$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa File: 5267559f-2275-3ec9-8912-c20f02435041.roa (raw, json) Hash identifier: J2QP/BZTXDPG6U6tYudPaCHyTYuYdVsrrMtbJoG4gqI= Subject key identifier: 99:D2:43:5D:FC:96:28:DA:BE:66:38:3F:88:FE:C4:9F:0F:C2:78:BF Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D7F9A8D3969A202A58F7B0D74 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 25899 IP address blocks: 2607:fa40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8d:39:69:a2:02:a5:8f:7b:0d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=9b228ab0-37cf-4285-941f-76a021423173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:1e:21:1d:2f:45:f1:92:4e:8c:44:35:13: 13:36:7f:e7:27:2a:51:56:6b:0e:7c:67:f8:a7:28: 9c:4a:ef:b0:0b:1f:27:f3:f9:c1:1b:cc:cb:82:d1: e1:cd:9b:68:35:f1:68:c7:66:e9:8e:c6:92:34:38: 78:69:a8:e7:9b:df:1a:ba:05:98:4c:c9:6d:58:71: 7e:f6:5b:34:a0:2a:59:88:63:aa:fe:20:c5:a4:3f: d5:c7:11:d2:af:88:d6:11:8b:81:b7:71:1c:45:1a: f7:5c:2b:92:41:41:8e:f0:fc:cb:f4:2a:59:1b:f6: 5e:f2:b4:93:c4:53:5c:d7:a3:86:8b:5e:62:65:0a: f9:ac:bd:3e:b1:65:4f:99:3c:9f:4c:01:3e:1c:a4: 68:b3:00:ab:cf:2b:a7:f1:16:7f:06:79:4e:6d:9b: a1:9f:e5:f5:f6:9e:75:bc:34:6f:b9:0b:cd:51:cb: c2:bd:e0:2c:6b:d9:e4:7a:98:fd:12:f7:c7:00:c2: e3:0f:c9:54:21:47:85:51:68:45:aa:92:e0:18:06: 20:38:cc:c4:90:6b:30:45:7a:49:43:9a:31:30:b4: 58:7d:3c:6c:e0:78:12:4a:ab:38:ab:09:58:36:e6: 6e:5b:67:a8:5d:e5:93:e2:bf:c9:5d:89:ed:c1:38: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D2:43:5D:FC:96:28:DA:BE:66:38:3F:88:FE:C4:9F:0F:C2:78:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5267559f-2275-3ec9-8912-c20f02435041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:09:e3:25:5d:19:ef:8f:a4:27:17:54:70:e8:4c:0a:85:8e: dc:7f:10:ea:cf:40:ec:02:9c:cc:70:71:a6:3f:ed:79:66:e4: 56:28:a3:c7:00:cc:74:3c:02:73:85:f8:c0:87:bd:00:c5:d7: c4:79:11:8e:ad:69:c9:d8:8f:1c:56:92:3e:d7:6e:96:15:8e: cb:2a:e8:a7:95:43:52:cb:7b:e4:0d:c3:d9:6b:ac:63:fb:7d: 4d:5d:1b:8f:13:ec:0e:9e:32:44:06:b3:37:5d:5d:ec:be:ff: 40:b9:24:76:3e:27:74:c7:c7:7f:69:07:e5:3f:a2:83:d8:e5: 88:b3:07:27:a0:ea:aa:74:bf:5a:70:d0:ed:f6:8d:a3:02:06: 89:7a:ee:87:bf:55:88:dc:a5:47:ab:68:64:d7:ec:a9:0b:a8: 8e:19:ec:fb:81:d3:0b:c8:50:07:2c:00:67:41:a5:d6:ac:37: a4:38:a2:af:0e:35:50:02:56:de:c2:16:61:11:95:97:01:a5: 7c:09:e7:bf:5c:d0:86:07:b1:93:53:bc:6c:2e:bd:5a:cb:f5: e8:56:40:f5:71:0f:82:21:ca:10:86:7c:c5:91:6f:e3:ec:61: c4:21:f4:95:40:2e:95:2b:32:f0:31:17:37:e8:7b:00:d2:8d: 0c:23:28:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1/mo05aaICpY97DXQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OWIyMjhhYjAtMzdjZi00Mjg1LTk0MWYtNzZhMDIxNDIzMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwageIR0vRfGSToxENRMTNn/nJypRVmsOfGf4 pyicSu+wCx8n8/nBG8zLgtHhzZtoNfFox2bpjsaSNDh4aajnm98augWYTMltWHF+ 9ls0oCpZiGOq/iDFpD/VxxHSr4jWEYuBt3EcRRr3XCuSQUGO8PzL9CpZG/Ze8rST xFNc16OGi15iZQr5rL0+sWVPmTyfTAE+HKRoswCrzyun8RZ/BnlObZuhn+X19p51 vDRvuQvNUcvCveAsa9nkepj9EvfHAMLjD8lUIUeFUWhFqpLgGAYgOMzEkGswRXpJ Q5oxMLRYfTxs4HgSSqs4qwlYNuZuW2eoXeWT4r/JXYntwTgHDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJnSQ138lijavmY4P4j+xJ8Pwni/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNTI2NzU1OWYtMjI3NS0z ZWM5LTg5MTItYzIwZjAyNDM1MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCECeMlXRnvj6QnF1Rw6EwKhY7cfxDqz0DsApzMcHGmP+15ZuRWKKPH AMx0PAJzhfjAh70AxdfEeRGOrWnJ2I8cVpI+126WFY7LKuinlUNSy3vkDcPZa6xj +31NXRuPE+wOnjJEBrM3XV3svv9AuSR2Pid0x8d/aQflP6KD2OWIswcnoOqqdL9a cNDt9o2jAgaJeu6Hv1WI3KVHq2hk1+ypC6iOGez7gdMLyFAHLABnQaXWrDekOKKv DjVQAlbewhZhEZWXAaV8Cee/XNCGB7GTU7xsLr1ay/XoVkD1cQ+CIcoQhnzFkW/j 7GHEIfSVQC6VKzLwMRc36HsA0o0MIyht -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:16 2026 by rpki-client