$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: YR5TyxGI3vRRqNwoeGS1INBLw4lGfex3Bs4DBiDLBB0= Subject key identifier: CA:6E:0F:69:DE:84:09:DE:C1:DD:B5:AA:3A:67:43:84:8F:97:05:8F Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584D7A0522C4B8ACA6191C3DFDC0 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:22:c4:b8:ac:a6:19:1c:3d:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=612c530a-c135-4428-a712-46c46993e929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:59:d6:fa:b8:fb:d2:16:b5:64:9b:86:57: c6:47:c3:25:72:00:95:bf:c5:09:4d:82:7c:1b:fa: 3f:ef:b0:0f:70:17:e9:26:9b:c2:fc:0e:5f:d4:56: 3d:57:c5:af:f2:43:1a:25:c2:37:04:3a:78:10:46: a0:75:c9:b3:57:07:59:fa:00:ba:50:21:a5:3f:07: 09:46:5d:f8:50:f9:dd:1a:c7:81:f2:f0:13:cf:15: ac:5d:45:41:46:f7:17:07:63:e9:e5:c4:91:1b:81: bd:33:02:4d:66:3c:77:11:43:4e:fb:72:02:cd:f0: 7d:5a:cc:8c:26:af:59:eb:6b:26:8d:65:31:f2:5a: 7d:84:a7:c2:e8:ed:02:19:af:60:8f:62:f0:0a:5b: 0e:ed:fa:3f:24:91:9b:95:b0:6f:80:86:d0:0f:be: 02:a1:2a:a7:66:91:f6:f0:8f:8a:45:62:2a:d0:51: ba:b6:75:52:43:06:6a:a9:c0:bd:7d:be:bc:a9:a3: 2c:69:3e:c3:13:aa:80:c3:db:05:85:ce:77:85:7a: 04:93:5e:e0:ff:cd:4e:c6:7d:3d:93:b6:30:9e:bc: d0:00:26:8f:b1:be:41:9d:e7:a6:e4:6a:f6:91:55: 86:82:33:d1:d3:d3:6f:dd:42:e3:5c:29:9f:96:72: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6E:0F:69:DE:84:09:DE:C1:DD:B5:AA:3A:67:43:84:8F:97:05:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:08:3d:36:2a:e8:f8:67:e2:48:ee:40:10:64:51:e5:af:83: 1a:ab:ab:cb:c4:56:6c:16:68:98:43:8e:b3:f1:ac:87:3d:7f: 7b:3b:22:a8:49:32:44:88:d8:b7:54:66:2c:05:d8:93:a5:43: 45:20:23:4d:ce:d3:1c:4c:f7:01:5f:59:66:7a:7b:44:90:1d: bf:e9:8e:a9:ea:22:c6:11:c2:21:fa:1e:56:cd:b6:a9:49:91: 63:25:ce:dd:ea:74:40:91:61:2d:8a:0c:77:ec:0b:ae:03:81: e3:84:c3:e8:fc:96:26:ce:49:03:74:f6:74:34:a8:c9:e3:dc: 65:37:1b:0b:c4:b2:e4:61:dd:69:0f:bb:ab:fa:78:55:61:cf: 13:16:b0:6e:39:7e:ac:bc:9a:27:57:0b:44:61:99:5b:5b:4f: 71:86:7d:1b:4e:49:96:a7:d9:82:73:d4:78:26:ee:4b:f8:81: cc:fd:b6:55:55:19:36:8a:7b:89:5d:5a:16:1a:9a:d1:ad:e4: fb:b7:f2:9d:c7:9f:18:f2:d8:f6:d2:01:5b:c2:c5:d4:72:04: e8:24:aa:ce:1a:ed:46:83:c3:7b:b0:e3:d4:5c:16:40:e5:b9: 4b:67:e3:b0:39:77:a0:23:28:58:02:e3:79:f3:05:9b:c8:92: 44:77:d1:ea -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BSLEuKymGRw9/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NjEyYzUzMGEtYzEzNS00NDI4LWE3MTItNDZjNDY5OTNlOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljBZ1vq4+9IWtWSbhlfGR8MlcgCVv8UJTYJ8 G/o/77APcBfpJpvC/A5f1FY9V8Wv8kMaJcI3BDp4EEagdcmzVwdZ+gC6UCGlPwcJ Rl34UPndGseB8vATzxWsXUVBRvcXB2Pp5cSRG4G9MwJNZjx3EUNO+3ICzfB9WsyM Jq9Z62smjWUx8lp9hKfC6O0CGa9gj2LwClsO7fo/JJGblbBvgIbQD74CoSqnZpH2 8I+KRWIq0FG6tnVSQwZqqcC9fb68qaMsaT7DE6qAw9sFhc53hXoEk17g/81Oxn09 k7YwnrzQACaPsb5Bneem5Gr2kVWGgjPR09Nv3ULjXCmflnLrjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpuD2nehAnewd21qjpnQ4SPlwWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/CD02Kuj4Z+JI7kAQZFHlr4Maq6vLxFZsFmiYQ46z8ayHPX97OyKo STJEiNi3VGYsBdiTpUNFICNNztMcTPcBX1lmentEkB2/6Y6p6iLGEcIh+h5Wzbap SZFjJc7d6nRAkWEtigx37AuuA4HjhMPo/JYmzkkDdPZ0NKjJ49xlNxsLxLLkYd1p D7ur+nhVYc8TFrBuOX6svJonVwtEYZlbW09xhn0bTkmWp9mCc9R4Ju5L+IHM/bZV VRk2inuJXVoWGprRreT7t/Kdx58Y8tj20gFbwsXUcgToJKrOGu1Gg8N7sOPUXBZA 5blLZ+OwOXegIyhYAuN58wWbyJJEd9Hq -----END CERTIFICATE-----Generated at Fri Apr 17 16:35:49 2026 by rpki-client