$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa File: db23e48f-79db-3106-8cec-6be0feb1b42a.roa (raw, json) Hash identifier: d0bdAROYQ/DX6t1KrEXBUrmiE26//3azq725yIRu0bA= Subject key identifier: 2D:76:A2:E3:9D:7D:B6:9C:8C:EA:4E:CE:48:2B:08:84:01:F1:17:AF Certificate issuer: /CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Certificate serial: 010D0C9F4328584D905A927EFFCC9B99C769E3C2 Authority key identifier: 80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 32267 IP address blocks: 2604:87c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:92:7e:ff:cc:9b:99:c7:69:e3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=7ac4645a-d916-4edd-b708-101137482427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:37:37:85:a6:da:92:df:ed:8f:44:cb:9b:26: a2:07:8b:9b:56:a3:26:5f:83:89:04:f2:0c:7e:7a: f9:be:df:86:7c:12:2f:59:25:d6:26:6f:76:a2:77: 4a:e3:3a:64:70:a1:99:34:25:6b:52:86:d1:24:38: 40:85:70:cc:f6:f7:7e:8d:32:5c:d0:c6:86:cf:a9: 3e:63:7c:9b:d3:0e:d9:ec:74:fd:40:0e:9e:49:97: 2a:83:fb:7b:9e:05:ae:c1:51:d4:95:d7:dd:e4:79: e1:49:5f:c8:84:bc:03:81:f9:be:61:60:b3:b5:c8: e2:db:83:26:70:21:82:6b:59:14:05:f9:75:38:e1: 56:59:86:7c:16:a6:99:96:c7:bb:a4:84:95:2c:09: 97:3e:a7:b2:e8:8e:1a:c0:c2:b9:c5:81:84:b3:84: a6:6d:0d:4b:c9:8b:24:09:7b:77:3a:50:7b:e1:e6: b4:23:13:e9:21:09:83:d2:64:42:20:8d:3d:64:27: 6b:d3:17:ca:55:54:c6:a0:6a:3f:04:ac:69:5a:d9: dd:04:ef:8c:55:39:19:ae:a1:f0:c1:1d:e3:af:16: 21:de:0e:7a:80:3b:d6:28:ec:2a:90:ab:2f:d1:dc: 16:c8:28:f1:ad:c8:87:ac:25:2f:c3:0d:b4:b0:bc: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:A2:E3:9D:7D:B6:9C:8C:EA:4E:CE:48:2B:08:84:01:F1:17:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl X509v3 Authority Key Identifier: keyid:80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer sbgp-ipAddrBlock: critical IPv6: 2604:87c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d0:01:f1:f6:91:50:37:da:8d:09:42:d5:de:77:ec:2c:49: 8a:cc:9f:c1:81:98:60:3b:ab:7a:11:83:bf:ab:92:77:47:a2: 3b:85:4d:60:d1:a4:dd:2c:d1:57:c6:63:6b:fa:42:fc:3d:8e: a4:ca:89:d9:82:1c:65:a8:ac:7a:57:97:82:dc:27:d3:00:99: 64:6e:59:52:1a:b8:87:e4:c2:4d:f9:14:fb:ad:e6:01:4e:b9: 22:44:d6:96:85:03:c4:f9:b3:61:4d:c4:80:f6:15:55:c6:77: b1:2d:a1:b7:d5:e9:a6:aa:6f:d0:43:ba:2a:0f:a5:45:2c:e7: 5b:18:a2:a3:09:71:c9:68:29:5d:00:01:4d:21:f0:3d:3f:e2: 72:92:37:2a:7c:12:eb:a1:f5:10:ca:b0:5e:25:ff:85:b4:d9: 6f:96:2b:b8:04:1d:33:b3:9b:ac:f5:9f:b3:7a:35:07:6d:19: 41:03:b6:b7:88:1a:4f:3c:a7:e1:64:cc:d1:b0:e9:ec:d3:58: 7a:86:3b:8f:56:b2:41:9a:de:c3:1a:bb:00:a3:34:23:89:2e: bb:9b:a8:28:61:5e:67:0f:4f:cd:c4:7c:03:1e:c6:d0:75:2b: e3:a5:83:89:12:f7:7f:60:5c:d7:89:f7:da:c6:ed:50:12:73: 68:da:92:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2QWpJ+/8ybmcdp48IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWViZDU3ZDQtYmRiYi00MjAzLTk3NWQtOTRiMzI4MzNl OGM3MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk N2FjNDY0NWEtZDkxNi00ZWRkLWI3MDgtMTAxMTM3NDgyNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTc3habakt/tj0TLmyaiB4ubVqMmX4OJBPIM fnr5vt+GfBIvWSXWJm92ondK4zpkcKGZNCVrUobRJDhAhXDM9vd+jTJc0MaGz6k+ Y3yb0w7Z7HT9QA6eSZcqg/t7ngWuwVHUldfd5HnhSV/IhLwDgfm+YWCztcji24Mm cCGCa1kUBfl1OOFWWYZ8FqaZlse7pISVLAmXPqey6I4awMK5xYGEs4SmbQ1LyYsk CXt3OlB74ea0IxPpIQmD0mRCII09ZCdr0xfKVVTGoGo/BKxpWtndBO+MVTkZrqHw wR3jrxYh3g56gDvWKOwqkKsv0dwWyCjxrciHrCUvww20sLxKcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC12ouOdfbacjOpOzkgrCIQB8RevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJk NTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIzMjgzM2U4YzcvZGIyM2U0OGYtNzlkYi0z MTA2LThjZWMtNmJlMGZlYjFiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWViZDU3ZDQtYmRiYi00MjAzLTk3 NWQtOTRiMzI4MzNlOGM3L2VlYmQ1N2Q0LWJkYmItNDIwMy05NzVkLTk0YjMyODMz ZThjNy5jcmwwHwYDVR0jBBgwFoAUgP6Sq7hiRQqC9sCikw1Okk3kI5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJkNTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIz MjgzM2U4YzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc0AHx9pFQN9qNCULV3nfsLEmKzJ/BgZhgO6t6EYO/q5J3R6I7hU1g 0aTdLNFXxmNr+kL8PY6kyonZghxlqKx6V5eC3CfTAJlkbllSGriH5MJN+RT7reYB TrkiRNaWhQPE+bNhTcSA9hVVxnexLaG31emmqm/QQ7oqD6VFLOdbGKKjCXHJaCld AAFNIfA9P+JykjcqfBLrofUQyrBeJf+FtNlvliu4BB0zs5us9Z+zejUHbRlBA7a3 iBpPPKfhZMzRsOns01h6hjuPVrJBmt7DGrsAozQjiS67m6goYV5nD0/NxHwDHsbQ dSvjpYOJEvd/YFzXiffaxu1QEnNo2pLM -----END CERTIFICATE-----Generated at Mon Apr 27 22:46:08 2026 by rpki-client