$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/58b09cf7-06c5-3a87-b0c2-be7481551a51.roa File: 58b09cf7-06c5-3a87-b0c2-be7481551a51.roa (raw, json) Hash identifier: lCpwruCH7DNn4ThoGK0JHEN8buCuJ48SXvX5W9cxDqw= Subject key identifier: DC:04:5C:93:78:68:0F:3B:C0:17:D3:AA:B6:8D:77:DA:8D:80:F1:2E Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584D7F80B105B8E38ACC21BF4DC0 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/58b09cf7-06c5-3a87-b0c2-be7481551a51.roa Signing time: Tue 14 Apr 2026 00:08:32 +0000 ROA not before: Tue 14 Apr 2026 00:08:32 +0000 ROA not after: Mon 13 Jul 2026 00:08:32 +0000 asID: 200825 IP address blocks: 2602:f3ff:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:80:b1:05:b8:e3:8a:cc:21:bf:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: Apr 14 00:08:32 2026 GMT Not After : Jul 13 00:08:32 2026 GMT Subject: CN=b066cd44-a503-4acc-811b-b5f71a41870f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:5f:89:65:7b:6f:9f:20:34:00:b8:94:82: b8:49:50:41:d0:a5:09:78:3a:0a:23:4f:56:c0:d4: 55:05:6e:f7:be:db:88:35:d2:3f:21:3d:ad:cd:3d: f2:10:c0:b7:bc:b6:23:4a:c1:13:41:28:12:94:90: 53:c4:99:78:b7:66:69:80:94:0f:e8:06:58:89:fc: 0c:30:75:b3:b0:25:52:68:ec:70:be:48:92:6c:0c: bc:69:dd:98:81:c2:c9:b3:b7:ad:e5:9e:7d:cd:6b: 4a:84:68:3d:f9:27:73:c9:23:fd:28:83:fc:94:8c: 41:cd:fb:06:ef:39:75:44:18:b1:aa:e2:6d:96:7e: ab:6f:88:05:c9:3e:e2:a8:19:de:60:65:9a:bd:b3: fd:6c:d7:09:43:a9:89:2b:c6:32:ea:45:24:65:b4: 91:68:f7:52:50:20:e6:a6:dd:f3:d2:22:81:e4:da: b5:cd:8e:77:40:b4:8e:ba:7a:c3:e8:86:22:b2:d8: b3:b1:0e:71:d7:85:af:ff:b7:32:7d:61:75:9e:93: cb:8e:e5:67:d5:a3:82:fa:3a:aa:95:23:19:d7:bc: a4:80:63:b8:37:c6:6d:f9:9f:7e:f5:bb:0e:48:cc: 75:20:83:67:97:07:4c:84:d7:20:b3:e4:a6:44:7f: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:5C:93:78:68:0F:3B:C0:17:D3:AA:B6:8D:77:DA:8D:80:F1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/58b09cf7-06c5-3a87-b0c2-be7481551a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3ff:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:43:7c:b8:67:35:82:30:00:3a:09:65:d6:26:b2:a3:b0:3d: 71:55:a9:d9:53:c8:e8:85:39:60:85:8b:e6:d5:cd:9b:91:0f: e7:38:bf:89:99:0a:f3:49:c1:c3:a3:63:1f:39:c4:45:13:a9: 2e:de:5a:57:03:61:58:30:b6:2f:ac:86:e1:f9:f3:b9:ab:0a: af:93:2f:08:73:38:e8:7b:7c:c2:e1:8c:51:fd:81:44:1c:f0: 55:b2:70:03:ad:c4:77:45:54:52:ec:52:31:c7:5b:8e:e6:3c: f3:76:9c:df:e2:c0:4c:70:7f:bf:c0:29:c1:a4:99:34:d5:44: 00:9b:60:fa:0d:9a:74:f8:e8:4b:ae:78:da:87:45:e4:c7:85: 8f:b9:2a:a6:03:58:46:c8:60:f4:97:1d:ef:a0:2f:20:ec:86: 11:28:ca:65:ef:f9:4a:a1:0e:c6:e2:ef:8c:72:4e:6b:30:79: fd:9b:9f:49:cb:72:17:3b:a9:30:8c:72:96:d9:0c:93:58:63: 8a:c8:42:d0:12:45:d4:92:c1:78:23:6f:77:bc:cf:a4:07:f1: fa:1a:b4:fb:f6:20:ea:f8:cc:c5:14:8c:53:fd:93:3a:82:29: db:5c:a1:38:0d:6b:5a:4d:14:b9:0e:b5:e7:c1:4f:7e:f8:72: de:ba:30:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1/gLEFuOOKzCG/TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MDQxNDAwMDgzMloXDTI2MDcxMzAwMDgzMlowLzEtMCsGA1UEAxMk YjA2NmNkNDQtYTUwMy00YWNjLTgxMWItYjVmNzFhNDE4NzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvJfiWV7b58gNAC4lIK4SVBB0KUJeDoKI09W wNRVBW73vtuINdI/IT2tzT3yEMC3vLYjSsETQSgSlJBTxJl4t2ZpgJQP6AZYifwM MHWzsCVSaOxwvkiSbAy8ad2YgcLJs7et5Z59zWtKhGg9+SdzySP9KIP8lIxBzfsG 7zl1RBixquJtln6rb4gFyT7iqBneYGWavbP9bNcJQ6mJK8Yy6kUkZbSRaPdSUCDm pt3z0iKB5Nq1zY53QLSOunrD6IYistizsQ5x14Wv/7cyfWF1npPLjuVn1aOC+jqq lSMZ17ykgGO4N8Zt+Z9+9bsOSMx1IINnlwdMhNcgs+SmRH82EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNwEXJN4aA87wBfTqraNd9qNgPEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvNThiMDljZjctMDZjNS0z YTg3LWIwYzItYmU3NDgxNTUxYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLz/wAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBDfLhnNYIwADoJZdYmsqOwPXFVqdlTyOiFOWCFi+bVzZuRD+c4 v4mZCvNJwcOjYx85xEUTqS7eWlcDYVgwti+shuH587mrCq+TLwhzOOh7fMLhjFH9 gUQc8FWycAOtxHdFVFLsUjHHW47mPPN2nN/iwExwf7/AKcGkmTTVRACbYPoNmnT4 6EuueNqHReTHhY+5KqYDWEbIYPSXHe+gLyDshhEoymXv+UqhDsbi74xyTmswef2b n0nLchc7qTCMcpbZDJNYY4rIQtASRdSSwXgjb3e8z6QH8foatPv2IOr4zMUUjFP9 kzqCKdtcoTgNa1pNFLkOtefBT374ct66MN4= -----END CERTIFICATE-----Generated at Wed Apr 15 02:29:09 2026 by rpki-client