$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa File: 96f964a3-5c77-383c-b888-0fa21581fc81.roa (raw, json) Hash identifier: 4ohiLwSJRDS9jvAJO60Zr/A5H7U5jnVB4le0agXa7u0= Subject key identifier: 4C:43:4B:3E:AD:1D:75:0A:53:0D:1E:E8:36:29:D0:57:BB:6B:58:30 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584D9B854CCBD6EFB217B25B7B90 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 271 IP address blocks: 2607:f8f0:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:4c:cb:d6:ef:b2:17:b2:5b:7b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=445524a5-07f1-4d83-b88e-92d7bea3497c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:cc:5f:ee:65:f2:b0:21:00:9f:5b:64:f6: 95:79:47:89:15:14:31:31:be:87:bf:ca:da:82:02: 38:07:91:0f:4c:f7:09:e8:ef:4f:e7:9d:0a:a0:c3: e6:0f:0f:e5:90:31:4f:38:90:0c:7c:2d:91:69:f6: 4c:68:b8:85:5f:c7:54:8e:2e:36:b6:d7:da:cc:a9: ce:43:02:50:62:a5:0f:b8:5d:7c:63:79:47:af:c5: ac:67:a6:6e:63:41:0f:eb:0b:8f:35:8b:a8:83:93: a1:ae:24:7a:ce:de:38:d5:77:e6:9b:e9:1f:ff:54: 38:79:ad:b8:3d:e1:c1:c2:a2:53:6d:65:67:db:01: 38:2e:01:45:b5:5a:c6:5d:9a:a1:37:08:e7:c9:2a: d8:e8:7b:70:12:2d:c9:38:ee:4f:e8:be:be:f8:95: 21:73:7d:a9:2e:3d:cb:05:b3:38:e6:b3:f6:78:7d: b1:72:00:72:0e:fd:42:31:6e:65:40:46:9b:34:7b: 26:92:13:b7:a9:32:bb:08:1a:a4:51:c0:d7:6a:f8: ae:7c:70:1e:00:5b:e4:6d:0a:10:1d:68:ba:46:4d: 42:0a:16:9e:e2:2c:7a:28:3c:25:c7:d8:ad:00:73: 99:3d:39:ea:66:f7:c6:01:f4:f5:21:1e:05:16:78: 00:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:4B:3E:AD:1D:75:0A:53:0D:1E:E8:36:29:D0:57:BB:6B:58:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/96f964a3-5c77-383c-b888-0fa21581fc81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:89:96:5d:80:1a:f9:7e:aa:7f:f6:4f:9d:74:50:83:4a:70: c5:4a:c8:33:2c:6e:7b:7e:1b:a5:9e:aa:47:69:e8:9a:aa:1d: 2d:e7:8c:3d:1f:95:ea:1c:38:95:10:3b:79:b5:cc:27:b4:d5: d3:dd:70:b2:eb:d0:81:3d:79:43:0e:77:db:7a:1c:77:7f:2e: ca:78:45:99:5f:d9:c7:fa:3b:6c:d2:6e:09:e2:4c:e5:07:2c: c6:24:81:77:ea:8e:1d:45:36:0a:e9:f3:36:83:34:67:84:0b: d9:86:5c:36:ff:73:a9:27:71:61:9a:08:a4:2e:31:05:1f:ac: 05:39:05:61:cd:a3:8a:60:32:ee:40:12:f3:de:48:8b:c9:b0: ae:38:18:68:2f:7a:7b:7b:0a:43:66:27:da:f4:06:1f:33:6b: 49:c6:e3:07:05:ec:30:06:8f:37:f1:96:17:e0:91:b3:ed:b4: bc:09:20:c7:0e:19:cc:bf:4b:f5:36:a1:56:72:78:99:39:36: ff:9e:0e:88:1d:e6:53:9b:6c:11:27:66:ef:bf:fb:99:13:34: cd:6a:48:a5:ec:a9:cd:c1:25:b5:72:15:9f:b2:22:55:34:66: aa:dd:ca:15:5d:93:ba:26:b3:1f:61:61:3e:5d:a9:f1:95:8d: f0:27:33:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2bhUzL1u+yF7Jbe5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk NDQ1NTI0YTUtMDdmMS00ZDgzLWI4OGUtOTJkN2JlYTM0OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUPMX+5l8rAhAJ9bZPaVeUeJFRQxMb6Hv8ra ggI4B5EPTPcJ6O9P550KoMPmDw/lkDFPOJAMfC2RafZMaLiFX8dUji42ttfazKnO QwJQYqUPuF18Y3lHr8WsZ6ZuY0EP6wuPNYuog5OhriR6zt441Xfmm+kf/1Q4ea24 PeHBwqJTbWVn2wE4LgFFtVrGXZqhNwjnySrY6HtwEi3JOO5P6L6++JUhc32pLj3L BbM45rP2eH2xcgByDv1CMW5lQEabNHsmkhO3qTK7CBqkUcDXaviufHAeAFvkbQoQ HWi6Rk1CChae4ix6KDwlx9itAHOZPTnqZvfGAfT1IR4FFngA7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExDSz6tHXUKUw0e6DYp0Fe7a1gwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvOTZmOTY0YTMtNWM3Ny0z ODNjLWI4ODgtMGZhMjE1ODFmYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeJll2AGvl+qn/2T510UINKcMVKyDMsbnt+G6Weqkdp6JqqHS3n jD0fleocOJUQO3m1zCe01dPdcLLr0IE9eUMOd9t6HHd/Lsp4RZlf2cf6O2zSbgni TOUHLMYkgXfqjh1FNgrp8zaDNGeEC9mGXDb/c6kncWGaCKQuMQUfrAU5BWHNo4pg Mu5AEvPeSIvJsK44GGgvent7CkNmJ9r0Bh8za0nG4wcF7DAGjzfxlhfgkbPttLwJ IMcOGcy/S/U2oVZyeJk5Nv+eDogd5lObbBEnZu+/+5kTNM1qSKXsqc3BJbVyFZ+y IlU0ZqrdyhVdk7omsx9hYT5dqfGVjfAnM+0= -----END CERTIFICATE-----Generated at Fri May 1 01:44:22 2026 by rpki-client