$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa File: 24977fc6-ebe4-3a2a-9569-770db3752420.roa (raw, json) Hash identifier: 10M4rJAwA4qeNQU4RQR1UUnjyQ13g1XFQbJ/+5/gAxs= Subject key identifier: 2B:1B:5A:42:42:86:B9:C4:15:53:39:BC:6A:B3:FC:4A:60:21:1D:C1 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584D6D7511CCA233B098A6AE01E0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa Signing time: Tue 07 Apr 2026 13:00:30 +0000 ROA not before: Tue 07 Apr 2026 13:00:30 +0000 ROA not after: Mon 06 Jul 2026 13:00:30 +0000 asID: 212238 IP address blocks: 2607:6b80:2a::/48 maxlen: 48 2607:6b80:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:75:11:cc:a2:33:b0:98:a6:ae:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Apr 7 13:00:30 2026 GMT Not After : Jul 6 13:00:30 2026 GMT Subject: CN=8240a0bb-1db2-4732-a65a-16abda742bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:96:70:f2:b9:65:32:06:ca:23:05:eb:8c: cf:7a:64:1c:a8:96:b2:ce:d6:b4:aa:c0:fb:52:a7: f1:3c:ea:5d:2e:b0:5e:82:10:18:ea:14:d9:23:d6: 2d:b3:61:3e:06:c5:a3:b9:ce:d6:34:5b:72:b8:b8: f1:70:4e:f2:1a:63:74:a6:a6:2f:c2:7e:f5:3d:a4: 99:a7:af:70:c1:58:ba:74:46:37:0d:35:4e:e9:96: 9f:81:58:82:2a:63:e0:b5:37:c3:06:a4:7e:1e:4f: 48:df:33:4d:2a:28:5c:b0:8a:cb:0a:d0:af:02:ad: f7:cc:36:e1:cf:85:1c:4d:62:69:53:9c:d2:38:94: 09:b9:16:17:f1:32:dd:24:64:c2:58:85:bd:e1:af: bb:eb:01:e6:cc:25:4c:20:c0:61:42:05:e0:a4:8c: f7:5d:98:a8:50:bf:87:64:51:2d:94:70:ea:17:42: 28:56:c1:f6:28:48:38:99:d2:88:25:00:35:df:43: da:fa:df:b4:50:37:15:87:6b:02:76:a2:4b:2c:60: 30:30:54:e4:43:d5:d6:ed:4a:f0:40:ae:6a:65:d2: ec:89:93:08:0b:c8:dc:b2:b8:3d:ad:52:9d:2e:5f: a1:27:3d:78:25:d2:2c:0f:43:c0:af:79:36:1b:f9: 1a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:5A:42:42:86:B9:C4:15:53:39:BC:6A:B3:FC:4A:60:21:1D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:2a::/48 2607:6b80:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ad:a2:50:09:e8:89:f1:ec:cb:c9:53:92:11:aa:0a:c7:5c: 4b:fa:6b:9b:29:ed:a9:e2:54:50:81:7e:6b:ad:9d:13:d5:9a: 3e:34:41:5b:24:2b:39:f3:fe:d7:00:bc:4f:24:da:eb:6c:38: ad:0e:c7:fb:f3:52:00:1a:83:f6:8e:00:db:2f:d0:49:92:3c: 84:05:fc:0a:39:f2:a1:5a:a4:87:cd:b6:4c:41:7d:ec:fe:25: 9c:74:97:df:11:c6:f9:69:11:7e:90:63:13:cb:70:f8:cd:cf: 49:e7:2d:d9:fd:f2:7c:43:12:d9:0c:50:1b:51:77:b9:01:54: ff:78:3a:f4:fc:04:0f:8f:96:ae:e9:35:d2:d9:c1:45:57:05: a7:1b:7f:00:be:1c:2d:d3:3e:0a:5f:91:44:35:95:70:36:f8: 4d:10:5d:d3:ec:89:a7:fa:28:1f:3a:14:4b:ef:60:40:92:5c: a8:65:a8:4b:13:33:07:d2:58:4e:87:c6:f0:3c:d8:67:8d:8d: c1:03:c3:2d:9c:37:c8:5f:a9:67:17:78:08:ae:4a:9f:32:2a: 07:64:d3:4b:d5:a9:8b:ea:e5:13:f1:aa:22:8b:51:93:c8:f9: 29:0f:d8:56:f7:3b:31:cf:0d:ae:eb:a6:0c:12:c6:13:b6:19: 8d:76:aa:39 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1tdRHMojOwmKauAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI2MDQwNzEzMDAzMFoXDTI2MDcwNjEzMDAzMFowLzEtMCsGA1UEAxMk ODI0MGEwYmItMWRiMi00NzMyLWE2NWEtMTZhYmRhNzQyYmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUyWcPK5ZTIGyiMF64zPemQcqJayzta0qsD7 UqfxPOpdLrBeghAY6hTZI9Yts2E+BsWjuc7WNFtyuLjxcE7yGmN0pqYvwn71PaSZ p69wwVi6dEY3DTVO6ZafgViCKmPgtTfDBqR+Hk9I3zNNKihcsIrLCtCvAq33zDbh z4UcTWJpU5zSOJQJuRYX8TLdJGTCWIW94a+76wHmzCVMIMBhQgXgpIz3XZioUL+H ZFEtlHDqF0IoVsH2KEg4mdKIJQA130Pa+t+0UDcVh2sCdqJLLGAwMFTkQ9XW7Urw QK5qZdLsiZMIC8jcsrg9rVKdLl+hJz14JdIsD0PAr3k2G/ka2QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCsbWkJChrnEFVM5vGqz/EpgIR3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMjQ5NzdmYzYtZWJlNC0z YTJhLTk1NjktNzcwZGIzNzUyNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgdrgAAq AwcAJgdrgAAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEGtolAJ6Inx7MvJU5IRqgrHXEv6a5sp7aniVFCB fmutnRPVmj40QVskKznz/tcAvE8k2utsOK0Ox/vzUgAag/aOANsv0EmSPIQF/Ao5 8qFapIfNtkxBfez+JZx0l98RxvlpEX6QYxPLcPjNz0nnLdn98nxDEtkMUBtRd7kB VP94OvT8BA+Plq7pNdLZwUVXBacbfwC+HC3TPgpfkUQ1lXA2+E0QXdPsiaf6KB86 FEvvYECSXKhlqEsTMwfSWE6HxvA82GeNjcEDwy2cN8hfqWcXeAiuSp8yKgdk00vV qYvq5RPxqiKLUZPI+SkP2Fb3OzHPDa7rpgwSxhO2GY12qjk= -----END CERTIFICATE-----Generated at Fri Apr 17 07:23:34 2026 by rpki-client