$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa File: c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa (raw, json) Hash identifier: +pwF+jbwnbwTr8XF4ah/OzvF+gQheh5xj04E+GRLgvg= Subject key identifier: FA:DB:D2:2D:52:49:36:1A:2C:EE:D6:A4:D0:FE:C3:1E:21:92:24:2D Certificate issuer: /CN=cf6e862f-83c2-4143-b47a-74db6f210162 Certificate serial: 010D0C9F4328584D4D5A6BE4F6C17A2CEEB5A380 Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 400034 IP address blocks: 2607:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:6b:e4:f6:c1:7a:2c:ee:b5:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=8d2ac7c9-495e-4266-b63e-9dc715a0d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:a2:9b:da:97:be:7c:44:70:42:93:bb:1b: 04:0f:fd:c9:de:0b:70:e0:9e:36:5a:66:b5:9f:40: 86:18:69:8f:be:bf:ea:39:03:20:0a:d9:ab:04:b1: 3e:68:8a:51:af:df:12:45:e0:8d:02:93:4f:9c:9e: b5:40:cd:82:a8:33:a9:5a:8f:34:d8:82:28:d0:f5: 1a:51:5d:73:23:d2:69:b5:35:9b:18:c7:39:0b:6c: a6:8d:df:cc:f6:e0:77:ce:65:d7:32:56:d4:ea:7c: d4:72:2c:e8:f7:53:56:08:ee:d7:df:7e:72:f5:5d: da:69:01:12:36:82:f0:31:e1:8a:59:3d:40:a2:04: bc:9f:f1:99:01:bf:1e:af:01:0e:7e:9d:c4:09:89: f3:2a:8b:93:6c:ba:6a:06:c4:ed:20:d1:9b:c7:e6: f8:e5:79:0a:4c:e1:ef:34:13:7e:88:80:e9:a2:09: 9a:13:54:e6:73:10:86:8c:fd:fe:c6:e9:ac:2e:3a: 71:1d:c2:5c:3f:19:02:04:8a:8d:16:c8:c7:25:05: fa:ed:2b:a9:f7:ab:7f:df:84:0c:74:37:89:19:f0: 06:f8:71:61:c7:eb:fd:84:87:40:8c:c0:2a:62:ae: 51:fd:0b:a9:64:f5:04:24:d3:2d:83:49:f0:bc:8c: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:D2:2D:52:49:36:1A:2C:EE:D6:A4:D0:FE:C3:1E:21:92:24:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/c5e091d6-90c9-3dde-b663-f4d4419f0de4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl X509v3 Authority Key Identifier: keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer sbgp-ipAddrBlock: critical IPv6: 2607:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:df:37:be:76:1a:bb:33:93:25:2b:75:17:54:5c:4b:e5:0c: 9c:85:1f:97:c2:6f:68:a5:77:19:88:79:92:3f:e3:c4:de:9b: 71:94:5a:20:20:cc:b7:90:6d:e5:bb:3f:74:ec:b5:d0:1b:e8: 21:7e:31:d3:c5:d9:3a:65:c2:44:6e:c2:aa:89:76:b0:73:0f: e7:2c:6c:e8:a2:3f:7a:e2:8d:9f:f9:3d:36:e2:08:29:32:d4: 2e:60:ee:63:7b:37:25:9a:b9:7c:b3:b8:3f:b4:78:23:39:66: 94:d7:7b:74:15:b8:1f:69:6b:c3:52:4b:f7:c4:98:97:78:26: b2:d8:2c:64:8e:e7:f7:04:43:1f:90:53:30:ae:7d:cb:ed:30: d0:11:4a:7b:c8:46:f2:70:36:20:c2:dc:86:13:d0:98:68:1b: 20:d3:27:0b:9f:0f:87:75:e4:6a:19:e3:6e:f5:e1:fb:93:64: 13:b6:23:8a:75:93:a8:5c:c7:a2:e5:a8:b3:65:d3:72:55:23: 11:63:7f:5c:64:26:1f:19:20:c5:36:e1:01:ae:0c:95:7e:8e: 56:8b:07:4d:f9:87:4f:52:b4:17:0c:ea:e2:e0:fa:89:f2:49: 64:c7:74:59:30:c8:39:98:e5:73:e6:bd:5f:a3:50:ef:9b:6e: 50:56:29:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWmvk9sF6LO61o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2ZTg2MmYtODNjMi00MTQzLWI0N2EtNzRkYjZmMjEw MTYyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OGQyYWM3YzktNDk1ZS00MjY2LWI2M2UtOWRjNzE1YTBkNjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW+im9qXvnxEcEKTuxsED/3J3gtw4J42Wma1 n0CGGGmPvr/qOQMgCtmrBLE+aIpRr98SReCNApNPnJ61QM2CqDOpWo802IIo0PUa UV1zI9JptTWbGMc5C2ymjd/M9uB3zmXXMlbU6nzUcizo91NWCO7X335y9V3aaQES NoLwMeGKWT1AogS8n/GZAb8erwEOfp3ECYnzKouTbLpqBsTtINGbx+b45XkKTOHv NBN+iIDpogmaE1TmcxCGjP3+xumsLjpxHcJcPxkCBIqNFsjHJQX67Sup96t/34QM dDeJGfAG+HFhx+v9hIdAjMAqYq5R/QupZPUEJNMtg0nwvIzleQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPrb0i1SSTYaLO7WpND+wx4hkiQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjZl ODYyZi04M2MyLTQxNDMtYjQ3YS03NGRiNmYyMTAxNjIvYzVlMDkxZDYtOTBjOS0z ZGRlLWI2NjMtZjRkNDQxOWYwZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Y2ZTg2MmYtODNjMi00MTQzLWI0 N2EtNzRkYjZmMjEwMTYyL2NmNmU4NjJmLTgzYzItNDE0My1iNDdhLTc0ZGI2ZjIx MDE2Mi5jcmwwHwYDVR0jBBgwFoAUTqdfJXAcRrA1UEMoWSy9Mk+o0WcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjZlODYyZi04M2MyLTQxNDMtYjQ3YS03NGRi NmYyMTAxNjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB23ze+dhq7M5MlK3UXVFxL5QychR+Xwm9opXcZiHmSP+PE3ptxlFog IMy3kG3luz907LXQG+ghfjHTxdk6ZcJEbsKqiXawcw/nLGzooj964o2f+T024ggp MtQuYO5jezclmrl8s7g/tHgjOWaU13t0FbgfaWvDUkv3xJiXeCay2Cxkjuf3BEMf kFMwrn3L7TDQEUp7yEbycDYgwtyGE9CYaBsg0ycLnw+HdeRqGeNu9eH7k2QTtiOK dZOoXMei5aizZdNyVSMRY39cZCYfGSDFNuEBrgyVfo5WiwdN+YdPUrQXDOri4PqJ 8klkx3RZMMg5mOVz5r1fo1Dvm25QVilg -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:17 2026 by rpki-client