$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b65aa1a8-2b51-3cf0-aaa3-c2e862381c2a.roa File: b65aa1a8-2b51-3cf0-aaa3-c2e862381c2a.roa (raw, json) Hash identifier: OQIKA1skSE3c0o2DJedTs6oLlTAd2rrTukgSx5+EnhY= Subject key identifier: C8:18:2D:7E:4D:E3:E3:1F:DB:5D:14:DC:2A:05:AF:A5:B2:D7:A5:57 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D6C0FB79C6EE142026806A1C0 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b65aa1a8-2b51-3cf0-aaa3-c2e862381c2a.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 55293 IP address blocks: 2607:f788::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b7:9c:6e:e1:42:02:68:06:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=9d3b08be-8344-45bc-9983-f4b3621357c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:34:fa:ee:c9:fa:4a:d2:03:57:ba:d0:e3: 4b:f9:7a:6a:f5:e5:eb:3c:a8:9d:78:44:84:67:69: f1:8d:a6:2f:37:a4:69:12:60:0f:87:c2:27:a2:33: 8b:7f:81:a8:58:e3:18:68:50:d1:8c:1e:17:41:35: 89:f4:0f:34:76:2f:43:5e:c1:b4:b5:4a:80:ff:19: 84:93:67:17:c5:c9:d8:4f:b7:26:07:6a:a1:19:81: f0:8a:25:4a:58:0d:a3:84:bf:63:9c:f4:1c:1b:ea: 2c:0f:df:10:e4:a4:3b:3e:30:3a:89:f1:96:82:29: b0:cf:58:7d:2f:aa:fc:f5:ac:c9:ce:ed:2a:c2:3e: 43:13:dc:0c:b9:88:1d:54:ff:e2:7c:17:5b:bb:df: 60:06:aa:d6:c2:3a:67:97:0a:ae:f1:83:eb:a2:56: 4e:f4:93:24:ec:e2:2b:f4:c6:01:6f:f5:d6:fe:5b: 1a:36:13:96:fb:01:31:8b:97:b1:b9:8d:59:02:f1: c8:bc:84:94:9f:72:c6:f9:63:f8:d0:5b:a5:2a:24: 9d:c0:1e:5a:56:0f:e7:3e:03:1a:ab:29:19:af:09: e0:89:5d:09:66:25:fd:5e:85:46:45:fa:f5:29:e7: 4a:34:76:4d:a0:9e:49:a0:4b:f7:49:89:db:06:f2: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:18:2D:7E:4D:E3:E3:1F:DB:5D:14:DC:2A:05:AF:A5:B2:D7:A5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b65aa1a8-2b51-3cf0-aaa3-c2e862381c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv6: 2607:f788::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ed:30:c6:4f:e6:b7:7c:5f:e7:21:79:5a:0a:0f:20:e6:76: a4:a4:4d:4e:9b:f3:09:4a:43:0d:f2:c7:f7:b3:40:58:76:8d: f3:a4:f1:73:8b:6b:f3:e1:05:a3:8f:a9:30:01:f5:6a:41:1a: 2d:3b:3b:e4:49:01:b0:e6:99:ed:53:e0:79:34:3b:f4:6d:50: 4b:57:7d:01:99:fe:58:17:fc:96:01:bf:84:58:d8:65:7e:5e: 54:eb:f0:64:06:6f:96:06:76:62:16:79:7c:ce:e5:c5:08:a8: b6:be:72:f2:fe:8b:aa:c2:72:5c:7b:ee:ef:e6:a1:2f:8a:09: 37:d0:4e:5a:02:1b:3c:f6:7c:5a:16:60:01:9a:0f:33:ae:1d: 59:25:3a:0e:32:d8:22:a8:c8:e3:9b:0f:68:e4:51:67:8d:7b: 84:74:e8:b8:a0:e5:36:be:61:68:c2:f1:c3:8d:67:d2:c7:b7: be:58:d8:86:39:a6:b3:ab:8c:f4:10:f0:bc:a7:32:82:40:6e: 8d:8a:47:78:ad:b5:f5:d6:70:ea:36:c3:5b:f1:00:a8:3d:a4: a0:6e:0d:78:90:08:ac:62:a9:e6:09:89:50:1f:52:d1:7c:f5: 37:be:a6:c9:d7:63:4e:88:00:53:0b:3d:8e:8c:da:02:92:aa: 18:87:e0:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1sD7ecbuFCAmgGocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OWQzYjA4YmUtODM0NC00NWJjLTk5ODMtZjRiMzYyMTM1N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOM0+u7J+krSA1e60ONL+Xpq9eXrPKideESE Z2nxjaYvN6RpEmAPh8InojOLf4GoWOMYaFDRjB4XQTWJ9A80di9DXsG0tUqA/xmE k2cXxcnYT7cmB2qhGYHwiiVKWA2jhL9jnPQcG+osD98Q5KQ7PjA6ifGWgimwz1h9 L6r89azJzu0qwj5DE9wMuYgdVP/ifBdbu99gBqrWwjpnlwqu8YProlZO9JMk7OIr 9MYBb/XW/lsaNhOW+wExi5exuY1ZAvHIvISUn3LG+WP40FulKiSdwB5aVg/nPgMa qykZrwngiV0JZiX9XoVGRfr1KedKNHZNoJ5JoEv3SYnbBvLDewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMgYLX5N4+Mf210U3CoFr6Wy16VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYjY1YWExYTgtMmI1MS0z Y2YwLWFhYTMtYzJlODYyMzgxYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3iDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBo7TDGT+a3fF/nIXlaCg8g5nakpE1Om/MJSkMN8sf3s0BYdo3zpPFz i2vz4QWjj6kwAfVqQRotOzvkSQGw5pntU+B5NDv0bVBLV30Bmf5YF/yWAb+EWNhl fl5U6/BkBm+WBnZiFnl8zuXFCKi2vnLy/ouqwnJce+7v5qEvigk30E5aAhs89nxa FmABmg8zrh1ZJToOMtgiqMjjmw9o5FFnjXuEdOi4oOU2vmFowvHDjWfSx7e+WNiG Oaazq4z0EPC8pzKCQG6Nikd4rbX11nDqNsNb8QCoPaSgbg14kAisYqnmCYlQH1LR fPU3vqbJ12NOiABTCz2OjNoCkqoYh+Dp -----END CERTIFICATE-----Generated at Fri Apr 17 15:17:19 2026 by rpki-client