$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa File: aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa (raw, json) Hash identifier: dbpPMnmazLmTW+iNVtO0aBC3ruzTNI39kmi0kAzVUhA= Subject key identifier: FA:C2:A2:B5:91:26:3B:08:09:44:05:B2:BD:F8:6D:D0:54:B8:EE:C2 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584D746FBCA5B051687FE725F100 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 0 IP address blocks: 2607:6000::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:bc:a5:b0:51:68:7f:e7:25:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=128496a5-cabe-4225-b3f8-433ff25597c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:2c:32:4c:ca:b1:f3:5d:0e:45:f1:11:e2: f9:cb:f3:20:3d:29:0e:62:e2:a0:97:5c:7a:e2:96: 34:c2:75:3f:cf:68:9f:b8:f3:62:6f:2b:ad:27:9a: a0:28:6e:35:15:df:f4:1f:a2:a6:60:83:a8:b1:37: d7:dc:31:60:ca:fc:69:69:5a:22:3d:fe:17:bb:90: 66:11:3b:bf:c5:bf:41:29:c4:43:31:91:71:3c:f7: 9d:d4:cd:9a:d5:de:bd:09:e6:1a:6d:ce:51:76:3d: 63:26:17:ff:f2:26:ff:96:24:51:0e:f9:1e:be:73: a5:cd:0e:71:f4:76:a2:5d:75:79:63:fa:76:1f:bb: b9:37:24:c5:b1:13:7b:c0:31:6b:51:b4:92:b2:4e: 8f:c8:94:42:0c:94:ec:79:8e:39:a6:5e:64:a4:95: 7c:5a:95:e4:45:22:fe:af:55:52:9a:2b:5e:40:11: 71:47:aa:3a:f3:b9:61:e3:51:35:82:29:83:e5:4b: f4:62:69:7b:3f:68:af:44:87:da:eb:3f:05:86:ce: f5:e2:6c:85:45:5b:7a:31:5c:da:3b:3d:d2:db:ed: 7c:18:a3:27:25:1f:33:02:df:a3:20:b4:ca:34:be: f6:26:d4:44:c1:3c:48:d2:10:45:24:b1:fb:a1:33: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:A2:B5:91:26:3B:08:09:44:05:B2:BD:F8:6D:D0:54:B8:EE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/aa5035f3-2d21-3574-8fa3-8e9a3973e326.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d5:1a:ee:bb:b8:be:bd:62:ff:ff:20:e1:e6:2b:8d:7f:35: a5:f4:83:91:0b:c1:fe:dd:4a:ea:63:8a:ad:c1:9b:d6:33:a3: 5f:80:62:8c:fb:e2:dc:9f:a4:e4:af:d9:4d:0d:0c:2e:3d:aa: 32:0b:d5:3c:78:61:ff:5f:ce:5f:94:65:01:e6:48:f4:57:c8: b9:ad:1c:20:d2:22:c1:20:45:8c:70:18:03:80:41:3e:79:2d: f9:5c:32:06:c5:91:7e:56:10:ea:02:04:bb:9b:a3:79:eb:ef: 3e:fa:85:8e:8e:b3:ee:0c:a2:7a:84:bf:6f:58:29:8d:e2:a6: 4a:57:52:13:13:b7:98:06:93:8a:46:60:b2:a6:18:f1:61:b7: 58:7b:de:a1:d2:dc:52:69:18:da:49:bb:8a:d5:fb:b4:69:48: cd:1c:cc:77:22:96:fe:c8:57:47:7c:33:49:0f:fa:30:53:7b: a9:db:d3:f1:a2:33:16:07:91:2f:13:a3:47:b8:81:61:7b:73: 5e:e3:92:c9:bf:79:c7:c0:9e:3b:e7:d0:cf:ed:4d:84:68:96: 33:1d:75:0a:5f:18:88:8f:5c:02:90:da:88:cb:44:ea:54:f4: ee:d9:1c:b7:fc:b3:34:a8:83:9d:ec:b2:87:33:e4:89:00:e3: 9a:7b:df:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b7ylsFFof+cl8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MTI4NDk2YTUtY2FiZS00MjI1LWIzZjgtNDMzZmYyNTU5N2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUcsMkzKsfNdDkXxEeL5y/MgPSkOYuKgl1x6 4pY0wnU/z2ifuPNibyutJ5qgKG41Fd/0H6KmYIOosTfX3DFgyvxpaVoiPf4Xu5Bm ETu/xb9BKcRDMZFxPPed1M2a1d69CeYabc5Rdj1jJhf/8ib/liRRDvkevnOlzQ5x 9HaiXXV5Y/p2H7u5NyTFsRN7wDFrUbSSsk6PyJRCDJTseY45pl5kpJV8WpXkRSL+ r1VSmiteQBFxR6o687lh41E1gimD5Uv0Yml7P2ivRIfa6z8Fhs714myFRVt6MVza Oz3S2+18GKMnJR8zAt+jILTKNL72JtREwTxI0hBFJLH7oTOPRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPrCorWRJjsICUQFsr34bdBUuO7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWE1MDM1ZjMtMmQyMS0z NTc0LThmYTMtOGU5YTM5NzNlMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgdgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN1Rruu7i+vWL//yDh5iuNfzWl9IORC8H+3UrqY4qtwZvWM6NfgGKM ++Lcn6Tkr9lNDQwuPaoyC9U8eGH/X85flGUB5kj0V8i5rRwg0iLBIEWMcBgDgEE+ eS35XDIGxZF+VhDqAgS7m6N56+8++oWOjrPuDKJ6hL9vWCmN4qZKV1ITE7eYBpOK RmCyphjxYbdYe96h0txSaRjaSbuK1fu0aUjNHMx3Ipb+yFdHfDNJD/owU3up29Px ojMWB5EvE6NHuIFhe3Ne45LJv3nHwJ4759DP7U2EaJYzHXUKXxiIj1wCkNqIy0Tq VPTu2Ry3/LM0qIOd7LKHM+SJAOOae98e -----END CERTIFICATE-----Generated at Thu Apr 16 23:57:17 2026 by rpki-client