$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa File: d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa (raw, json) Hash identifier: 5aCl91LzMr3jSmC05dhxn1QJsnhrPy/yIJA7tTfVbzM= Subject key identifier: A5:94:9E:73:08:D5:A6:8D:AB:B5:68:29:87:4E:CA:7F:04:F9:A7:9A Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584D703FD6236F426FEBBD6C0640 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 12189 IP address blocks: 2607:6000:b00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d6:23:6f:42:6f:eb:bd:6c:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=338bb3b6-4f9d-4481-b98d-c7884a8ef065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:5c:46:48:1e:67:3e:a4:c1:a0:17:e7:db: 32:7c:83:70:e7:56:b3:2c:1f:d1:ef:00:32:51:1a: a2:b1:c8:96:2b:77:9d:fe:4c:5b:70:c7:98:23:49: cb:30:16:da:60:6a:db:c2:70:75:b2:03:c7:09:8f: 43:ac:e0:dc:0e:05:a7:df:52:6e:73:a2:f6:09:72: fe:47:79:bb:79:46:76:11:93:de:05:19:0b:99:2d: 55:6a:85:cf:65:71:e3:13:6b:7c:27:f6:9b:0a:6b: 2f:42:d4:10:3e:95:77:b6:fb:3b:fe:6d:90:84:a0: bd:b2:a0:2c:ca:34:91:62:63:e3:d2:28:f2:b8:e1: 6e:44:32:b8:93:5c:1e:17:bb:f8:e2:ef:85:69:9c: 88:b6:65:e5:47:0c:16:bd:2a:59:69:ec:0d:2f:86: eb:73:8d:39:c8:f7:1c:e0:9c:69:fa:82:f4:ff:93: 20:62:6e:48:f7:7d:d2:34:af:61:c0:ce:da:a3:a9: fe:e6:e4:ad:4d:93:0d:f7:19:b5:c7:ce:81:56:3c: 32:8c:6b:d2:1e:64:42:60:ba:16:0d:4c:bd:6b:cf: 49:64:a5:5b:8d:4a:68:c2:5e:b1:9e:d6:14:a4:91: 9b:fb:13:d7:31:90:81:d7:ed:93:b0:bb:ab:f2:c0: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:94:9E:73:08:D5:A6:8D:AB:B5:68:29:87:4E:CA:7F:04:F9:A7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d9d404ae-69ce-38c1-be30-2a3604bc6f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:6000:b00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:61:8d:d5:7b:e1:57:fb:03:63:6a:89:f9:83:88:58:f1:ee: e2:a7:80:6c:9a:e0:cc:f8:72:56:80:38:66:56:83:8d:73:de: 48:bb:ff:6e:c1:9f:66:64:f8:fb:41:a7:ab:89:d2:24:be:5e: ee:5b:50:4a:e5:7c:65:30:af:24:2a:b3:4f:c6:01:70:83:1b: 11:4e:6d:49:09:fe:d7:86:31:71:97:d2:c8:76:2b:f4:81:68: ae:e3:c1:f3:94:17:ec:22:79:73:c8:06:f1:63:c4:50:0b:b0: 49:eb:ea:1a:2d:c5:be:1a:60:4d:36:da:b0:44:9a:5c:63:76: 47:6a:28:0e:72:73:45:0f:89:6c:10:55:51:d4:c0:e7:7f:d2: bf:fb:ea:0f:40:ee:ca:69:64:df:6f:3b:d6:35:07:42:bb:83: de:73:22:9d:32:cb:59:72:64:e9:03:8d:b8:e2:64:86:41:78: 94:67:23:07:2a:6a:c6:b6:a7:7d:a0:30:a5:38:5b:1b:a9:20: 78:a0:fe:82:e0:09:9a:93:d5:2f:9a:e8:36:5a:8a:ce:c1:64: 96:f7:b1:e8:4a:8e:1d:86:a3:0c:44:d9:47:bf:4b:8e:18:78: 81:4f:9f:7d:24:4f:58:cd:06:27:d6:d5:65:c4:3d:df:25:e2: 97:3b:0a:fe -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1wP9Yjb0Jv671sBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MzM4YmIzYjYtNGY5ZC00NDgxLWI5OGQtYzc4ODRhOGVmMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwFcRkgeZz6kwaAX59syfINw51azLB/R7wAy URqisciWK3ed/kxbcMeYI0nLMBbaYGrbwnB1sgPHCY9DrODcDgWn31Juc6L2CXL+ R3m7eUZ2EZPeBRkLmS1VaoXPZXHjE2t8J/abCmsvQtQQPpV3tvs7/m2QhKC9sqAs yjSRYmPj0ijyuOFuRDK4k1weF7v44u+FaZyItmXlRwwWvSpZaewNL4brc405yPcc 4Jxp+oL0/5MgYm5I933SNK9hwM7ao6n+5uStTZMN9xm1x86BVjwyjGvSHmRCYLoW DUy9a89JZKVbjUpowl6xntYUpJGb+xPXMZCB1+2TsLur8sC4wwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKWUnnMI1aaNq7VoKYdOyn8E+aeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDlkNDA0YWUtNjljZS0z OGMxLWJlMzAtMmEzNjA0YmM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdgAAsw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAW2GN1XvhV/sDY2qJ+YOIWPHu4qeAbJrgzPhyVoA4ZlaDjXPeSLv/ bsGfZmT4+0Gnq4nSJL5e7ltQSuV8ZTCvJCqzT8YBcIMbEU5tSQn+14YxcZfSyHYr 9IForuPB85QX7CJ5c8gG8WPEUAuwSevqGi3FvhpgTTbasESaXGN2R2ooDnJzRQ+J bBBVUdTA53/Sv/vqD0Duymlk32871jUHQruD3nMinTLLWXJk6QONuOJkhkF4lGcj BypqxranfaAwpThbG6kgeKD+guAJmpPVL5roNlqKzsFklvex6EqOHYajDETZR79L jhh4gU+ffSRPWM0GJ9bVZcQ93yXilzsK/g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:48:17 2026 by rpki-client