$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa File: d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa (raw, json) Hash identifier: n6Txi5A7zkI+RBKChx1f2tX5tJYd4rnb7ymrt+gOhRw= Subject key identifier: FC:53:92:9E:47:FA:23:DC:47:81:41:DD:DC:F8:B7:AE:2D:3A:AE:BB Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Certificate serial: 010D0C9F4328584D5234EA3CF94F82AB8756B3E0 Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa Signing time: Sat 28 Mar 2026 18:44:29 +0000 ROA not before: Sat 28 Mar 2026 18:44:29 +0000 ROA not after: Thu 21 May 2026 17:56:27 +0000 asID: 16509 IP address blocks: 2607:3640:ffcc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ea:3c:f9:4f:82:ab:87:56:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5 Validity Not Before: Mar 28 18:44:29 2026 GMT Not After : May 21 17:56:27 2026 GMT Subject: CN=1d132a59-6cba-410c-845b-e1ce12115b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:ea:c1:ee:eb:1e:d5:c2:40:1f:12:67:4f: c7:08:45:9f:9c:3d:4b:08:8a:ed:d0:e5:30:cf:bc: b7:b9:83:0a:e5:ab:20:6b:e9:a1:74:eb:85:dc:56: 42:17:1e:c8:16:16:aa:87:28:e7:3c:0a:28:3e:4f: 66:24:62:34:f8:19:cc:c2:38:ca:df:60:b5:c0:26: f4:0c:43:43:67:c4:75:05:1c:a8:fd:72:9d:aa:8c: fd:cd:5f:7d:1d:bf:ce:03:69:63:9c:f9:c9:01:a6: 6c:7e:e0:85:8f:95:7d:2a:58:67:58:0e:23:ce:c0: ca:8c:bb:6d:2e:fd:19:30:5e:96:7d:b1:86:1e:1d: bc:ff:31:01:af:a1:b0:7e:f4:a3:73:06:aa:4f:e0: 94:6f:91:bc:c0:77:b4:4d:f9:07:c3:0e:1a:45:82: 06:3d:9e:ec:c4:e6:a1:88:e1:d1:12:44:2f:f2:04: 3f:27:aa:7b:24:38:98:1c:a2:b8:e7:ee:65:96:9f: 8f:01:e9:b6:3f:a7:a4:f3:ed:ea:d6:41:57:4b:79: 2b:4f:12:0f:29:36:23:1c:cc:a4:06:74:27:da:c9: 30:75:ed:64:37:a8:96:7c:6b:d7:d1:d7:a3:f4:01: 88:2a:3e:fc:e5:9e:52:7d:e9:50:18:5e:91:b0:c9: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:92:9E:47:FA:23:DC:47:81:41:DD:DC:F8:B7:AE:2D:3A:AE:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/d8ed8ceb-e013-38cf-9e18-514c3a6389f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl X509v3 Authority Key Identifier: keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer sbgp-ipAddrBlock: critical IPv6: 2607:3640:ffcc::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:28:51:f8:f0:ac:7b:b7:1d:74:b7:c2:83:40:8d:7c:c1:e9: 1d:7d:8e:72:66:07:06:c8:14:fe:1c:23:5b:79:82:33:8a:9b: 46:31:22:ea:eb:88:7e:0d:5c:72:a8:7e:ab:42:81:ac:19:f9: c3:44:a0:a9:90:19:aa:a8:e4:53:7b:28:12:72:d8:92:15:72: 32:43:e7:cf:f9:82:78:4a:e3:95:64:28:e3:dc:56:8b:66:d8: d2:3b:b1:8b:2e:94:04:f7:90:15:31:45:41:7c:33:b7:44:52: 19:21:92:ff:48:8f:f7:a8:b6:ec:ab:1d:68:7a:9e:e3:55:c9: 1a:36:4d:08:1b:7f:87:e0:39:12:0c:7a:00:16:c8:40:af:79: ac:e8:f9:ad:71:d7:96:45:46:14:78:6a:eb:ea:60:f0:7e:a8: 26:6b:f8:28:55:82:77:c9:b8:7e:19:b4:42:7a:ad:ac:ce:98: 19:bf:77:48:cd:da:43:f1:9b:83:f9:6a:25:d9:16:b0:d0:f1: 89:72:a7:48:02:df:c5:96:d4:eb:12:d5:13:30:34:75:67:16: 2d:82:cb:6d:b4:3a:3d:d0:41:6c:da:8a:99:d7:2c:1b:60:1a: 26:cb:dc:c4:09:ca:94:7c:e0:2a:e7:c2:43:7b:2b:2f:a5:2f: 49:49:de:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1SNOo8+U+Cq4dWs+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5Y2U4YmUtN2JiZS00MThiLWI3OGUtNDJkZTg5NDEz M2E1MB4XDTI2MDMyODE4NDQyOVoXDTI2MDUyMTE3NTYyN1owLzEtMCsGA1UEAxMk MWQxMzJhNTktNmNiYS00MTBjLTg0NWItZTFjZTEyMTE1YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwnqwe7rHtXCQB8SZ0/HCEWfnD1LCIrt0OUw z7y3uYMK5asga+mhdOuF3FZCFx7IFhaqhyjnPAooPk9mJGI0+BnMwjjK32C1wCb0 DENDZ8R1BRyo/XKdqoz9zV99Hb/OA2ljnPnJAaZsfuCFj5V9KlhnWA4jzsDKjLtt Lv0ZMF6WfbGGHh28/zEBr6GwfvSjcwaqT+CUb5G8wHe0TfkHww4aRYIGPZ7sxOah iOHREkQv8gQ/J6p7JDiYHKK45+5llp+PAem2P6ek8+3q1kFXS3krTxIPKTYjHMyk BnQn2skwde1kN6iWfGvX0dej9AGIKj785Z5SfelQGF6RsMnqNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxTkp5H+iPcR4FB3dz4t64tOq67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjlj ZThiZS03YmJlLTQxOGItYjc4ZS00MmRlODk0MTMzYTUvZDhlZDhjZWItZTAxMy0z OGNmLTllMTgtNTE0YzNhNjM4OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGY5Y2U4YmUtN2JiZS00MThiLWI3 OGUtNDJkZTg5NDEzM2E1LzBmOWNlOGJlLTdiYmUtNDE4Yi1iNzhlLTQyZGU4OTQx MzNhNS5jcmwwHwYDVR0jBBgwFoAUyou/QT84PnG2tRXF0Ztn1tRgssYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZjljZThiZS03YmJlLTQxOGItYjc4ZS00MmRl ODk0MTMzYTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgc2QP/M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsoUfjwrHu3HXS3woNAjXzB6R19jnJmBwbIFP4cI1t5gjOKm0Yx IurriH4NXHKofqtCgawZ+cNEoKmQGaqo5FN7KBJy2JIVcjJD58/5gnhK45VkKOPc Votm2NI7sYsulAT3kBUxRUF8M7dEUhkhkv9Ij/eotuyrHWh6nuNVyRo2TQgbf4fg ORIMegAWyECveazo+a1x15ZFRhR4auvqYPB+qCZr+ChVgnfJuH4ZtEJ6razOmBm/ d0jN2kPxm4P5aiXZFrDQ8Ylyp0gC38WW1OsS1RMwNHVnFi2Cy220Oj3QQWzaipnX LBtgGibL3MQJypR84CrnwkN7Ky+lL0lJ3oc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:33:58 2026 by rpki-client