$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa File: 7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa (raw, json) Hash identifier: 0MUaXUH3sK7fMnM3T72tlII5l0+5v4uQgosFI/w/+8k= Subject key identifier: F4:83:0C:02:5C:4C:B7:5E:7C:23:33:45:3B:1E:0E:E2:74:21:17:41 Certificate issuer: /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Certificate serial: 010D0C9F4328584D6D7510428A3A851E41B03040 Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 2620:117:5077::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:10:42:8a:3a:85:1e:41:b0:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8 Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=98056e21-bc40-4d1f-8f0e-31d5288afde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:73:12:69:73:52:31:a8:33:ae:64:0a:f1: b1:e7:1e:82:c7:80:c9:3a:66:00:be:d5:91:73:e5: e1:cd:5f:4c:34:0a:ac:82:0d:f6:14:b4:19:f2:95: 6c:6a:09:22:19:7e:73:0c:78:9e:a2:e3:63:e6:56: 20:96:32:c9:d8:9a:28:df:03:99:cf:07:93:25:6e: 2d:98:d4:52:8f:63:56:b2:7e:54:1c:66:15:1c:7d: aa:ab:bb:d5:dd:7f:ba:6e:72:fa:f4:81:83:21:11: 2c:6d:04:b8:54:87:ca:32:21:44:1c:1e:ce:57:7d: 23:17:c5:c1:fd:8a:80:a6:8d:ee:18:8f:c0:8e:e2: c0:14:64:e3:95:26:1f:bb:9c:7a:97:dd:65:88:84: 28:77:3f:22:89:9c:72:bf:d7:c3:58:70:24:0f:63: 17:d8:a0:a0:01:71:21:78:ad:93:13:fd:38:66:40: a5:4e:ce:9c:40:de:30:e7:d7:0e:df:cd:e7:f0:75: dc:a2:ad:4a:16:ee:c9:31:07:62:9b:ac:f5:c1:e6: b6:c4:71:84:fd:cc:02:74:10:84:77:a1:9f:ab:b9: 5d:2b:24:12:6b:13:c0:cd:ff:69:b2:75:7f:da:8b: 80:19:3f:94:03:fd:8b:59:7f:59:13:d5:ce:49:56: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:83:0C:02:5C:4C:B7:5E:7C:23:33:45:3B:1E:0E:E2:74:21:17:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/7a3f77a7-1e90-3ca4-8b7b-08fa85b4150a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl X509v3 Authority Key Identifier: keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:5077::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d0:d1:59:62:fa:15:07:34:0c:44:e7:4a:63:c9:cb:90:6d: 4d:3a:bb:1d:8e:c1:c2:be:37:95:be:57:03:42:20:fe:e5:9d: ff:96:45:82:26:68:ad:9d:4d:de:85:b1:6d:34:0c:9a:dd:19: ae:7e:f0:55:29:9a:06:02:89:00:4f:e4:4a:ce:3a:a7:f8:aa: 6d:6c:a3:dd:fe:17:e7:9f:5c:c3:cc:77:8d:88:e7:1c:5e:f9: 6f:fc:d1:b9:c4:ef:93:4b:56:85:ec:f8:06:c7:be:6a:18:22: 49:1c:ae:6b:a9:0b:2f:28:65:cc:ff:05:16:9d:ab:64:10:7f: 82:51:8e:be:89:b3:09:1b:b2:a8:85:1e:1f:2f:e5:ab:7c:75: bb:d7:7a:73:95:5c:c9:d2:c7:b4:8b:11:a0:64:bd:ec:c2:a9: 64:2d:e5:ac:c8:bc:75:d0:b2:84:59:ca:ad:fc:19:b6:7c:39: 3f:5d:1b:8e:a5:ec:6e:18:26:0c:36:fc:7c:e3:83:48:e9:06: 22:75:33:84:90:36:a0:d9:35:6e:67:6f:5f:d9:58:f9:e8:ed: 1b:64:5f:e8:44:56:41:49:d3:6b:a5:51:ee:b4:b4:d2:a1:10: 25:26:e3:d2:a6:46:cd:f2:fc:4c:c8:bd:46:9d:f7:ee:ae:87: df:05:e8:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1tdRBCijqFHkGwMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl NWI4MB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk OTgwNTZlMjEtYmM0MC00ZDFmLThmMGUtMzFkNTI4OGFmZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK9zEmlzUjGoM65kCvGx5x6Cx4DJOmYAvtWR c+XhzV9MNAqsgg32FLQZ8pVsagkiGX5zDHieouNj5lYgljLJ2Joo3wOZzweTJW4t mNRSj2NWsn5UHGYVHH2qq7vV3X+6bnL69IGDIREsbQS4VIfKMiFEHB7OV30jF8XB /YqApo3uGI/AjuLAFGTjlSYfu5x6l91liIQodz8iiZxyv9fDWHAkD2MX2KCgAXEh eK2TE/04ZkClTs6cQN4w59cO383n8HXcoq1KFu7JMQdim6z1wea2xHGE/cwCdBCE d6Gfq7ldKyQSaxPAzf9psnV/2ouAGT+UA/2LWX9ZE9XOSVaYHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSDDAJcTLdefCMzRTseDuJ0IRdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvN2EzZjc3YTctMWU5MC0z Y2E0LThiN2ItMDhmYTg1YjQxNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4 OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3 ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3 YmRmN2U1YjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABF1B3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzQ0Vli+hUHNAxE50pjycuQbU06ux2OwcK+N5W+VwNCIP7lnf+W RYImaK2dTd6FsW00DJrdGa5+8FUpmgYCiQBP5ErOOqf4qm1so93+F+efXMPMd42I 5xxe+W/80bnE75NLVoXs+AbHvmoYIkkcrmupCy8oZcz/BRadq2QQf4JRjr6Jswkb sqiFHh8v5at8dbvXenOVXMnSx7SLEaBkvezCqWQt5azIvHXQsoRZyq38GbZ8OT9d G46l7G4YJgw2/Hzjg0jpBiJ1M4SQNqDZNW5nb1/ZWPno7RtkX+hEVkFJ02ulUe60 tNKhECUm49KmRs3y/EzIvUad9+6uh98F6KE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:46 2026 by rpki-client