$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa File: 5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa (raw, json) Hash identifier: m8aTm+mAOiZ5KA+2tnrrzIZkCPj2JAToc8FuCsuvqlo= Subject key identifier: CF:C0:BF:C4:99:7C:3A:70:EF:69:78:98:DC:DE:CA:F9:0B:D4:4D:55 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584D8695565157562C82E50A0000 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 4226 IP address blocks: 2604:f587:8000::/34 maxlen: 34 2604:f587:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:56:51:57:56:2c:82:e5:0a:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=a23140c9-0983-4065-baa0-bc25648f70a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:6f:55:4b:f3:43:e2:a0:50:08:1d:84:22: 68:b8:2c:dd:0e:30:8a:1b:e1:16:74:b6:66:19:2e: 17:7c:11:66:af:12:c1:ba:1f:ed:10:e8:d6:73:80: 54:aa:70:53:fd:6c:91:8d:b6:85:f6:23:59:c3:38: 78:8d:43:72:a3:a9:62:2c:1f:91:0f:e0:39:d8:64: 34:08:2f:bc:46:79:19:01:39:b6:e0:8e:82:9e:81: 20:93:13:13:63:3a:36:92:9c:aa:7a:52:ee:6e:0d: 96:62:85:13:30:44:fd:49:89:91:69:f5:d5:4b:3b: b3:2b:a6:5f:a1:74:e4:e6:56:10:10:4f:c2:13:9d: 23:07:99:da:ee:2a:e0:b7:2d:5a:58:e4:35:c9:3e: 14:4e:d2:db:97:a1:3b:b0:ad:ec:27:f2:d0:7c:74: 19:97:b6:ec:6d:41:e1:cd:62:e0:10:6c:f2:a0:a8: a6:6e:70:2d:95:3c:34:77:5a:cd:b1:2b:e3:b2:c5: f6:94:fc:c7:1f:f0:20:7d:47:21:e8:7e:29:26:8a: 43:99:0d:47:8b:eb:0a:bb:ac:1b:11:60:09:b3:3c: 6e:69:2c:15:2f:de:89:b6:74:e0:04:bc:6f:0a:eb: 4c:97:05:e7:1e:c0:54:d6:f9:cf:d1:95:68:6d:c6: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C0:BF:C4:99:7C:3A:70:EF:69:78:98:DC:DE:CA:F9:0B:D4:4D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f587:8000::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:77:af:c9:dd:e3:f5:01:1e:21:14:51:72:0a:da:82:ef:37: c9:38:4f:bb:d7:4c:44:41:d3:19:d2:a0:9d:b2:2a:ca:36:18: 7c:fb:cc:ed:95:02:bd:6e:7d:1d:42:b5:c5:02:c7:5d:2a:b2: 3f:3a:85:c8:2c:dd:37:49:f0:7d:e9:e8:6b:34:3c:98:ed:70: 55:a6:be:09:18:9c:58:ce:c2:89:1e:12:37:93:f1:ac:4e:05: ea:5e:f8:86:70:83:3d:ce:d1:e3:6e:18:de:72:47:fd:ff:10: 4f:31:1f:d1:c6:53:8c:2c:4c:0a:1f:28:a4:54:02:d4:07:79: 4e:a3:02:9f:68:f6:47:bd:10:d8:8b:3b:21:ce:f7:88:10:98: 60:d1:d4:19:06:3c:6e:64:69:a4:6b:88:e7:e9:0e:00:ce:3a: a8:1f:be:4c:a6:2b:76:d6:e7:87:d8:bf:f1:24:ea:8a:0f:a6: 1f:1f:4c:49:f6:08:33:1e:53:6a:8b:88:ae:ba:c0:a9:f7:28: 69:3e:70:81:d8:b0:91:63:c6:05:5c:0e:b2:5d:a5:50:e8:0e: 0c:43:30:6a:5b:35:2d:08:a4:b8:8d:8c:d5:36:2e:e6:1e:19: 6a:6f:36:6e:0c:4a:3c:f9:9e:db:68:e1:d8:6a:16:cb:9d:84: 62:79:41:87 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2GlVZRV1YsguUKAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YTIzMTQwYzktMDk4My00MDY1LWJhYTAtYmMyNTY0OGY3MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibRvVUvzQ+KgUAgdhCJouCzdDjCKG+EWdLZm GS4XfBFmrxLBuh/tEOjWc4BUqnBT/WyRjbaF9iNZwzh4jUNyo6liLB+RD+A52GQ0 CC+8RnkZATm24I6CnoEgkxMTYzo2kpyqelLubg2WYoUTMET9SYmRafXVSzuzK6Zf oXTk5lYQEE/CE50jB5na7irgty1aWOQ1yT4UTtLbl6E7sK3sJ/LQfHQZl7bsbUHh zWLgEGzyoKimbnAtlTw0d1rNsSvjssX2lPzHH/AgfUch6H4pJopDmQ1Hi+sKu6wb EWAJszxuaSwVL96JtnTgBLxvCutMlwXnHsBU1vnP0ZVobcaBUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM/Av8SZfDpw72l4mNzeyvkL1E1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNWU0ZGJjMGMtMDMyMS0z MmQ1LWE5MjQtMGI3YzA3YjU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgT1h4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoHevyd3j9QEeIRRRcgragu83yThPu9dMREHTGdKgnbIqyjYYfPvM 7ZUCvW59HUK1xQLHXSqyPzqFyCzdN0nwfenoazQ8mO1wVaa+CRicWM7CiR4SN5Px rE4F6l74hnCDPc7R424Y3nJH/f8QTzEf0cZTjCxMCh8opFQC1Ad5TqMCn2j2R70Q 2Is7Ic73iBCYYNHUGQY8bmRppGuI5+kOAM46qB++TKYrdtbnh9i/8STqig+mHx9M SfYIMx5TaouIrrrAqfcoaT5wgdiwkWPGBVwOsl2lUOgODEMwals1LQikuI2M1TYu 5h4Zam82bgxKPPme22jh2GoWy52EYnlBhw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:44:52 2026 by rpki-client