$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa File: 20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa (raw, json) Hash identifier: GS1lH8vXA9/RQaCnYepb9AkRLEa+XsdUCVvrSFnJNJc= Subject key identifier: 72:64:09:99:2D:1F:99:ED:91:16:D9:4E:66:7F:16:69:9B:C5:B9:F1 Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584D87E85470D90CBE8B14536F00 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa Signing time: Fri 17 Apr 2026 00:23:49 +0000 ROA not before: Fri 17 Apr 2026 00:23:49 +0000 ROA not after: Thu 16 Jul 2026 00:23:49 +0000 asID: 46265 IP address blocks: 2607:8240:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:e8:54:70:d9:0c:be:8b:14:53:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Apr 17 00:23:49 2026 GMT Not After : Jul 16 00:23:49 2026 GMT Subject: CN=5570ff18-62cf-480f-b6ae-4f7320f0e217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b3:02:e2:24:6d:45:1f:4c:73:46:00:eb:8d: 7e:98:38:c8:77:7b:2a:c8:77:86:1f:87:a7:79:16: 59:eb:d4:71:78:2c:dd:70:3c:60:02:19:95:a1:ef: 38:c4:a1:bc:12:a0:ec:fe:30:b1:39:5c:a2:d5:29: 2d:2d:27:40:56:e6:6b:4b:e2:35:83:02:fb:4f:e7: 4a:1f:b9:5a:a1:1f:f0:a8:95:07:b1:69:c1:cf:3c: b2:a2:e3:b3:fb:0f:7f:30:4e:8c:66:c2:ae:af:ac: 60:24:25:e3:50:8b:ae:89:38:8b:be:1a:cb:bc:39: 18:18:ff:4f:ad:53:40:c6:ac:cb:c7:0d:5e:75:7e: 7d:8a:e7:15:d5:0d:0d:22:9c:a8:2c:ea:66:cb:d8: f2:4f:76:a9:da:89:8c:a8:f6:f4:2e:79:21:36:4f: 84:27:b2:5a:07:16:94:ab:ae:62:1c:12:7c:3a:e0: 37:39:86:4c:43:56:ea:30:06:b5:06:99:bf:34:7c: be:67:02:d7:4a:6a:2b:bd:00:45:f4:7c:ab:7b:7f: 75:70:d1:3c:a7:05:83:0e:62:0a:36:1a:7b:d1:95: 3b:96:b9:0f:e0:32:ba:f1:4a:fe:73:d4:a7:48:1f: 85:17:1f:76:e3:2b:eb:be:be:ec:08:df:25:33:f9: b8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:09:99:2D:1F:99:ED:91:16:D9:4E:66:7F:16:69:9B:C5:B9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/20fd76ec-ff64-3bda-800a-c44c8dbfcb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv6: 2607:8240:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:bd:ef:e1:43:29:f6:81:7d:c1:4b:a7:4f:ce:2d:e6:cc:c0: ad:89:fb:12:0f:ca:ca:62:10:68:45:88:aa:3d:ab:5b:a6:ed: 01:56:1f:d9:29:81:40:f5:e5:03:bf:5f:f2:5c:93:55:12:bd: 3a:fa:ab:37:37:56:af:57:fe:c3:fc:13:bf:b7:18:ad:47:65: 08:83:5f:c5:d0:9b:04:37:1c:6e:a3:0d:ee:90:09:26:28:a5: 6f:c1:29:10:7e:44:cf:e3:ab:d1:c7:20:0f:19:b0:c3:64:69: de:97:9b:b3:5a:e7:98:63:a2:26:d9:65:1d:2d:4a:cf:bd:ff: eb:85:6c:c6:55:d6:9b:51:8a:1f:b0:0b:14:9d:c0:93:d0:3c: 64:1c:03:91:8f:71:1c:7f:2e:7f:7e:4a:ba:05:a8:6e:68:2a: 85:58:a9:5d:e1:11:bc:23:15:dc:f0:5f:ab:aa:18:c5:8d:b2: 8c:60:66:ee:83:91:18:9f:ee:14:1b:d9:13:06:51:11:e6:02: 2d:fb:14:0d:5c:ac:ea:d9:74:26:10:6d:58:0c:48:e7:15:9a: d5:2c:59:ca:df:7a:83:64:be:16:d3:c8:cb:30:3f:fa:f2:16: 03:69:fa:29:41:4b:b4:9b:fd:dd:52:a4:0a:bc:8d:d8:7c:59: f9:15:6c:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2H6FRw2Qy+ixRTbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI2MDQxNzAwMjM0OVoXDTI2MDcxNjAwMjM0OVowLzEtMCsGA1UEAxMk NTU3MGZmMTgtNjJjZi00ODBmLWI2YWUtNGY3MzIwZjBlMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7MC4iRtRR9Mc0YA641+mDjId3sqyHeGH4en eRZZ69RxeCzdcDxgAhmVoe84xKG8EqDs/jCxOVyi1SktLSdAVuZrS+I1gwL7T+dK H7laoR/wqJUHsWnBzzyyouOz+w9/ME6MZsKur6xgJCXjUIuuiTiLvhrLvDkYGP9P rVNAxqzLxw1edX59iucV1Q0NIpyoLOpmy9jyT3ap2omMqPb0LnkhNk+EJ7JaBxaU q65iHBJ8OuA3OYZMQ1bqMAa1Bpm/NHy+ZwLXSmorvQBF9Hyre391cNE8pwWDDmIK Nhp70ZU7lrkP4DK68Ur+c9SnSB+FFx924yvrvr7sCN8lM/m4vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHJkCZktH5ntkRbZTmZ/FmmbxbnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvMjBmZDc2ZWMtZmY2NC0z YmRhLTgwMGEtYzQ0YzhkYmZjYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+97+FDKfaBfcFLp0/OLebMwK2J+xIPyspiEGhFiKo9q1um7QFW H9kpgUD15QO/X/Jck1USvTr6qzc3Vq9X/sP8E7+3GK1HZQiDX8XQmwQ3HG6jDe6Q CSYopW/BKRB+RM/jq9HHIA8ZsMNkad6Xm7Na55hjoibZZR0tSs+9/+uFbMZV1ptR ih+wCxSdwJPQPGQcA5GPcRx/Ln9+SroFqG5oKoVYqV3hEbwjFdzwX6uqGMWNsoxg Zu6DkRif7hQb2RMGURHmAi37FA1crOrZdCYQbVgMSOcVmtUsWcrfeoNkvhbTyMsw P/ryFgNp+ilBS7Sb/d1SpAq8jdh8WfkVbJM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:21 2026 by rpki-client