$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa File: fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa (raw, json) Hash identifier: 690UdVOxyzctzhEa+bbBnmmbSC0Xq6TR6VczXePTrCs= Subject key identifier: 7B:E1:48:5B:E5:41:5D:E9:13:BF:D9:48:18:98:4D:DD:96:27:74:1F Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Certificate serial: 010D0C9F4328584D746FBC815CF3CB50AD672B60 Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 0 IP address blocks: 2607:3000::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bc:81:5c:f3:cb:50:ad:67:2b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=82af6eaa-8e1d-4b9c-a9f4-68fcc5ae1f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:8e:30:87:7e:9e:6d:93:82:40:ba:42:b9: e7:18:15:8f:10:2f:80:92:6b:cf:6f:d6:a0:65:1e: 82:ca:fc:48:06:d4:35:14:c2:d0:1e:89:7c:53:2a: df:a0:07:ca:67:8f:19:86:6b:81:ed:59:01:a3:6f: c2:05:96:9c:89:52:71:f7:ec:43:6f:bb:c0:e0:92: db:1e:de:94:2b:6e:e4:de:cc:bb:4d:2a:59:a7:af: 11:d6:71:6b:12:06:7a:3a:f3:81:55:8e:d1:81:31: 60:b0:b3:59:47:c8:85:9b:83:78:07:cc:c7:26:86: b2:47:54:ea:13:2d:0a:a5:74:79:2f:29:ee:21:1b: a4:27:2a:d8:fd:b9:3f:ec:9c:b0:9c:f0:a8:0a:fd: 25:02:1b:5b:66:37:f4:eb:a7:b2:ed:f3:f7:43:e9: 1a:54:e0:f8:4d:60:eb:50:b1:4f:8b:63:39:3f:84: 9c:c7:5e:82:d8:83:fc:70:5c:f8:79:0c:7a:f1:98: 98:58:34:32:a8:fd:3f:8b:fa:4d:55:92:b0:8c:d1: d1:9f:6c:e2:e0:2f:ed:43:34:1c:11:0b:eb:87:66: f5:2f:a3:cb:c7:90:a9:6d:b7:dc:49:38:a3:5b:de: d3:8a:1d:63:29:92:74:78:34:65:8d:6f:b3:84:62: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E1:48:5B:E5:41:5D:E9:13:BF:D9:48:18:98:4D:DD:96:27:74:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/fa4ed464-29b3-3452-bdd9-6844fb4db9e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl X509v3 Authority Key Identifier: keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer sbgp-ipAddrBlock: critical IPv6: 2607:3000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:36:cb:83:d5:4a:52:31:8e:4d:33:46:a0:87:eb:dd:e1:11: 45:07:4c:ef:df:b9:03:27:47:ff:d6:52:7a:37:08:66:16:e4: c8:5c:23:7b:a3:9f:d5:86:04:4a:27:bf:2e:4d:54:ab:3d:8f: a7:05:c9:23:1b:3c:60:61:c8:6f:73:48:f3:15:51:3a:df:57: 58:ed:f0:86:43:98:64:1c:16:e7:ad:99:89:e7:e7:cd:e9:7b: 9d:ff:af:a1:6c:3c:15:72:04:63:28:59:d1:46:7d:a4:42:c2: e8:5f:20:c6:e5:53:11:22:e3:fe:28:29:8d:0b:c2:4c:37:b5: 83:2d:07:24:27:07:b8:6d:cd:b8:b0:23:1a:bf:d0:47:33:94: 5a:93:70:cc:d4:8f:a9:63:78:dc:4c:2f:3b:48:0f:63:8e:d9: 87:67:fd:54:b5:9c:63:33:b4:94:c1:f4:90:7a:75:97:75:9b: 45:45:68:90:e7:d2:e7:30:8a:32:7f:78:3a:5e:11:91:b3:64: ea:0b:fc:93:d7:f1:af:c6:ae:9d:ce:51:a1:23:9f:d5:2e:6d: af:ef:37:37:fa:e0:10:6d:15:8f:75:1f:a4:5a:29:3a:05:ae: c5:f8:2a:01:81:92:ef:74:12:6e:78:24:42:a5:84:93:77:28: 1e:73:6d:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b7yBXPPLUK1nK2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3 ODI5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ODJhZjZlYWEtOGUxZC00YjljLWE5ZjQtNjhmY2M1YWUxZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupqOMId+nm2TgkC6QrnnGBWPEC+AkmvPb9ag ZR6CyvxIBtQ1FMLQHol8UyrfoAfKZ48ZhmuB7VkBo2/CBZaciVJx9+xDb7vA4JLb Ht6UK27k3sy7TSpZp68R1nFrEgZ6OvOBVY7RgTFgsLNZR8iFm4N4B8zHJoayR1Tq Ey0KpXR5LynuIRukJyrY/bk/7JywnPCoCv0lAhtbZjf066ey7fP3Q+kaVOD4TWDr ULFPi2M5P4Scx16C2IP8cFz4eQx68ZiYWDQyqP0/i/pNVZKwjNHRn2zi4C/tQzQc EQvrh2b1L6PLx5CpbbfcSTijW97Tih1jKZJ0eDRljW+zhGJMuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHvhSFvlQV3pE7/ZSBiYTd2WJ3QfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3 Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvZmE0ZWQ0NjQtMjliMy0z NDUyLWJkZDktNjg0NGZiNGRiOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxN2NlZDUtNmUwMy00YzIwLTll YjItY2FhNTdhMmY3ODI5LzUwMTdjZWQ1LTZlMDMtNGMyMC05ZWIyLWNhYTU3YTJm NzgyOS5jcmwwHwYDVR0jBBgwFoAUIr6PGmFUenj3XYro0kCXNLfsebEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1 N2EyZjc4MjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcwADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiNsuD1UpSMY5NM0agh+vd4RFFB0zv37kDJ0f/1lJ6NwhmFuTIXCN7 o5/VhgRKJ78uTVSrPY+nBckjGzxgYchvc0jzFVE631dY7fCGQ5hkHBbnrZmJ5+fN 6Xud/6+hbDwVcgRjKFnRRn2kQsLoXyDG5VMRIuP+KCmNC8JMN7WDLQckJwe4bc24 sCMav9BHM5Rak3DM1I+pY3jcTC87SA9jjtmHZ/1UtZxjM7SUwfSQenWXdZtFRWiQ 59LnMIoyf3g6XhGRs2TqC/yT1/Gvxq6dzlGhI5/VLm2v7zc3+uAQbRWPdR+kWik6 Ba7F+CoBgZLvdBJueCRCpYSTdygec21P -----END CERTIFICATE-----Generated at Thu Apr 16 23:58:03 2026 by rpki-client