$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa File: cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa (raw, json) Hash identifier: +CnlCtOiKE6dQfKV9RIFCQ8OIRxeR6Z+DFjqqg7pcKY= Subject key identifier: 5B:60:44:38:D2:27:DA:35:D7:B3:C3:BB:1F:BB:47:F7:41:52:3C:58 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D7470181FECF666B3D9694540 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397219 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:18:1f:ec:f6:66:b3:d9:69:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a84e9b23-5d89-4508-92a4-d951dbdb4326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:01:07:e7:d8:dd:1d:83:38:45:85:74:07: 6d:9c:64:aa:c4:42:a9:e3:53:4c:b7:fc:75:39:2c: 65:cc:7b:3b:63:72:cc:4b:ef:68:c8:93:46:a3:d0: 0e:7d:4f:ea:07:66:83:25:2b:72:ad:91:fa:4c:51: 73:56:6a:9e:18:c7:29:f9:67:ef:72:d8:a7:c9:bd: e9:cc:d9:8b:ce:5e:07:e0:68:f4:1b:36:b5:a9:b2: 11:2b:fa:2a:16:35:b5:f3:aa:53:e0:65:99:9e:c5: fc:4c:c5:67:c9:28:90:0b:12:37:8b:61:e7:f3:0f: a6:71:1e:3d:01:87:d4:46:b8:8b:fb:65:04:01:db: 21:2d:e1:53:ed:4b:51:c6:84:65:07:b2:dc:87:54: 1a:1f:de:b0:95:de:b5:e4:7f:64:fd:d1:0d:cf:fb: 31:61:44:89:bc:31:ce:02:6b:c1:20:ef:ef:25:b3: 84:df:3d:e5:86:20:38:31:e5:4a:ae:0b:68:30:03: ec:43:cf:ba:e1:d1:88:a3:04:36:5a:16:db:59:ba: 24:79:c8:ac:8c:7c:2c:30:79:8a:62:f9:b5:ee:1a: e8:a7:c7:7f:31:c5:86:82:72:4f:fd:44:cc:84:1a: 97:d5:ce:6a:cb:82:bc:8c:d8:98:05:b2:c5:da:cc: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:60:44:38:D2:27:DA:35:D7:B3:C3:BB:1F:BB:47:F7:41:52:3C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:89:b8:f9:5d:cd:2c:6d:12:71:54:77:fa:4a:ce:3b:d4: 85:b4:57:cd:dc:ff:51:de:fc:02:72:8a:9e:c1:45:8c:49:3f: 49:e0:ad:ac:d9:e8:3b:4f:c0:e0:f9:f3:d9:ab:d9:27:cc:94: b7:5e:dd:db:b8:3d:52:10:f9:ae:d8:6a:6d:a5:3f:14:2e:95: 95:33:cc:f8:05:73:4e:61:86:f2:fe:31:19:aa:e2:69:25:97: 71:05:da:8a:da:50:c0:30:57:4b:06:36:24:5f:93:da:e6:7c: 73:d9:93:d3:ce:e5:7d:c1:80:51:22:30:7b:3f:af:7d:1a:38: 73:24:2b:79:99:a0:a6:b1:0f:9d:52:8e:50:78:dd:63:d6:c7: 35:5c:0c:51:81:2b:0f:75:41:d5:c7:13:c2:a4:75:aa:8d:58: 64:31:db:c9:63:73:4a:58:92:06:fc:54:99:cf:36:9b:18:78: 5a:31:20:80:17:41:5b:87:6f:25:ff:28:ab:6c:2b:be:72:50: 07:61:9b:97:9c:db:22:1c:77:1d:df:70:6a:12:a7:ef:de:19: 8f:3a:b2:40:ca:8e:17:4e:72:aa:4d:28:f2:69:38:a1:d2:56: 5a:ba:5a:16:be:45:30:b1:05:8a:28:b6:c6:87:bc:59:cc:1e: ce:40:a6:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBgf7PZms9lpRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTg0ZTliMjMtNWQ4OS00NTA4LTkyYTQtZDk1MWRiZGI0MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj4BB+fY3R2DOEWFdAdtnGSqxEKp41NMt/x1 OSxlzHs7Y3LMS+9oyJNGo9AOfU/qB2aDJStyrZH6TFFzVmqeGMcp+Wfvctinyb3p zNmLzl4H4Gj0Gza1qbIRK/oqFjW186pT4GWZnsX8TMVnySiQCxI3i2Hn8w+mcR49 AYfURriL+2UEAdshLeFT7UtRxoRlB7Lch1QaH96wld615H9k/dENz/sxYUSJvDHO AmvBIO/vJbOE3z3lhiA4MeVKrgtoMAPsQ8+64dGIowQ2WhbbWbokecisjHwsMHmK Yvm17hrop8d/McWGgnJP/UTMhBqX1c5qy4K8jNiYBbLF2szh1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtgRDjSJ9o117PDux+7R/dBUjxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2ZlYjcyN2YtODc3ZC0z OTk4LTg3NTUtNGMxYTA0YThhMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIWWibj5Xc0sbRJxVHf6Ss471IW0V83c/1He/AJyip7BRYxJP0ng razZ6DtPwOD589mr2SfMlLde3du4PVIQ+a7Yam2lPxQulZUzzPgFc05hhvL+MRmq 4mkll3EF2oraUMAwV0sGNiRfk9rmfHPZk9PO5X3BgFEiMHs/r30aOHMkK3mZoKax D51SjlB43WPWxzVcDFGBKw91QdXHE8KkdaqNWGQx28ljc0pYkgb8VJnPNpsYeFox IIAXQVuHbyX/KKtsK75yUAdhm5ec2yIcdx3fcGoSp+/eGY86skDKjhdOcqpNKPJp OKHSVlq6Wha+RTCxBYootsaHvFnMHs5Apoc= -----END CERTIFICATE-----Generated at Sun Apr 12 08:10:11 2026 by rpki-client