$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: GCB1kNnZ/9PyHlrKlDUw4R8XZ6h7If8h0F6HOXk436c= Subject key identifier: 63:6A:AA:0D:A5:5D:3E:F2:A8:D3:8F:C4:10:78:F5:80:BB:33:E1:C5 Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584D7CCFCA3AE7C867ED5E631B80 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:ca:3a:e7:c8:67:ed:5e:63:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=35798917-9ff1-4244-aaf7-4863b643599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:e8:c9:dd:fd:b6:44:78:06:86:a3:f0:45: f6:1d:be:7c:ce:67:dc:0d:97:fb:18:0b:46:be:70: 64:42:b4:5f:be:29:0a:8c:fa:19:a3:46:71:56:a2: e5:83:a5:14:1b:36:b4:fd:38:8a:40:16:a9:bb:77: 70:83:e5:9a:64:4d:6e:1b:5e:f6:77:60:68:0c:2c: 46:2c:d9:61:f2:0e:2f:48:5a:9f:4b:c7:38:e3:28: da:a9:f3:33:27:95:14:04:76:85:79:8c:f2:2c:da: d0:31:e8:a9:96:71:75:30:be:a2:68:15:0e:47:60: cb:81:ca:ae:5a:56:1f:6f:eb:30:17:69:cd:c3:28: 8e:f0:55:c8:a2:d3:ea:22:61:1b:05:3c:c3:64:2b: 82:c8:26:f7:96:26:b7:b4:95:82:d8:83:01:60:77: 76:83:20:90:80:75:d3:f5:f9:de:24:fb:7d:a6:0e: 96:f7:3b:1c:da:5b:30:41:1d:f3:15:ed:04:b4:81: 42:f8:a4:51:57:38:16:97:47:8a:12:3f:4b:ce:b5: 89:99:ea:4e:db:ee:d0:c6:62:7f:53:12:c4:f2:86: 09:42:94:c3:26:59:99:71:36:94:89:9a:ef:1b:98: b0:0a:a8:4b:aa:c3:d3:8f:1b:b9:50:e0:e0:fa:ac: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:AA:0D:A5:5D:3E:F2:A8:D3:8F:C4:10:78:F5:80:BB:33:E1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:59:2c:a0:c6:84:b5:eb:b0:aa:6c:3c:4e:b5:6a:a2:60:c5: 77:ed:16:8d:cb:5e:ee:03:f5:be:57:58:43:61:69:b9:94:9e: 79:f3:21:77:59:f5:99:12:52:13:c0:37:db:07:07:3f:10:07: 26:b6:e1:61:61:27:b2:21:68:1c:22:1e:eb:aa:9e:df:9a:ff: 58:20:de:f4:49:fd:ca:2c:8b:c2:27:44:03:bb:4b:1c:9b:bc: b9:47:d6:8b:e5:32:b4:1b:e3:9d:f5:c6:7c:da:20:59:e1:b2: 3d:d2:4a:14:3a:1f:74:52:12:15:cc:c6:1b:18:1a:5a:cd:cd: ca:1e:8e:7f:77:7b:5d:13:1b:e6:03:57:cb:97:93:3b:11:fc: c9:e3:45:44:c0:b8:59:6f:2c:be:23:3e:3f:5d:6a:59:c0:03: 97:7a:3b:5d:a8:3d:fc:ca:3d:4c:0b:be:c8:6d:ff:c5:fd:54: f1:f1:60:e0:22:d5:94:14:91:9e:a7:3d:b1:01:ac:39:b2:b4: 84:f8:73:09:3d:86:5c:14:9c:77:48:a6:c8:48:2e:c8:47:c2: dc:0a:25:26:74:a2:6d:8a:d3:44:1d:a3:4f:cd:95:85:1d:ba: 1c:e0:9a:ee:88:7f:ca:f2:62:16:b6:0e:79:56:e9:f1:c9:9a: 58:cf:31:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE18z8o658hn7V5jG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk MzU3OTg5MTctOWZmMS00MjQ0LWFhZjctNDg2M2I2NDM1OTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hroyd39tkR4Boaj8EX2Hb58zmfcDZf7GAtG vnBkQrRfvikKjPoZo0ZxVqLlg6UUGza0/TiKQBapu3dwg+WaZE1uG172d2BoDCxG LNlh8g4vSFqfS8c44yjaqfMzJ5UUBHaFeYzyLNrQMeiplnF1ML6iaBUOR2DLgcqu WlYfb+swF2nNwyiO8FXIotPqImEbBTzDZCuCyCb3lia3tJWC2IMBYHd2gyCQgHXT 9fneJPt9pg6W9zsc2lswQR3zFe0EtIFC+KRRVzgWl0eKEj9LzrWJmepO2+7QxmJ/ UxLE8oYJQpTDJlmZcTaUiZrvG5iwCqhLqsPTjxu5UODg+qwviwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGNqqg2lXT7yqNOPxBB49YC7M+HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZZLKDGhLXrsKpsPE61aqJgxXftFo3LXu4D9b5XWENhabmUnnnz IXdZ9ZkSUhPAN9sHBz8QBya24WFhJ7IhaBwiHuuqnt+a/1gg3vRJ/cosi8InRAO7 SxybvLlH1ovlMrQb4531xnzaIFnhsj3SShQ6H3RSEhXMxhsYGlrNzcoejn93e10T G+YDV8uXkzsR/MnjRUTAuFlvLL4jPj9dalnAA5d6O12oPfzKPUwLvsht/8X9VPHx YOAi1ZQUkZ6nPbEBrDmytIT4cwk9hlwUnHdIpshILshHwtwKJSZ0om2K00Qdo0/N lYUduhzgmu6If8ryYha2DnlW6fHJmljPMXw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:30:46 2026 by rpki-client