$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: DOcJRlYa5k9ItN9+tEr39xqwb8DZ2zx5Gx8j7wWZDGQ= Subject key identifier: 9F:3F:A8:7D:25:3B:7C:78:2E:48:5F:85:CC:48:F7:8A:63:3B:E9:00 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB6BFF963E03D235C2E00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b6:bf:f9:63:e0:3d:23:5c:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=8c158c38-2547-4fea-807a-eb5a97ec3ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:dc:4a:ae:a4:18:e1:62:7e:36:ce:b8:28: 8d:07:89:22:62:ab:46:a7:81:c3:af:f6:72:49:34: eb:c7:93:a5:73:98:ad:0b:53:46:54:8c:5b:da:71: 2d:4a:56:5d:92:76:38:18:f2:59:df:cd:c2:27:f4: 47:d0:40:c9:8f:97:ba:d7:ff:76:32:66:d0:db:db: b5:27:80:99:f1:20:ac:71:cc:a2:e0:6b:61:9a:6b: fb:4c:b1:7e:d4:df:47:49:16:b2:63:d2:f6:ff:72: 25:da:42:3c:03:12:32:d1:30:99:6e:87:6d:1d:53: b8:f9:44:33:7c:cc:3d:ba:cc:18:4a:51:3b:23:94: 75:89:3f:c4:67:76:25:8c:bd:39:60:d8:81:31:a4: 3c:a0:88:c7:7e:ae:29:4a:7d:61:23:f9:9a:bd:f7: 88:d6:0e:d2:9f:f4:84:02:cc:07:37:7d:46:ec:95: ef:62:9d:7c:b4:c1:c3:ce:99:ae:15:df:0a:9f:e9: 8c:11:33:9d:7b:ba:c3:59:9c:a8:01:16:98:15:15: 33:11:c6:6b:40:cd:d1:da:dc:03:21:fd:0a:8f:6d: e5:2a:56:7d:3a:7d:a8:bd:cb:a0:c1:1f:16:ca:bb: ab:d4:49:f7:16:60:98:bf:34:c6:d4:73:46:26:d7: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:A8:7D:25:3B:7C:78:2E:48:5F:85:CC:48:F7:8A:63:3B:E9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:61:cc:d1:08:5f:ec:c3:75:13:f4:ba:54:f5:89:eb:0e:10: ee:1d:aa:da:91:b6:ad:01:f1:84:75:dc:fe:83:69:3f:dc:d7: a7:25:fa:3a:e2:78:65:ce:d3:ec:96:7e:b4:6f:99:38:44:f3: bd:7f:72:e2:85:a1:97:10:68:3f:51:89:57:98:54:a0:d3:08: 3f:23:17:64:8b:ce:68:52:5c:05:9e:94:c7:49:ea:38:49:d9: 0b:c2:bb:4b:e0:fe:87:11:c7:6f:41:48:4c:d5:a3:5d:5d:d2: fb:73:a3:f9:49:9f:d0:68:e1:3c:4a:a6:41:ff:86:0e:d4:ec: ad:f7:22:cd:25:1b:a9:17:c6:62:1a:3a:e4:dc:c2:90:65:d0: 29:3f:e2:44:6b:fe:72:87:63:fb:07:1e:07:ea:40:a5:0e:eb: 20:48:59:63:44:e8:f4:23:7b:c8:48:8d:17:53:35:3f:3d:ed: 90:35:9e:20:4a:51:05:2f:4d:fa:0a:ff:9a:12:fb:dd:2a:18: df:a7:2d:0e:c2:a5:13:e7:17:df:7b:ca:63:c8:57:9e:5c:03: 4e:4b:c5:13:2a:56:09:44:de:15:7f:01:42:96:01:b7:b7:47: e8:b2:49:e8:b0:ea:30:66:68:95:70:23:6a:a8:a6:cd:50:a5: fa:da:71:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7a/+WPgPSNcLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OGMxNThjMzgtMjU0Ny00ZmVhLTgwN2EtZWI1YTk3ZWMzYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinHcSq6kGOFifjbOuCiNB4kiYqtGp4HDr/Zy STTrx5Olc5itC1NGVIxb2nEtSlZdknY4GPJZ383CJ/RH0EDJj5e61/92MmbQ29u1 J4CZ8SCsccyi4Gthmmv7TLF+1N9HSRayY9L2/3Il2kI8AxIy0TCZbodtHVO4+UQz fMw9uswYSlE7I5R1iT/EZ3YljL05YNiBMaQ8oIjHfq4pSn1hI/mavfeI1g7Sn/SE AswHN31G7JXvYp18tMHDzpmuFd8Kn+mMETOde7rDWZyoARaYFRUzEcZrQM3R2twD If0Kj23lKlZ9On2ovcugwR8Wyrur1En3FmCYvzTG1HNGJtfEvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8/qH0lO3x4LkhfhcxI94pjO+kAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEthzNEIX+zDdRP0ulT1iesOEO4dqtqRtq0B8YR13P6DaT/c16cl +jrieGXO0+yWfrRvmThE871/cuKFoZcQaD9RiVeYVKDTCD8jF2SLzmhSXAWelMdJ 6jhJ2QvCu0vg/ocRx29BSEzVo11d0vtzo/lJn9Bo4TxKpkH/hg7U7K33Is0lG6kX xmIaOuTcwpBl0Ck/4kRr/nKHY/sHHgfqQKUO6yBIWWNE6PQje8hIjRdTNT897ZA1 niBKUQUvTfoK/5oS+90qGN+nLQ7CpRPnF997ymPIV55cA05LxRMqVglE3hV/AUKW Abe3R+iySeiw6jBmaJVwI2qops1QpfracQ0= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:44 2026 by rpki-client