$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa File: c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa (raw, json) Hash identifier: PQGVd7XEpmUBAdw1e3ryCpOnM5b4B6+cQVLUO7hSbwI= Subject key identifier: 1D:FC:E5:BF:67:2E:67:84:5D:80:64:C7:04:47:44:30:EF:B7:6D:B9 Certificate issuer: /CN=e618da9e-0816-460e-9515-1743f366bdc6 Certificate serial: 010D0C9F4328584D746FD8E29FF910875198C900 Authority key identifier: 25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 210000 IP address blocks: 2602:faf4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d8:e2:9f:f9:10:87:51:98:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e618da9e-0816-460e-9515-1743f366bdc6 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=8449db67-3585-44ec-bc20-7b7cb2013ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7f:be:45:53:25:ec:3d:55:f7:a7:ee:79:46: 41:d2:c0:79:ed:f8:65:50:43:68:b4:f7:a1:c1:ba: 7d:0d:1e:7e:61:e0:8b:32:cd:21:52:7c:6b:ad:30: 7d:74:8c:5f:1e:f9:26:92:40:a0:8a:8f:04:89:1e: 36:8a:d3:e2:d8:c8:f5:cc:4d:65:7d:36:59:1c:44: da:0a:d3:f6:f6:93:7b:ee:be:36:bf:26:9e:d9:1d: ce:75:89:d5:14:ac:46:27:04:b4:a7:ee:11:d9:6b: c4:0c:9c:1e:a3:c4:90:67:8b:37:9f:13:e9:24:06: 28:08:8e:37:7b:39:e2:98:b4:e5:41:57:4e:02:99: 32:1e:08:24:45:a6:78:ad:3d:f8:8b:6d:87:d5:f6: 9a:9b:ff:7a:47:4d:40:f7:92:8d:a8:0c:60:0f:53: 58:85:81:23:27:b3:5c:30:3b:17:38:a5:84:f4:cb: 75:46:81:4c:7a:6b:2d:48:82:27:48:c4:e6:9c:da: 0b:a0:4f:b7:d0:7f:86:87:a7:b9:12:7d:47:54:bb: 75:5b:a5:02:a5:97:db:b3:01:90:57:96:d0:e2:ab: 2e:62:3e:e0:f4:a1:16:c3:d0:4d:1c:af:d3:5d:0f: c6:16:90:d7:3d:ac:cd:78:6c:9b:08:56:94:de:ca: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FC:E5:BF:67:2E:67:84:5D:80:64:C7:04:47:44:30:EF:B7:6D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/c0f85f1e-222e-3708-8d2c-72da38ec41aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6/e618da9e-0816-460e-9515-1743f366bdc6.crl X509v3 Authority Key Identifier: keyid:25:1B:3B:D4:61:2C:93:3C:6B:18:D0:53:DA:75:11:03:2A:67:3C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e618da9e-0816-460e-9515-1743f366bdc6.cer sbgp-ipAddrBlock: critical IPv6: 2602:faf4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:86:b8:f6:f3:45:6f:dc:59:ad:f0:ef:41:f6:e7:70:c7:33: 86:2e:6f:22:28:cd:d5:99:17:19:95:61:31:b0:3d:70:c4:f1: a3:25:ec:0e:21:8d:c8:a3:11:67:1e:a0:68:ab:70:33:1f:11: 14:f1:83:f4:9b:0a:11:45:c9:41:a2:b0:74:ce:3d:42:a5:0a: 64:cb:bb:6c:14:80:6f:5a:98:27:a2:98:50:10:59:2b:70:f8: 7c:1e:71:ee:36:d9:8e:70:65:67:76:97:16:00:90:de:98:77: 36:50:4e:d1:b2:b8:05:f0:5c:17:43:5f:9b:bc:63:38:40:2a: 23:31:9b:8a:f9:31:3e:11:8f:87:6c:55:20:0d:43:a1:56:f2: 23:a0:d9:10:f9:ca:9e:63:ad:1a:59:87:44:9b:26:6b:56:54: 60:c3:bf:6d:29:16:63:80:0a:08:76:34:0d:62:11:eb:7d:9f: c2:c9:7a:c7:f9:4e:71:fa:e1:a4:05:2e:bf:e9:f4:71:d6:69: d1:9c:e1:cc:54:c8:92:9d:65:f4:ca:36:98:1a:95:7d:55:42: dc:ca:f1:06:d5:8c:28:4a:17:7d:92:e9:a0:dd:66:13:2c:13: c5:71:ff:7c:4f:19:41:72:80:fe:69:67:af:c1:b1:ad:58:1a: 96:b6:a1:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE10b9jin/kQh1GYyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYxOGRhOWUtMDgxNi00NjBlLTk1MTUtMTc0M2YzNjZi ZGM2MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ODQ0OWRiNjctMzU4NS00NGVjLWJjMjAtN2I3Y2IyMDEzZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn++RVMl7D1V96fueUZB0sB57fhlUENotPeh wbp9DR5+YeCLMs0hUnxrrTB9dIxfHvkmkkCgio8EiR42itPi2Mj1zE1lfTZZHETa CtP29pN77r42vyae2R3OdYnVFKxGJwS0p+4R2WvEDJweo8SQZ4s3nxPpJAYoCI43 eznimLTlQVdOApkyHggkRaZ4rT34i22H1faam/96R01A95KNqAxgD1NYhYEjJ7Nc MDsXOKWE9Mt1RoFMemstSIInSMTmnNoLoE+30H+Gh6e5En1HVLt1W6UCpZfbswGQ V5bQ4qsuYj7g9KEWw9BNHK/TXQ/GFpDXPazNeGybCFaU3soHIwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB385b9nLmeEXYBkxwRHRDDvt225MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjE4 ZGE5ZS0wODE2LTQ2MGUtOTUxNS0xNzQzZjM2NmJkYzYvYzBmODVmMWUtMjIyZS0z NzA4LThkMmMtNzJkYTM4ZWM0MWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYxOGRhOWUtMDgxNi00NjBlLTk1 MTUtMTc0M2YzNjZiZGM2L2U2MThkYTllLTA4MTYtNDYwZS05NTE1LTE3NDNmMzY2 YmRjNi5jcmwwHwYDVR0jBBgwFoAUJRs71GEskzxrGNBT2nURAypnPHcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjE4ZGE5ZS0wODE2LTQ2MGUtOTUxNS0xNzQz ZjM2NmJkYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL69AAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAC4a49vNFb9xZrfDvQfbncMczhi5vIijN1ZkXGZVhMbA9cMTxoyXs DiGNyKMRZx6gaKtwMx8RFPGD9JsKEUXJQaKwdM49QqUKZMu7bBSAb1qYJ6KYUBBZ K3D4fB5x7jbZjnBlZ3aXFgCQ3ph3NlBO0bK4BfBcF0Nfm7xjOEAqIzGbivkxPhGP h2xVIA1DoVbyI6DZEPnKnmOtGlmHRJsma1ZUYMO/bSkWY4AKCHY0DWIR632fwsl6 x/lOcfrhpAUuv+n0cdZp0ZzhzFTIkp1l9Mo2mBqVfVVC3MrxBtWMKEoXfZLpoN1m EywTxXH/fE8ZQXKA/mlnr8GxrVgalrahBA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:16 2026 by rpki-client