$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa File: 68b0539d-9001-3fdf-a61a-75dbfde2df07.roa (raw, json) Hash identifier: DAN7+kYBwtr6n7ssO0IGKLfZiatDI4XkWIDrXkQ5Bl0= Subject key identifier: 8F:57:2A:1F:69:4D:B5:C0:F0:11:1E:68:CF:61:AC:24:C1:84:C7:BC Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F4328584D571FA713509096967235D340 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 19905 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a7:13:50:90:96:96:72:35:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c863fbee-f084-4919-9785-50af870bb28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:31:a1:69:49:10:08:f5:69:a7:af:0f:4e:1e: 9d:9b:1c:be:f1:7a:50:06:c2:25:98:dd:73:b8:f7: dc:33:c2:e3:2a:9f:a8:48:a5:c1:7e:21:eb:91:04: 7e:68:90:f5:b6:61:73:41:5a:48:df:61:c6:dd:ac: 38:ee:5d:d0:10:3e:d9:33:c0:b0:d0:82:3c:0c:22: 2d:3e:cf:5b:d4:1e:5e:df:6a:14:75:eb:fc:06:f8: b0:97:b8:65:cf:bd:b8:5b:46:3a:c2:ed:f8:07:1c: 30:a7:fc:c8:94:67:c9:6a:e6:4e:1d:82:b5:8c:26: 93:0d:e0:1b:66:af:7d:06:b3:ae:e6:32:5d:77:c6: 22:84:49:80:52:c6:b2:02:eb:27:be:0f:ed:b0:2f: ff:7a:9c:27:d4:93:b2:fc:e0:9e:c7:25:78:38:56: 5a:46:8b:8a:61:cc:ab:ac:06:7f:52:cd:3b:5c:96: 7a:29:18:86:9b:a9:8f:9a:7b:08:47:4b:09:f7:9d: 3a:67:d0:30:10:b7:25:d3:96:8a:43:d2:f9:22:fe: c4:14:a9:44:7b:37:a8:9b:59:bf:4d:ad:e1:71:bd: 96:70:e2:f7:9d:44:05:cd:97:12:72:77:8f:df:bd: 30:d1:97:a6:13:72:ac:a2:c6:9e:a7:2b:87:1c:e7: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:57:2A:1F:69:4D:B5:C0:F0:11:1E:68:CF:61:AC:24:C1:84:C7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/68b0539d-9001-3fdf-a61a-75dbfde2df07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:91:c7:31:95:d4:bd:4c:72:bb:c1:85:1d:b6:d3:2e:8c:a4: 47:a0:2b:d4:b9:20:1e:c3:f3:8d:b3:9e:c4:7c:5d:b7:8d:a2: 7d:02:37:89:92:97:28:4c:e9:b1:5d:6a:38:ff:7d:69:ca:da: 87:c7:9b:c0:b0:e6:a1:9a:ff:d6:70:68:0b:84:b0:cd:ad:dc: 7e:72:c1:2b:2b:ab:03:26:e9:56:94:7d:d2:f5:b4:b7:0b:29: 7a:05:e3:a8:e3:ca:c4:ff:43:5d:6a:fc:19:26:d8:dd:20:81: f1:be:91:d7:ba:0b:a9:01:b9:8f:8f:a0:46:c1:82:77:a9:74: 4e:bc:29:af:8a:86:3e:10:e5:49:d5:be:ac:34:ab:7e:7b:a5: 4f:13:8b:5f:b9:68:6e:c3:d6:ec:ad:78:e1:4d:7c:df:c1:4b: 1d:a6:f5:fb:e6:71:35:e2:79:be:0a:9f:0a:d6:d8:5e:04:3e: 3b:43:2b:a7:bb:f0:51:f6:91:69:cb:0b:fb:93:6d:94:06:c7: b8:d3:ce:a2:05:7c:47:61:4b:c0:29:05:89:f7:88:a4:49:d9: 82:8a:69:82:ce:1a:b5:3a:ca:45:03:76:3b:4e:7a:c2:bd:7b: 40:5e:f7:6f:2a:cb:6c:a3:ff:d1:49:1f:e5:81:b2:f0:11:1d: f5:ab:d0:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1XH6cTUJCWlnI100AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk Yzg2M2ZiZWUtZjA4NC00OTE5LTk3ODUtNTBhZjg3MGJiMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjGhaUkQCPVpp68PTh6dmxy+8XpQBsIlmN1z uPfcM8LjKp+oSKXBfiHrkQR+aJD1tmFzQVpI32HG3aw47l3QED7ZM8Cw0II8DCIt Ps9b1B5e32oUdev8Bviwl7hlz724W0Y6wu34Bxwwp/zIlGfJauZOHYK1jCaTDeAb Zq99BrOu5jJdd8YihEmAUsayAusnvg/tsC//epwn1JOy/OCexyV4OFZaRouKYcyr rAZ/Us07XJZ6KRiGm6mPmnsIR0sJ9506Z9AwELcl05aKQ9L5Iv7EFKlEezeom1m/ Ta3hcb2WcOL3nUQFzZcScneP370w0ZemE3KsosaepyuHHOdj0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI9XKh9pTbXA8BEeaM9hrCTBhMe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvNjhiMDUzOWQtOTAwMS0z ZmRmLWE2MWEtNzVkYmZkZTJkZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGkccxldS9THK7wYUdttMujKRHoCvUuSAew/ONs57EfF23jaJ9AjeJ kpcoTOmxXWo4/31pytqHx5vAsOahmv/WcGgLhLDNrdx+csErK6sDJulWlH3S9bS3 Cyl6BeOo48rE/0NdavwZJtjdIIHxvpHXugupAbmPj6BGwYJ3qXROvCmvioY+EOVJ 1b6sNKt+e6VPE4tfuWhuw9bsrXjhTXzfwUsdpvX75nE14nm+Cp8K1theBD47Qyun u/BR9pFpywv7k22UBse4086iBXxHYUvAKQWJ94ikSdmCimmCzhq1OspFA3Y7TnrC vXtAXvdvKstso//RSR/lgbLwER31q9Av -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:19 2026 by rpki-client