$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa File: abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa (raw, json) Hash identifier: sc3Br12Mq/TjNjirjealnJXWQ90/hNo/GWuP4TU4SnA= Subject key identifier: D3:2A:78:D6:06:71:80:C2:C2:B0:BE:FF:B5:6B:5D:C1:D4:F4:2F:2E Certificate issuer: /CN=c9a96b03-6960-4655-8e34-04473ec1768f Certificate serial: 010D0C9F4328584D55BCB94452DB1CF89D298D80 Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 40232 IP address blocks: 2607:e7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b9:44:52:db:1c:f8:9d:29:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=11557bac-2fb0-475a-a072-99f02eaaef60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:40:98:62:fd:55:d8:48:3f:ce:e8:b2:c3: 04:30:83:2b:46:d1:0a:10:fd:64:2a:05:42:17:da: d9:c4:f1:66:29:ed:d4:12:39:06:84:9d:62:0d:1f: e8:7c:1e:82:9d:c5:20:55:12:5d:5b:89:bb:d6:d1: 6e:d5:b3:e9:d6:e7:72:0b:5c:ff:66:43:14:c2:97: 81:21:35:1e:99:12:d4:07:81:b0:56:54:b6:66:19: 0b:dd:28:26:22:da:30:99:6e:86:ea:25:9d:25:bb: 9a:56:f0:a7:8e:61:54:89:38:8f:ce:2e:6f:63:c1: b6:f4:b6:e5:fa:88:04:51:ed:e8:e5:5c:e1:ce:2a: f1:58:d2:c8:7c:88:3e:db:b7:68:1c:53:42:95:ab: 7b:58:73:97:80:dd:96:fa:de:d6:bf:c1:10:7b:91: f9:b3:e0:fd:58:f8:fc:03:cd:52:77:a4:56:6b:00: 2d:dc:b2:04:d6:c0:79:f2:2f:45:a9:32:ba:05:1d: 5e:72:bd:bc:bc:1f:7b:9e:6b:75:bb:8a:8b:07:81: 5f:b2:e2:bb:2f:e5:62:d2:d1:57:18:96:36:b3:17: 84:2f:f9:26:d3:70:73:45:98:b6:f0:5c:63:2f:62: 9c:4a:f4:6f:62:82:e5:a6:2a:41:6f:43:24:0a:07: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:78:D6:06:71:80:C2:C2:B0:BE:FF:B5:6B:5D:C1:D4:F4:2F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/abd1a5c2-5455-3d56-9f2d-7ec6f3b7a180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl X509v3 Authority Key Identifier: keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer sbgp-ipAddrBlock: critical IPv6: 2607:e7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a0:3e:0b:e8:da:33:16:32:4a:9b:11:64:7f:b2:8e:cd:c4: 0b:f2:27:cf:44:29:3b:b7:96:36:f4:3c:81:87:ce:01:23:be: 6d:17:bd:2b:66:1e:3e:24:dc:3c:f8:21:dc:6f:80:25:38:02: 48:de:85:46:00:8d:b0:68:bf:a3:40:44:93:ca:3e:fd:2c:0e: c7:6a:1c:52:4f:a1:1e:c6:cd:db:8e:f6:ff:22:c0:0d:9c:8e: 22:fa:f3:b4:97:2a:8a:04:70:27:06:ae:b1:a1:c1:ea:ac:cb: 18:7f:71:54:39:83:ac:ab:84:fa:4f:95:09:82:09:59:23:fd: cd:39:13:cd:06:a1:de:88:f4:ff:4c:76:7f:cd:83:69:f3:47: 32:0b:b0:53:69:55:6c:1e:75:00:9a:ef:68:9c:53:62:f2:03: b9:f7:56:82:c2:39:c9:e8:9f:b3:ce:17:39:49:64:ce:5b:22: f0:96:4f:f3:84:87:3f:8e:34:14:07:42:a2:c7:89:ae:f7:4f: 26:4e:70:fc:19:c3:1c:69:09:c6:7a:34:b1:67:5e:30:74:08: 9c:fe:a3:7b:e8:43:06:74:d6:b8:68:ab:74:77:2d:35:bb:e4: b1:22:9d:c9:5f:87:92:89:d3:d0:1c:ea:02:83:53:ae:2b:80: 11:cb:bd:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1VvLlEUtsc+J0pjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3 NjhmMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MTE1NTdiYWMtMmZiMC00NzVhLWEwNzItOTlmMDJlYWFlZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDRAmGL9VdhIP87ossMEMIMrRtEKEP1kKgVC F9rZxPFmKe3UEjkGhJ1iDR/ofB6CncUgVRJdW4m71tFu1bPp1udyC1z/ZkMUwpeB ITUemRLUB4GwVlS2ZhkL3SgmItowmW6G6iWdJbuaVvCnjmFUiTiPzi5vY8G29Lbl +ogEUe3o5VzhzirxWNLIfIg+27doHFNClat7WHOXgN2W+t7Wv8EQe5H5s+D9WPj8 A81Sd6RWawAt3LIE1sB58i9FqTK6BR1ecr28vB97nmt1u4qLB4FfsuK7L+Vi0tFX GJY2sxeEL/km03BzRZi28FxjL2KcSvRvYoLlpipBb0MkCgeVpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMqeNYGcYDCwrC+/7VrXcHU9C8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5 NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvYWJkMWE1YzItNTQ1NS0z ZDU2LTlmMmQtN2VjNmYzYjdhMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3 M2VjMTc2OGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfnwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzoD4L6NozFjJKmxFkf7KOzcQL8ifPRCk7t5Y29DyBh84BI75tF70r Zh4+JNw8+CHcb4AlOAJI3oVGAI2waL+jQESTyj79LA7HahxST6Eexs3bjvb/IsAN nI4i+vO0lyqKBHAnBq6xocHqrMsYf3FUOYOsq4T6T5UJgglZI/3NORPNBqHeiPT/ THZ/zYNp80cyC7BTaVVsHnUAmu9onFNi8gO591aCwjnJ6J+zzhc5SWTOWyLwlk/z hIc/jjQUB0Kix4mu908mTnD8GcMcaQnGejSxZ14wdAic/qN76EMGdNa4aKt0dy01 u+SxIp3JX4eSidPQHOoCg1OuK4ARy73P -----END CERTIFICATE-----Generated at Fri Apr 17 20:46:57 2026 by rpki-client