$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa File: b8f00c80-28df-3bec-8197-b1c1cd901f79.roa (raw, json) Hash identifier: E8kekzX0Xs3dUVp85VedpFAAMdjxQpkLMANDsBadHxk= Subject key identifier: A9:70:F4:D2:68:84:2B:7F:3D:32:39:8D:43:86:05:07:A6:B0:81:60 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB64F33E3E2AD01288980 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 136988 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b6:4f:33:e3:e2:ad:01:28:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=faef8443-c30d-4761-a118-f92d59343cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:39:21:d0:3d:e3:a6:1e:7c:ab:29:c9:c5:20: ba:ad:10:47:14:21:df:f1:19:3d:53:40:13:f1:76: 7a:de:a7:ee:c5:ab:a3:57:7a:42:f1:41:a4:7b:1e: 7c:a4:c9:46:c1:ea:78:7c:bf:a3:91:e3:7f:fd:2c: c2:a3:cc:e6:46:49:64:0b:61:ab:45:95:ef:7f:96: 94:2f:71:09:46:d5:ae:83:30:55:30:c2:3b:1f:12: d1:92:ae:88:67:10:70:a9:c6:23:17:1d:3f:d9:73: 73:e9:97:23:a5:a9:57:1a:ae:6e:e0:69:6b:65:a9: 5e:b0:19:85:8f:38:4a:ef:c6:66:14:72:12:b0:b3: d6:85:fc:62:d7:27:5b:3a:4a:e1:f5:25:c0:7a:07: 66:9f:62:fc:c4:32:9d:4c:37:aa:27:6d:74:6a:36: 06:1c:38:b0:b8:40:61:ba:27:28:f6:a6:d5:58:6b: 6b:1e:4e:8f:e7:9e:45:fe:21:15:37:8c:42:53:d4: 86:b3:58:d1:74:27:2e:2c:9e:70:27:ea:b6:51:96: 27:69:87:a9:0b:09:41:70:dd:2b:e9:0e:f1:fa:e8: b5:05:26:a1:53:5b:2c:ce:8c:b2:91:b2:18:42:93: 4c:07:15:f6:ee:f6:03:5d:e2:8c:87:10:19:1a:06: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:70:F4:D2:68:84:2B:7F:3D:32:39:8D:43:86:05:07:A6:B0:81:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:01:fc:79:56:1a:f3:f6:ec:70:3a:d7:1b:8d:fc:a3:66:19: 20:53:cc:42:a0:a1:ed:34:81:7f:f9:1d:d2:39:fb:f6:c0:2d: 9a:da:19:d6:8d:27:0a:69:06:45:9f:9b:6c:c7:ce:42:ab:de: 22:19:e3:e9:e5:43:ce:28:6d:d5:c0:30:31:f0:23:c3:e9:33: be:01:ad:3d:f1:d5:65:e2:a3:d9:a9:b5:3f:11:90:8a:5d:41: 84:3b:81:46:e5:09:cf:ae:3b:f8:15:22:62:58:4f:c4:8e:c9: 1d:4c:b2:a9:d1:57:e9:5e:42:03:ad:af:98:23:5c:f3:cb:bd: b4:b4:19:db:cc:09:6b:08:04:49:41:ca:04:f7:73:e1:34:4d: bf:9f:42:a5:40:91:ab:f8:86:03:06:c5:53:0f:67:de:4a:b6: 6b:53:df:ce:ef:af:38:db:7b:8f:2a:95:69:25:38:e9:2b:29: 27:a9:e0:42:44:83:fe:61:f3:e4:d0:e0:6d:a7:8d:80:5d:d1: d3:b7:21:4e:67:57:a6:bf:d9:22:3e:12:bf:8a:be:95:f6:9c: e6:bf:72:ca:1f:07:17:35:ee:a6:d3:78:08:fa:67:e2:e8:f3: 55:d5:eb:78:24:19:78:ab:f5:c9:1f:35:38:51:34:71:60:98: 72:c5:74:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7ZPM+PirQEoiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZmFlZjg0NDMtYzMwZC00NzYxLWExMTgtZjkyZDU5MzQzY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjkh0D3jph58qynJxSC6rRBHFCHf8Rk9U0AT 8XZ63qfuxaujV3pC8UGkex58pMlGwep4fL+jkeN//SzCo8zmRklkC2GrRZXvf5aU L3EJRtWugzBVMMI7HxLRkq6IZxBwqcYjFx0/2XNz6ZcjpalXGq5u4GlrZalesBmF jzhK78ZmFHISsLPWhfxi1ydbOkrh9SXAegdmn2L8xDKdTDeqJ210ajYGHDiwuEBh uico9qbVWGtrHk6P555F/iEVN4xCU9SGs1jRdCcuLJ5wJ+q2UZYnaYepCwlBcN0r 6Q7x+ui1BSahU1sszoyykbIYQpNMBxX27vYDXeKMhxAZGgY6IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKlw9NJohCt/PTI5jUOGBQemsIFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjhmMDBjODAtMjhkZi0z YmVjLTgxOTctYjFjMWNkOTAxZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACAB/HlWGvP27HA61xuN/KNmGSBTzEKgoe00gX/5HdI5+/bALZra GdaNJwppBkWfm2zHzkKr3iIZ4+nlQ84obdXAMDHwI8PpM74BrT3x1WXio9mptT8R kIpdQYQ7gUblCc+uO/gVImJYT8SOyR1MsqnRV+leQgOtr5gjXPPLvbS0GdvMCWsI BElBygT3c+E0Tb+fQqVAkav4hgMGxVMPZ95KtmtT387vrzjbe48qlWklOOkrKSep 4EJEg/5h8+TQ4G2njYBd0dO3IU5nV6a/2SI+Er+KvpX2nOa/csofBxc17qbTeAj6 Z+Lo81XV63gkGXir9ckfNThRNHFgmHLFdOI= -----END CERTIFICATE-----Generated at Mon Apr 13 15:33:05 2026 by rpki-client