$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa File: 0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa (raw, json) Hash identifier: W88lLCPX29mPYdmiVC2IVvq+sibiF9w0r2r8CzIEojM= Subject key identifier: E6:65:43:74:E1:D1:6E:C3:C9:F2:61:F1:CB:E5:0F:54:31:5A:60:31 Certificate issuer: /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Certificate serial: 010D0C9F4328584D6C0FB205D97A38997CFCE100 Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 3356 IP address blocks: 2606:5cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b2:05:d9:7a:38:99:7c:fc:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=f8efb093-fa6c-4983-a930-abd118eef53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:77:79:ad:52:3c:48:b6:6a:69:5a:5a:a2: 11:2d:b5:c7:ee:86:38:a3:f7:81:95:aa:79:0f:64: 32:af:ee:2f:72:7e:1f:14:da:0e:38:e4:7d:09:80: 5e:c5:ea:43:af:5a:f5:95:32:a0:da:b5:e2:07:b6: 36:07:4d:36:5c:54:d2:79:2d:4e:84:16:06:4c:da: 8c:0e:d5:a8:f9:de:a1:42:df:27:e3:ca:4d:75:90: 64:5d:fb:5a:24:84:b2:82:cb:05:45:08:9b:26:e5: 82:16:b4:7d:16:59:ef:62:84:35:97:58:71:48:08: e7:e3:2d:25:37:ae:74:b7:01:a4:51:2a:81:ea:39: 5b:a7:7d:07:1a:ab:4e:fa:18:a3:c9:c7:45:29:fe: f2:e0:fb:8c:c4:a4:db:d6:16:53:8c:e7:ef:80:77: ff:b8:03:87:37:5e:ee:b2:00:9e:4e:9f:0c:ad:8d: c0:b9:08:bc:b4:25:a4:45:6f:6c:3b:46:99:13:41: f2:70:62:45:62:c6:55:2e:ce:d4:80:15:f0:e7:8d: 63:de:2e:a5:31:29:50:c0:0c:66:98:cd:03:17:e7: ab:4a:0d:92:a6:01:05:bb:bb:33:b5:df:ca:8d:0f: ca:d2:48:68:54:df:f0:f0:56:1d:78:7b:80:76:5d: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:65:43:74:E1:D1:6E:C3:C9:F2:61:F1:CB:E5:0F:54:31:5A:60:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/0dd1b67f-6f9c-3a93-8f23-530df7b813a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl X509v3 Authority Key Identifier: keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer sbgp-ipAddrBlock: critical IPv6: 2606:5cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:3d:33:e7:86:92:4b:82:3e:37:ff:db:5d:4e:97:50:87:5e: 5b:55:8f:ef:2c:87:48:bd:2b:9c:7e:b7:13:39:89:bd:90:a4: 91:e3:7f:0e:aa:3d:3d:57:fa:d0:33:90:ee:45:39:e2:44:b2: dd:e4:77:b4:89:23:4e:17:39:7c:54:6f:d8:2e:0d:94:06:90: a7:bb:34:3c:d8:85:a9:1b:bc:ea:cb:58:df:fb:20:62:b4:3b: 10:5b:56:db:7e:e6:54:03:bb:c1:99:1c:e4:51:fe:d4:50:f6: 7f:0d:af:42:cf:39:ae:f9:e1:b2:08:12:08:f8:3d:b8:8c:6e: 20:67:1b:45:68:8b:70:ef:df:6d:83:94:e2:7c:89:04:b0:c8: 10:df:6e:11:75:ec:c8:e1:7c:91:ac:5d:e1:a8:43:90:0d:93: 85:37:55:7e:ce:ea:47:0c:f1:17:b6:ce:65:b6:b3:00:9b:05: 6a:64:df:17:22:f1:6a:44:7b:6c:15:c5:5e:61:88:19:41:91: 0f:5c:68:8f:d1:26:ec:55:79:98:63:a1:e7:1a:9d:ee:11:d7: 6d:1f:f9:90:65:6a:ed:58:35:c9:1c:84:4b:27:70:c4:6c:84: 7b:7d:b7:3b:45:2c:bc:d8:33:62:0a:3b:b5:1a:80:7e:d6:91: db:90:f3:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1sD7IF2Xo4mXz84QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3 YTBmMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZjhlZmIwOTMtZmE2Yy00OTgzLWE5MzAtYWJkMTE4ZWVmNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZF3ea1SPEi2amlaWqIRLbXH7oY4o/eBlap5 D2Qyr+4vcn4fFNoOOOR9CYBexepDr1r1lTKg2rXiB7Y2B002XFTSeS1OhBYGTNqM DtWo+d6hQt8n48pNdZBkXftaJISygssFRQibJuWCFrR9FlnvYoQ1l1hxSAjn4y0l N650twGkUSqB6jlbp30HGqtO+hijycdFKf7y4PuMxKTb1hZTjOfvgHf/uAOHN17u sgCeTp8MrY3AuQi8tCWkRW9sO0aZE0HycGJFYsZVLs7UgBXw541j3i6lMSlQwAxm mM0DF+erSg2SpgEFu7sztd/KjQ/K0khoVN/w8FYdeHuAdl13KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOZlQ3Th0W7DyfJh8cvlD1QxWmAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1 OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvMGRkMWI2N2YtNmY5Yy0z YTkzLThmMjMtNTMwZGY3YjgxM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4 MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/PTPnhpJLgj43/9tdTpdQh15bVY/vLIdIvSucfrcTOYm9kKSR438O qj09V/rQM5DuRTniRLLd5He0iSNOFzl8VG/YLg2UBpCnuzQ82IWpG7zqy1jf+yBi tDsQW1bbfuZUA7vBmRzkUf7UUPZ/Da9Czzmu+eGyCBII+D24jG4gZxtFaItw799t g5TifIkEsMgQ324RdezI4XyRrF3hqEOQDZOFN1V+zupHDPEXts5ltrMAmwVqZN8X IvFqRHtsFcVeYYgZQZEPXGiP0SbsVXmYY6HnGp3uEddtH/mQZWrtWDXJHIRLJ3DE bIR7fbc7RSy82DNiCju1GoB+1pHbkPOw -----END CERTIFICATE-----Generated at Fri Apr 17 13:06:56 2026 by rpki-client