$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa File: d4b45eb4-09b2-3b7d-a70a-922354aad665.roa (raw, json) Hash identifier: lDEUHNpmvYq8LVBhmPKz6M1QDgS2fYzY+f00k9gSeYQ= Subject key identifier: F2:B0:FD:95:60:09:52:C8:E3:4D:86:31:C4:DE:E8:42:A3:99:D2:FD Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584D75D52A5CA6457EC1E7A6FE80 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 394111 IP address blocks: 2607:6f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2a:5c:a6:45:7e:c1:e7:a6:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=5b21cd55-cb37-404a-a483-68269ae12158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:39:32:ec:0c:62:08:d3:11:43:cd:30:dd: ce:8f:40:f4:95:4e:94:bd:ed:5b:30:44:de:dc:41: 2a:41:91:39:f5:14:48:2f:18:d1:e3:8d:36:5a:4c: a8:3d:53:0b:e7:83:9d:10:a7:55:92:06:20:29:21: da:ea:2b:23:6f:9d:52:29:93:65:b4:f2:a0:0d:52: 04:fc:f2:5a:55:25:ca:f9:5a:75:0d:9b:c1:f6:68: 58:09:6d:81:e1:c2:76:7f:1f:e1:f0:6d:4b:0c:f0: 77:ef:4a:aa:bd:04:9b:85:13:fd:53:dc:8e:d2:7f: 83:a7:94:63:93:e2:8d:65:8a:2d:29:b3:08:ae:a8: da:b6:3b:fd:c3:b6:11:a4:50:20:b5:95:d7:31:59: 94:98:4d:7f:a0:19:66:b8:5f:48:87:a1:f8:2d:4e: 28:94:29:38:f5:ba:18:4b:8b:14:3c:c9:58:73:31: 0d:2c:49:37:3d:d2:10:d1:4f:2f:e2:fc:5a:0c:44: f2:34:79:d2:d1:51:79:37:dc:2c:71:5c:ca:cb:e2: 67:d1:6c:5e:92:7a:4a:ab:45:3c:c2:f9:12:d2:f9: f9:be:0a:f5:42:2b:93:f2:8a:28:47:f2:fb:c0:23: f2:0b:f0:fc:2d:95:e8:f0:e1:85:61:85:bf:d0:f0: f5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B0:FD:95:60:09:52:C8:E3:4D:86:31:C4:DE:E8:42:A3:99:D2:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv6: 2607:6f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:50:1d:46:c8:ee:f6:cf:30:bb:0e:32:61:41:71:68:ed:eb: 85:2f:30:80:f6:6f:76:2f:4c:3c:01:f6:b9:2d:e5:96:a7:8c: ee:b5:70:c4:93:cc:bc:30:11:64:6f:d4:05:00:dd:a7:c2:a1: 1b:4c:23:e3:9f:a6:37:27:43:71:6a:c3:90:d0:9c:96:67:41: f4:60:b6:02:f0:35:ae:7c:22:10:6b:7f:1b:83:2b:5f:fc:83: 3f:79:42:37:55:8d:e5:e5:ab:d9:d4:69:0a:e4:16:64:40:34: 12:d3:8a:89:de:72:00:59:14:12:fa:db:7e:cb:ad:74:5a:43: 11:53:b7:a4:49:1f:cc:ae:77:70:75:77:c1:18:72:67:6a:3b: 14:bf:ef:89:8b:c6:76:32:a6:34:90:e6:2f:2b:24:5b:7f:3a: 61:84:5c:59:4d:aa:57:ac:64:c6:70:2e:6f:e7:7b:1e:0e:92: a6:cb:c2:2e:69:5d:68:66:68:f4:52:a7:98:81:6d:60:cf:4d: 0c:3e:b5:ed:da:bc:39:66:4a:dc:0f:da:c2:14:61:72:86:d0: ac:5b:04:87:47:6a:0d:95:46:da:10:3a:37:59:9e:e4:69:04: c5:ed:4f:22:e4:a4:eb:de:b8:ff:66:8d:1d:f9:7a:4d:05:55: c6:b4:58:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE111SpcpkV+weem/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NWIyMWNkNTUtY2IzNy00MDRhLWE0ODMtNjgyNjlhZTEyMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSA5MuwMYgjTEUPNMN3Oj0D0lU6Uve1bMETe 3EEqQZE59RRILxjR4402WkyoPVML54OdEKdVkgYgKSHa6isjb51SKZNltPKgDVIE /PJaVSXK+Vp1DZvB9mhYCW2B4cJ2fx/h8G1LDPB370qqvQSbhRP9U9yO0n+Dp5Rj k+KNZYotKbMIrqjatjv9w7YRpFAgtZXXMVmUmE1/oBlmuF9Ih6H4LU4olCk49boY S4sUPMlYczENLEk3PdIQ0U8v4vxaDETyNHnS0VF5N9wscVzKy+Jn0WxeknpKq0U8 wvkS0vn5vgr1QiuT8oooR/L7wCPyC/D8LZXo8OGFYYW/0PD17QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPKw/ZVgCVLI402GMcTe6EKjmdL9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZDRiNDVlYjQtMDliMi0z YjdkLWE3MGEtOTIyMzU0YWFkNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdvADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvUB1GyO72zzC7DjJhQXFo7euFLzCA9m92L0w8Afa5LeWWp4zutXDE k8y8MBFkb9QFAN2nwqEbTCPjn6Y3J0NxasOQ0JyWZ0H0YLYC8DWufCIQa38bgytf /IM/eUI3VY3l5avZ1GkK5BZkQDQS04qJ3nIAWRQS+tt+y610WkMRU7ekSR/Mrndw dXfBGHJnajsUv++Ji8Z2MqY0kOYvKyRbfzphhFxZTapXrGTGcC5v53seDpKmy8Iu aV1oZmj0UqeYgW1gz00MPrXt2rw5ZkrcD9rCFGFyhtCsWwSHR2oNlUbaEDo3WZ7k aQTF7U8i5KTr3rj/Zo0d+XpNBVXGtFjQ -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:46 2026 by rpki-client