$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa File: 30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa (raw, json) Hash identifier: 66QDIZncTcIBCTD7w3ophOelfZTt+qVp7YOgxhI0U0s= Subject key identifier: 31:97:90:F1:F2:E6:24:F0:90:15:FB:C4:0E:D2:67:73:0B:38:92:D0 Certificate issuer: /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Certificate serial: 010D0C9F4328584D76644D0DBFF0A12D2EA7EDC0 Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa Signing time: Fri 10 Apr 2026 17:49:03 +0000 ROA not before: Fri 10 Apr 2026 17:49:03 +0000 ROA not after: Thu 09 Jul 2026 17:49:03 +0000 asID: 14618 IP address blocks: 2605:c540:8c00::/44 maxlen: 56 2605:c540:8c10::/44 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:76:64:4d:0d:bf:f0:a1:2d:2e:a7:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27 Validity Not Before: Apr 10 17:49:03 2026 GMT Not After : Jul 9 17:49:03 2026 GMT Subject: CN=d31fbdb4-d1af-443d-bf21-30569868643e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:9b:e2:13:48:20:52:10:c4:fa:49:64:21: d9:83:2b:b2:63:ee:4b:b0:96:38:6e:10:4b:8d:e5: a1:f7:1d:f5:a6:a5:93:68:fc:17:98:1e:67:5f:4a: e2:c8:44:83:b4:1e:ab:b9:3c:59:b9:6b:e9:67:ca: 0d:bd:b9:34:87:ba:6f:ec:58:e0:c7:e4:6d:e6:32: c8:cb:d8:27:b9:aa:cf:f1:93:d6:e3:bd:74:83:49: 1b:4f:83:ff:9c:bf:99:d4:7f:1b:84:3b:d4:e1:24: 13:19:91:86:c7:d2:0a:d7:25:5a:f2:60:76:29:55: 55:25:ec:db:f8:ce:10:06:d7:19:52:b7:29:68:62: 6b:fc:58:76:fa:b3:f3:56:e7:34:ef:4c:12:97:8a: 6c:d8:45:c4:c3:de:fc:a9:9d:5f:8e:f3:97:b7:a2: d2:86:54:b7:ab:b9:af:0c:be:be:f7:2e:76:42:70: 55:b4:72:e6:73:dd:74:db:7d:26:57:6d:8f:91:af: f5:28:24:4e:14:3c:99:ad:fd:fd:b0:b9:82:15:03: 8f:52:9b:c2:9d:99:d6:3c:c2:cd:df:2f:6f:69:77: f0:f2:92:66:5f:05:56:4a:00:3c:8a:8e:7b:5b:b6: 59:a6:04:c5:ed:ba:fd:f8:6c:f1:79:21:03:29:51: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:97:90:F1:F2:E6:24:F0:90:15:FB:C4:0E:D2:67:73:0B:38:92:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/30fc1cb1-7fa2-3ab0-97b6-0367e80ee3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl X509v3 Authority Key Identifier: keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer sbgp-ipAddrBlock: critical IPv6: 2605:c540:8c00::/43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2a:ba:d5:8d:f2:d0:a5:c8:52:23:f7:49:0e:e9:9d:00:13: 36:9b:f3:54:7e:e0:93:59:ec:e6:eb:16:61:b3:09:90:2e:dd: 5d:14:53:1e:40:1f:25:33:80:1b:f2:72:ba:86:23:e7:77:b2: 07:12:2c:49:10:eb:a0:34:65:76:fd:0c:79:16:5e:9a:07:53: 67:2f:44:80:5e:b5:7b:8f:f9:90:39:ef:e2:42:b9:e2:f8:98: 41:6f:40:d4:43:ee:45:1f:5e:3f:0b:75:d0:df:b5:0e:1b:eb: 35:ae:2c:b1:ec:15:3a:43:06:d5:a4:06:6f:f8:61:49:ea:fd: 5c:88:70:24:79:7d:33:8c:23:a8:0a:86:dc:55:a4:25:51:36: a5:5f:ca:bd:42:ee:2b:2d:da:e1:b8:98:52:ff:3e:ba:6f:53: f7:c6:02:95:c0:94:28:d0:78:fe:ff:4d:91:cd:03:b4:ed:64: a8:6a:d7:b6:e7:3d:4d:16:5b:17:b1:de:a0:62:4c:e4:f7:75: 53:a6:12:22:1b:24:fb:73:3f:0b:30:11:e0:1c:e4:11:59:e2: 45:05:56:fc:d0:56:ac:78:3b:6e:e8:57:6f:61:be:65:4a:18: 34:53:2f:7c:5f:af:95:92:c6:87:17:b6:8f:9c:9b:55:d8:8b: 10:5c:8a:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE12ZE0Nv/ChLS6n7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj YzI3MB4XDTI2MDQxMDE3NDkwM1oXDTI2MDcwOTE3NDkwM1owLzEtMCsGA1UEAxMk ZDMxZmJkYjQtZDFhZi00NDNkLWJmMjEtMzA1Njk4Njg2NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHKb4hNIIFIQxPpJZCHZgyuyY+5LsJY4bhBL jeWh9x31pqWTaPwXmB5nX0riyESDtB6ruTxZuWvpZ8oNvbk0h7pv7Fjgx+Rt5jLI y9gnuarP8ZPW4710g0kbT4P/nL+Z1H8bhDvU4SQTGZGGx9IK1yVa8mB2KVVVJezb +M4QBtcZUrcpaGJr/Fh2+rPzVuc070wSl4ps2EXEw978qZ1fjvOXt6LShlS3q7mv DL6+9y52QnBVtHLmc910230mV22Pka/1KCROFDyZrf39sLmCFQOPUpvCnZnWPMLN 3y9vaXfw8pJmXwVWSgA8io57W7ZZpgTF7br9+GzxeSEDKVHg4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGXkPHy5iTwkBX7xA7SZ3MLOJLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvMzBmYzFjYjEtN2ZhMi0z YWIwLTk3YjYtMDM2N2U4MGVlM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5 NmFjY2NjMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgXFQIwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAEqutWN8tClyFIj90kO6Z0AEzab81R+4JNZ7ObrFmGzCZAu3V0U Ux5AHyUzgBvycrqGI+d3sgcSLEkQ66A0ZXb9DHkWXpoHU2cvRIBetXuP+ZA57+JC ueL4mEFvQNRD7kUfXj8LddDftQ4b6zWuLLHsFTpDBtWkBm/4YUnq/VyIcCR5fTOM I6gKhtxVpCVRNqVfyr1C7ist2uG4mFL/PrpvU/fGApXAlCjQeP7/TZHNA7TtZKhq 17bnPU0WWxex3qBiTOT3dVOmEiIbJPtzPwswEeAc5BFZ4kUFVvzQVqx4O27oV29h vmVKGDRTL3xfr5WSxocXto+cm1XYixBcivU= -----END CERTIFICATE-----Generated at Fri Apr 17 06:51:38 2026 by rpki-client