYwczs9I+6W AZbE+K0Do3+x+L4gagnUGTWW7whodl9eo5S0OGnZPbUVU9bIeimRkKCqFltNc28z WjWx1FtTXLPLyCuV1Av2ztfVLfVfVLp37hvoVaPhKOmnsNXjO1RRUG8Lw4MTO4tH Vx4mgMCvJg/H9fp79yzAg5sLqlPsX7BUAHsKFZbVigw8CCD6oDLCPT1qh2+jI8wQ eORwBKxKMJJzf9Sf04GUma6eFhz+npRyBqg/3xCiMGx92xI5yg2Xpz+n771yZrmb FAFIMtxyTURksq6/wI9dfV3qw9ut56/kI8E= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:04 2026 by rpki-client