$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa File: ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa (raw, json) Hash identifier: N7ZgRDJ6bDtU0LCcnmk20JJUenuYF1mimrTP0p8S8rw= Subject key identifier: 02:02:A5:0B:20:41:99:0D:25:54:EE:60:D0:91:95:2C:0B:C9:5A:F2 Certificate issuer: /CN=a4e67936-c857-487d-93df-2dff7fa79988 Certificate serial: 010D0C9F4328584D7F9A89A299C43CC8DA8DDD80 Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19940 IP address blocks: 2606:8800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:89:a2:99:c4:3c:c8:da:8d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=dff2e90e-e7f6-4254-902a-410817ad7592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:2d:26:52:d3:de:4a:18:d5:bd:c6:06:16: e1:5e:bb:2f:47:8c:5b:f9:e5:97:f5:ad:d3:3c:fb: 03:04:b0:a0:d2:96:cf:86:d0:27:37:56:0e:c9:31: c4:fd:26:1f:f3:db:7a:90:cc:27:e6:8f:6b:1b:b5: 72:a1:67:56:2a:07:26:cb:99:66:df:08:d2:f2:06: 03:d4:2d:aa:f2:d2:73:89:32:ad:81:db:08:e7:53: 30:ad:58:8c:08:ef:32:b9:7d:bc:69:bc:00:ce:29: 65:0e:f8:9f:54:42:c6:a7:0c:d3:31:13:30:31:ac: 01:ec:0c:64:c9:b3:7e:02:97:4e:1d:e5:4f:33:ee: af:c9:cf:a1:c3:51:14:0b:91:71:ed:73:ea:87:60: 75:28:82:4b:20:ee:ba:50:85:c2:de:eb:d6:ef:f0: 62:b0:0e:54:1d:d3:96:08:84:a6:a9:4a:c2:6f:3c: 5f:99:10:43:40:63:c0:d5:6b:87:fa:7f:9a:20:94: 53:9b:46:d7:29:00:c4:53:53:5f:5c:d7:42:5d:31: 46:70:ae:25:a5:ec:4b:82:ce:6a:c5:91:eb:7c:38: 3e:b1:aa:45:bf:78:55:87:75:c7:50:d1:00:3a:69: ad:de:04:82:67:69:90:4a:ca:14:8a:6b:ac:00:2f: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:A5:0B:20:41:99:0D:25:54:EE:60:D0:91:95:2C:0B:C9:5A:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/ffad3f0d-df61-36b2-bf0b-ab3759c78ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl X509v3 Authority Key Identifier: keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer sbgp-ipAddrBlock: critical IPv6: 2606:8800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:68:71:32:a4:9e:a7:31:94:02:fb:e9:42:a1:da:f2:a0:82: d1:bc:bc:fb:26:a9:09:b2:49:30:48:82:52:53:67:c7:6c:7f: 3d:1b:56:42:b6:46:27:e4:c3:85:21:5d:a4:35:2f:9e:64:ee: c5:46:b7:04:ac:bc:81:83:50:71:1b:7b:79:d1:1f:bf:5b:b6: a3:be:ea:a2:38:fc:30:8a:d3:0b:bf:a4:1e:5b:59:4d:72:bb: e7:0f:8c:55:69:fd:67:a3:72:c8:9c:ac:44:5f:dc:76:07:36: 42:b5:88:9b:1e:ae:75:d9:36:c2:bf:7d:fc:d5:51:86:cd:9c: 8b:98:14:67:23:52:2c:ee:0a:83:d6:5c:f1:eb:a3:0f:ef:80: e1:cd:06:07:bc:45:9d:9b:4e:9f:a4:8b:15:06:01:e3:3e:c3: c4:d4:4a:7d:03:95:b4:d7:f9:36:a8:06:f7:c7:20:f7:a8:8d: 7d:81:de:99:c9:1b:59:58:0c:4a:9d:47:bb:18:c8:f4:76:bd: 1f:66:7a:b8:d6:36:43:41:7d:77:30:ba:e0:62:92:4e:50:74: df:28:bf:55:96:f2:0c:1d:4f:da:cb:58:4b:a3:8c:c2:54:7f: 26:0f:f9:c0:bc:c8:a1:2b:1b:32:43:08:d8:6e:61:09:03:85: 5b:83:03:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1/momimcQ8yNqN3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlNjc5MzYtYzg1Ny00ODdkLTkzZGYtMmRmZjdmYTc5 OTg4MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGZmMmU5MGUtZTdmNi00MjU0LTkwMmEtNDEwODE3YWQ3NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAougtJlLT3koY1b3GBhbhXrsvR4xb+eWX9a3T PPsDBLCg0pbPhtAnN1YOyTHE/SYf89t6kMwn5o9rG7VyoWdWKgcmy5lm3wjS8gYD 1C2q8tJziTKtgdsI51MwrViMCO8yuX28abwAzillDvifVELGpwzTMRMwMawB7Axk ybN+ApdOHeVPM+6vyc+hw1EUC5Fx7XPqh2B1KIJLIO66UIXC3uvW7/BisA5UHdOW CISmqUrCbzxfmRBDQGPA1WuH+n+aIJRTm0bXKQDEU1NfXNdCXTFGcK4lpexLgs5q xZHrfDg+sapFv3hVh3XHUNEAOmmt3gSCZ2mQSsoUimusAC9OeQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAICpQsgQZkNJVTuYNCRlSwLyVryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2 NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZmN2ZhNzk5ODgvZmZhZDNmMGQtZGY2MS0z NmIyLWJmMGItYWIzNzU5Yzc4ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTRlNjc5MzYtYzg1Ny00ODdkLTkz ZGYtMmRmZjdmYTc5OTg4L2E0ZTY3OTM2LWM4NTctNDg3ZC05M2RmLTJkZmY3ZmE3 OTk4OC5jcmwwHwYDVR0jBBgwFoAUFqXjOhIoly6fUjQBp27hlpzf6Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNGU2NzkzNi1jODU3LTQ4N2QtOTNkZi0yZGZm N2ZhNzk5ODguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaIADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBkaHEypJ6nMZQC++lCodryoILRvLz7JqkJskkwSIJSU2fHbH89G1ZC tkYn5MOFIV2kNS+eZO7FRrcErLyBg1BxG3t50R+/W7ajvuqiOPwwitMLv6QeW1lN crvnD4xVaf1no3LInKxEX9x2BzZCtYibHq512TbCv3381VGGzZyLmBRnI1Is7gqD 1lzx66MP74DhzQYHvEWdm06fpIsVBgHjPsPE1Ep9A5W01/k2qAb3xyD3qI19gd6Z yRtZWAxKnUe7GMj0dr0fZnq41jZDQX13MLrgYpJOUHTfKL9VlvIMHU/ay1hLo4zC VH8mD/nAvMihKxsyQwjYbmEJA4VbgwP8 -----END CERTIFICATE-----Generated at Fri Apr 17 09:35:05 2026 by rpki-client