$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa File: f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa (raw, json) Hash identifier: r45uMf61rUWsIfzKw4MaZAwHtZVkqsW1eVPVmitn+Jg= Subject key identifier: 65:F8:D2:F8:F3:52:3E:4B:E5:70:0B:7C:7E:21:59:70:DF:18:F1:5B Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584D7F9A84BFEED6A7FF995614A0 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 395927 IP address blocks: 2604:f040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:84:bf:ee:d6:a7:ff:99:56:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=ef02f51e-ebf0-4461-aea4-cd9cf0aca1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:da:36:88:7e:37:77:35:16:41:5d:8b:a0: 08:0b:7e:8f:bf:24:7d:5d:b6:4c:bd:c1:9a:4c:3f: 3f:ae:06:aa:b3:26:23:29:4e:f9:e2:3e:a8:cf:51: f3:55:8d:ab:d2:87:ee:99:33:9b:25:91:d1:93:dd: 06:b1:e6:04:73:fd:79:be:0e:e2:ec:f9:45:3e:8b: 9e:fd:2d:86:a4:07:bb:22:57:c3:77:c6:33:6b:4c: b5:8e:29:ac:81:0b:50:a8:fc:b1:94:dc:04:ff:ee: 8d:68:7b:21:30:87:53:fb:00:5a:53:92:9a:a5:70: 74:c8:7e:91:30:7a:fb:f8:da:43:13:a8:be:9d:33: 69:9c:a0:0e:12:51:9d:b1:5b:5e:9c:eb:54:d2:5a: 62:14:5c:73:65:bf:61:64:89:6d:33:f2:d9:a7:38: a1:89:71:e8:19:89:ab:79:eb:8c:ff:ed:59:9c:0f: 48:03:c4:ed:6c:7e:ef:17:74:ec:66:28:ba:0c:05: 9d:dd:0b:4b:81:43:85:a7:ba:f3:12:6d:af:f2:6f: 8e:4b:9e:e5:02:aa:87:0e:0d:b2:32:7e:f2:b0:35: ad:2b:50:17:19:9c:4a:04:8e:99:46:59:29:ca:38: 1c:9d:26:18:87:a1:ae:05:58:c6:93:2a:e7:80:d2: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:D2:F8:F3:52:3E:4B:E5:70:0B:7C:7E:21:59:70:DF:18:F1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/f6fd7853-7003-3286-b87e-8ff625f2ba2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv6: 2604:f040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c5:f2:79:51:63:bf:97:5e:9b:fa:c9:1c:4e:97:a5:f3:0e: 33:be:ee:82:e3:10:83:79:f5:32:82:cb:81:e7:ca:2c:64:5b: 4d:f3:21:f8:f4:e8:30:03:65:6b:c0:64:8c:48:18:79:9f:2a: 1b:81:a9:2d:c5:f8:1d:61:1b:e7:7a:42:2c:f7:f1:0b:58:00: 4c:17:8d:81:38:4c:9a:6e:2c:60:05:1e:c8:eb:6f:75:1a:6e: e1:6c:12:41:98:bf:f0:45:91:bc:2b:0e:b8:6d:c4:ff:bc:89: db:6d:f1:de:f6:55:6f:81:5c:41:8b:f9:15:78:40:23:48:12: 6b:66:97:a1:a2:79:36:cb:a0:eb:0a:4b:53:a1:f0:4b:a2:f7: 43:f3:c1:b2:f7:5b:7a:dc:d8:e0:d0:d4:f7:c3:dd:aa:cd:32: 31:bc:7a:a1:3e:55:d6:bc:78:62:99:48:9d:eb:5b:2c:55:12: 6d:b3:86:0d:b3:95:4b:17:75:52:42:da:15:bf:2d:aa:13:8d: b3:3f:81:31:16:7c:73:6e:c0:c2:11:73:45:9b:81:65:0d:6d: 27:fb:6b:c2:9e:5f:7b:7c:fe:fe:22:0f:90:37:dd:1b:55:c8: 7b:bd:da:d2:62:9e:df:21:51:7c:77:f1:8a:5d:18:d2:e2:80: 3e:6a:c5:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1/moS/7tan/5lWFKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZWYwMmY1MWUtZWJmMC00NDYxLWFlYTQtY2Q5Y2YwYWNhMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksjaNoh+N3c1FkFdi6AIC36PvyR9XbZMvcGa TD8/rgaqsyYjKU754j6oz1HzVY2r0ofumTObJZHRk90GseYEc/15vg7i7PlFPoue /S2GpAe7IlfDd8Yza0y1jimsgQtQqPyxlNwE/+6NaHshMIdT+wBaU5KapXB0yH6R MHr7+NpDE6i+nTNpnKAOElGdsVtenOtU0lpiFFxzZb9hZIltM/LZpzihiXHoGYmr eeuM/+1ZnA9IA8TtbH7vF3TsZii6DAWd3QtLgUOFp7rzEm2v8m+OS57lAqqHDg2y Mn7ysDWtK1AXGZxKBI6ZRlkpyjgcnSYYh6GuBVjGkyrngNIIuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGX40vjzUj5L5XALfH4hWXDfGPFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvZjZmZDc4NTMtNzAwMy0z Mjg2LWI4N2UtOGZmNjI1ZjJiYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTwQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAjxfJ5UWO/l16b+skcTpel8w4zvu6C4xCDefUygsuB58osZFtN8yH4 9OgwA2VrwGSMSBh5nyobgaktxfgdYRvnekIs9/ELWABMF42BOEyabixgBR7I6291 Gm7hbBJBmL/wRZG8Kw64bcT/vInbbfHe9lVvgVxBi/kVeEAjSBJrZpehonk2y6Dr CktTofBLovdD88Gy91t63Njg0NT3w92qzTIxvHqhPlXWvHhimUid61ssVRJts4YN s5VLF3VSQtoVvy2qE42zP4ExFnxzbsDCEXNFm4FlDW0n+2vCnl97fP7+Ig+QN90b Vch7vdrSYp7fIVF8d/GKXRjS4oA+asUz -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:52 2026 by rpki-client