$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa File: 06a7945a-0360-3338-a5f2-7799e064b387.roa (raw, json) Hash identifier: 2awifBgQsjCqWimyfjk9ZIfkQeAvjz+MVZjYZy1ziOc= Subject key identifier: 53:D8:98:9D:77:E3:DB:52:EC:24:95:D7:B3:FB:E1:FC:AA:EE:5B:DE Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584D6AAAABE8AD4A7C4CA799CF80 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 16557 IP address blocks: 2607:f528::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:ab:e8:ad:4a:7c:4c:a7:99:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=655ed656-43a2-48a2-89ab-deef7043a9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:5b:a4:c1:21:9c:0b:97:71:a3:11:15:20:27: 96:b0:7a:dd:83:86:9c:c9:9a:c2:91:52:a2:95:ba: 08:cb:df:80:f5:e0:3a:94:ba:cb:c6:93:7c:c6:66: 4e:86:2e:bc:46:93:4b:25:0a:f2:78:59:94:0f:66: 19:82:e5:16:99:ed:88:79:d1:4d:07:65:4a:d7:54: 46:33:6c:d8:0c:49:10:f0:72:5e:c3:06:4f:9a:38: ca:d1:01:0f:fd:9b:ec:86:b0:66:1f:3a:a7:e1:cb: c5:41:05:8d:bf:9c:5d:31:40:6f:17:43:1a:4f:86: b7:96:7d:93:ef:7d:53:3c:ef:cb:4b:c3:8d:bb:14: 83:f5:85:dc:5f:1a:e3:99:f5:f4:97:1f:d4:b0:67: 9a:9d:17:8e:86:ec:ba:db:81:77:f5:53:aa:ec:4a: c0:bb:81:e9:ab:86:5e:b9:5f:75:16:76:c2:92:cb: 7d:75:58:db:45:75:56:3b:b8:f2:e0:03:a3:4c:23: 4a:fa:3c:09:9a:0a:e1:43:6b:d2:ba:c0:27:81:55: f8:a1:18:2c:5b:c6:cf:cb:b6:76:cc:e7:63:0f:95: b6:1e:9f:3e:a8:68:1b:91:94:5f:5a:4b:c3:39:97: ea:0a:da:bb:c7:6e:c3:07:1d:5e:d0:ed:53:a5:6a: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D8:98:9D:77:E3:DB:52:EC:24:95:D7:B3:FB:E1:FC:AA:EE:5B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/06a7945a-0360-3338-a5f2-7799e064b387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv6: 2607:f528::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c4:aa:9d:e5:31:d8:cc:cd:6b:15:b8:50:7f:7a:9f:cd:b3: 53:78:cd:28:6f:ae:d4:db:5e:7f:64:b4:3c:36:b9:f7:ee:83: 57:2a:04:80:58:1e:7b:ae:3b:2f:78:23:38:64:e7:a6:b9:ed: c5:86:cd:94:b0:fe:d2:34:36:74:cc:00:fb:fe:06:66:52:83: 0d:a6:d3:41:d7:76:db:e1:b7:a4:9a:3d:3d:49:78:cd:69:1d: 9b:3c:e4:eb:66:66:38:f4:28:21:75:e2:a7:06:94:c0:70:38: 3e:e6:15:ca:24:4f:2b:a1:b9:e4:ca:21:df:60:08:de:f9:c6: 15:15:7f:f0:3e:a7:91:35:96:d8:c2:7b:1b:11:4e:30:83:56: 26:ad:cb:e0:d2:4b:e1:c3:45:77:66:9f:e5:76:f4:48:0f:d0: 28:64:0d:f0:f4:b7:d4:1d:5f:05:e2:4d:b7:8f:59:29:58:7b: 58:c8:f4:fe:6c:c4:f3:3a:3f:00:64:a7:5f:a8:64:45:dd:d7: aa:e6:c4:86:ec:0e:38:57:2f:8f:e1:1d:28:89:ac:5e:15:a5: 41:b9:41:d6:b4:88:fc:b9:12:9a:29:56:97:fa:a1:a1:23:9b: 76:76:27:4c:a5:a0:7e:44:49:82:77:02:c0:9b:3e:fb:94:34: b7:4f:21:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1qqqvorUp8TKeZz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk NjU1ZWQ2NTYtNDNhMi00OGEyLTg5YWItZGVlZjcwNDNhOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81ukwSGcC5dxoxEVICeWsHrdg4acyZrCkVKi lboIy9+A9eA6lLrLxpN8xmZOhi68RpNLJQryeFmUD2YZguUWme2IedFNB2VK11RG M2zYDEkQ8HJewwZPmjjK0QEP/ZvshrBmHzqn4cvFQQWNv5xdMUBvF0MaT4a3ln2T 731TPO/LS8ONuxSD9YXcXxrjmfX0lx/UsGeanReOhuy624F39VOq7ErAu4Hpq4Ze uV91FnbCkst9dVjbRXVWO7jy4AOjTCNK+jwJmgrhQ2vSusAngVX4oRgsW8bPy7Z2 zOdjD5W2Hp8+qGgbkZRfWkvDOZfqCtq7x27DBx1e0O1TpWrGRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFPYmJ1349tS7CSV17P74fyq7lveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDZhNzk0NWEtMDM2MC0z MzM4LWE1ZjItNzc5OWUwNjRiMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1KDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFxKqd5THYzM1rFbhQf3qfzbNTeM0ob67U215/ZLQ8Nrn37oNXKgSA WB57rjsveCM4ZOemue3Fhs2UsP7SNDZ0zAD7/gZmUoMNptNB13bb4bekmj09SXjN aR2bPOTrZmY49CghdeKnBpTAcDg+5hXKJE8robnkyiHfYAje+cYVFX/wPqeRNZbY wnsbEU4wg1Ymrcvg0kvhw0V3Zp/ldvRID9AoZA3w9LfUHV8F4k23j1kpWHtYyPT+ bMTzOj8AZKdfqGRF3deq5sSG7A44Vy+P4R0oiaxeFaVBuUHWtIj8uRKaKVaX+qGh I5t2didMpaB+REmCdwLAmz77lDS3TyFh -----END CERTIFICATE-----Generated at Fri Apr 17 16:21:12 2026 by rpki-client