$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa File: 7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa (raw, json) Hash identifier: ZW87di3z1zXO3S+A1PuLSYxHHn7SYFsb1pp1jan24Zw= Subject key identifier: B4:C0:19:EF:33:53:6F:17:04:B6:68:86:88:25:A7:FE:AA:3E:97:75 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584D75D53CCBA2656DCE38C43E80 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 20253 IP address blocks: 2606:bc40:f0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:3c:cb:a2:65:6d:ce:38:c4:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=564c4195-2bd2-4fd4-a965-a7fc685426e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:07:1f:6e:e4:0d:6b:29:cf:71:1d:75:0d: 08:99:ac:e7:f8:0d:92:ff:6f:75:ee:c3:ae:b1:dd: 1c:5c:94:97:a3:c8:01:f4:a0:68:a1:9f:0f:55:5a: 5a:08:8d:d0:19:94:be:4e:51:06:6c:13:7f:59:2a: 82:c9:8b:21:e2:38:91:9c:fe:f5:d6:0a:83:12:2e: d3:0f:6f:61:2f:b7:18:76:52:e7:77:97:06:dd:07: 65:7f:a0:e8:92:6f:29:4b:1a:ee:5d:9f:2d:3f:71: 5d:83:de:65:53:28:d2:c4:3f:41:63:70:17:d6:a2: da:94:8f:3b:4a:9c:fc:90:ee:66:dc:db:67:55:94: f8:fa:16:f6:04:05:e8:27:e7:5b:52:44:05:cf:fd: 4c:a8:93:2d:82:e0:d7:7a:1f:e7:cd:e3:70:01:43: bf:95:3c:b8:79:95:76:40:41:e4:a2:e2:3a:66:e3: 4a:17:77:bc:8c:b8:b3:f7:14:4f:31:52:26:e4:d9: 11:34:de:a8:90:9b:49:cf:6e:b9:cc:e7:82:08:08: e3:3c:da:c3:c9:71:10:f4:18:ad:9e:8f:08:54:3a: ab:2e:72:05:fa:19:e5:ae:40:48:bc:16:0d:33:1b: 29:64:b4:19:ae:d5:fe:20:c9:b6:51:11:74:5b:cb: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:19:EF:33:53:6F:17:04:B6:68:86:88:25:A7:FE:AA:3E:97:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7686a4dd-4c28-3f2f-8a78-7c67d56ad85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f0d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e9:6c:4f:e4:75:af:cd:db:8b:79:09:72:f2:29:a6:d4:94: b7:c9:dd:d0:83:0a:d5:d1:18:3a:4b:6a:8d:85:1a:41:38:d8: f4:97:48:fb:e5:2a:2a:94:43:47:57:ca:13:b7:53:24:7c:07: 41:c4:5d:47:f9:2e:05:31:4e:c2:c4:79:b1:a9:a9:57:ee:d6: 2f:3c:ea:aa:42:3d:bd:e6:cb:6b:66:b1:10:bf:2e:cc:69:f9: b9:f3:19:c4:aa:df:54:a8:95:84:e6:e3:c1:aa:99:0d:d0:16: 77:6d:71:5b:a2:74:1e:63:d0:c5:0e:b8:ae:35:b4:e9:77:16: a7:10:72:ec:23:cf:71:37:cd:fa:ab:df:81:dd:32:8f:77:44: 5c:52:d8:12:bf:a4:c2:fa:16:65:d7:11:0d:14:28:69:e9:81: e9:0a:a0:1f:3c:a0:88:16:1d:68:da:3b:ef:35:5d:33:db:74: 87:d0:5e:97:11:cf:36:ce:77:ca:7d:16:32:cf:2f:13:c4:2c: 28:81:e2:81:bf:b3:c1:de:5e:2a:60:ad:4d:ce:26:9c:0f:12: fe:2e:87:e2:df:63:d2:1f:78:08:aa:ce:da:eb:27:bb:13:6a: e5:81:69:20:35:79:e6:7a:f2:cc:19:2a:08:dc:18:31:04:c1: ba:7d:89:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111TzLomVtzjjEPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NTY0YzQxOTUtMmJkMi00ZmQ0LWE5NjUtYTdmYzY4NTQyNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl8HH27kDWspz3EddQ0Imazn+A2S/2917sOu sd0cXJSXo8gB9KBooZ8PVVpaCI3QGZS+TlEGbBN/WSqCyYsh4jiRnP711gqDEi7T D29hL7cYdlLnd5cG3Qdlf6Dokm8pSxruXZ8tP3Fdg95lUyjSxD9BY3AX1qLalI87 Spz8kO5m3NtnVZT4+hb2BAXoJ+dbUkQFz/1MqJMtguDXeh/nzeNwAUO/lTy4eZV2 QEHkouI6ZuNKF3e8jLiz9xRPMVIm5NkRNN6okJtJz265zOeCCAjjPNrDyXEQ9Bit no8IVDqrLnIF+hnlrkBIvBYNMxspZLQZrtX+IMm2URF0W8t9dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLTAGe8zU28XBLZohoglp/6qPpd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvNzY4NmE0ZGQtNGMyOC0z ZjJmLThhNzgtN2M2N2Q1NmFkODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8N MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArpbE/kda/N24t5CXLyKabUlLfJ3dCDCtXRGDpLao2FGkE42PSX SPvlKiqUQ0dXyhO3UyR8B0HEXUf5LgUxTsLEebGpqVfu1i886qpCPb3my2tmsRC/ Lsxp+bnzGcSq31SolYTm48GqmQ3QFndtcVuidB5j0MUOuK41tOl3FqcQcuwjz3E3 zfqr34HdMo93RFxS2BK/pML6FmXXEQ0UKGnpgekKoB88oIgWHWjaO+81XTPbdIfQ XpcRzzbOd8p9FjLPLxPELCiB4oG/s8HeXipgrU3OJpwPEv4uh+LfY9IfeAiqztrr J7sTauWBaSA1eeZ68swZKgjcGDEEwbp9if8= -----END CERTIFICATE-----Generated at Fri Apr 17 08:07:54 2026 by rpki-client