$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa File: cb8dfe46-45a8-3613-b90e-91142e177fbf.roa (raw, json) Hash identifier: kmymDWWqIOE8xWmCXbDXbdViVr27l6QzqObCaJftMo4= Subject key identifier: 07:DE:96:C4:1C:3C:98:EF:7B:3D:52:BF:FD:73:D3:E2:66:80:6E:25 Certificate issuer: /CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Certificate serial: 010D0C9F4328584D7A05274428D623E9115C2E00 Authority key identifier: 10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 401911 IP address blocks: 2602:f5a7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:27:44:28:d6:23:e9:11:5c:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf1aed-80da-474d-8e77-0000ca0d6025 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=185f2f06-5d11-4054-9e1f-e78e9df8342a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:15:87:e7:91:6b:e2:b3:8f:24:52:a9:04:10: c9:0a:86:7b:87:47:04:39:f3:34:5a:b9:f6:05:8a: b5:b7:85:2d:11:b2:58:2c:08:f6:70:25:bf:9b:6f: 28:f0:88:bf:ab:85:57:b1:0e:20:a0:0d:18:98:59: ad:e7:34:78:13:7c:50:7f:e6:46:03:78:41:7a:5c: 11:61:54:b8:3c:54:8d:d8:45:b6:9e:a6:12:be:95: ad:43:21:f9:dd:6e:15:5d:de:b0:7c:31:53:70:b6: 1c:89:73:bc:8d:9b:18:cc:5a:28:4f:f9:2f:07:02: 09:0b:2a:f3:e3:fa:96:da:1a:a7:16:a8:62:45:02: d5:0e:36:83:44:2e:d7:dc:e0:17:05:f1:c8:d0:92: 0d:ee:24:47:73:dc:81:04:e2:6b:03:1e:5f:f4:47: 8c:9d:0f:3a:31:15:0d:c3:35:22:96:a8:df:52:c2: 3c:d1:9a:3c:3e:bf:e6:86:92:98:68:e9:87:27:fe: e3:29:91:77:fc:a9:4f:66:31:bc:af:59:59:10:6a: ba:c9:a1:be:3b:a9:b2:29:2a:3a:dc:80:2a:11:eb: 59:53:d8:a1:29:5e:f1:79:51:97:ea:cf:e8:4d:49: 98:83:86:b8:72:a0:91:ad:0c:88:2c:9e:40:21:f8: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DE:96:C4:1C:3C:98:EF:7B:3D:52:BF:FD:73:D3:E2:66:80:6E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/cb8dfe46-45a8-3613-b90e-91142e177fbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025/9caf1aed-80da-474d-8e77-0000ca0d6025.crl X509v3 Authority Key Identifier: keyid:10:EB:39:3F:86:C8:66:53:C6:41:1E:D4:8D:97:EB:71:99:4C:E6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9caf1aed-80da-474d-8e77-0000ca0d6025.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5a7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bf:89:7f:3d:49:a2:75:fb:03:c7:70:7a:23:75:ee:9f:cb: 25:ef:0f:48:65:63:aa:30:00:2b:1b:8f:ca:f9:72:18:43:a9: 58:7e:23:df:29:3d:da:29:36:a9:32:43:e8:25:72:f4:73:51: 5c:db:19:71:30:ae:95:ad:6a:b1:db:08:62:69:72:0d:fb:7b: 43:57:d7:cc:6c:7e:6d:5a:79:db:8b:e9:6f:52:6b:2f:16:08: e1:42:a7:42:02:36:5e:f8:38:97:43:4f:60:07:24:27:a2:2f: 43:f3:60:d4:e7:bb:b6:91:15:8d:14:8b:26:a0:6a:2f:10:c7: b7:a7:0a:ba:0f:37:0c:9c:10:08:22:bf:15:48:0b:bf:6f:d3: 24:8a:79:05:8c:63:46:f1:cc:3f:b7:81:69:07:fd:3a:e3:f8: 36:b9:92:bd:a2:44:d0:28:77:28:0a:b9:df:a1:eb:ed:0a:85: 38:09:5f:a5:5c:a6:76:a7:64:3d:de:62:ad:bc:aa:dc:44:d5: 86:89:be:c4:e7:34:b9:da:c5:84:ed:09:32:19:25:90:d9:fa: eb:d5:96:03:3c:c7:0b:07:e2:f1:28:c7:b7:0c:4a:b2:04:05: 2a:ee:16:1b:d3:7d:d7:58:bd:43:ea:cc:f6:be:e2:3b:c6:f6: b9:ca:84:d7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE16BSdEKNYj6RFcLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjFhZWQtODBkYS00NzRkLThlNzctMDAwMGNhMGQ2 MDI1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MTg1ZjJmMDYtNWQxMS00MDU0LTllMWYtZTc4ZTlkZjgzNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hWH55Fr4rOPJFKpBBDJCoZ7h0cEOfM0Wrn2 BYq1t4UtEbJYLAj2cCW/m28o8Ii/q4VXsQ4goA0YmFmt5zR4E3xQf+ZGA3hBelwR YVS4PFSN2EW2nqYSvpWtQyH53W4VXd6wfDFTcLYciXO8jZsYzFooT/kvBwIJCyrz 4/qW2hqnFqhiRQLVDjaDRC7X3OAXBfHI0JIN7iRHc9yBBOJrAx5f9EeMnQ86MRUN wzUilqjfUsI80Zo8Pr/mhpKYaOmHJ/7jKZF3/KlPZjG8r1lZEGq6yaG+O6myKSo6 3IAqEetZU9ihKV7xeVGX6s/oTUmYg4a4cqCRrQyILJ5AIfiKnQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAfelsQcPJjvez1Sv/1z0+JmgG4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Fm MWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAwY2EwZDYwMjUvY2I4ZGZlNDYtNDVhOC0z NjEzLWI5MGUtOTExNDJlMTc3ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNhZjFhZWQtODBkYS00NzRkLThl NzctMDAwMGNhMGQ2MDI1LzljYWYxYWVkLTgwZGEtNDc0ZC04ZTc3LTAwMDBjYTBk NjAyNS5jcmwwHwYDVR0jBBgwFoAUEOs5P4bIZlPGQR7UjZfrcZlM5iswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2FmMWFlZC04MGRhLTQ3NGQtOGU3Ny0wMDAw Y2EwZDYwMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL1pwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcb+Jfz1JonX7A8dweiN17p/LJe8PSGVjqjAAKxuPyvlyGEOpWH4j 3yk92ik2qTJD6CVy9HNRXNsZcTCula1qsdsIYmlyDft7Q1fXzGx+bVp524vpb1Jr LxYI4UKnQgI2Xvg4l0NPYAckJ6IvQ/Ng1Oe7tpEVjRSLJqBqLxDHt6cKug83DJwQ CCK/FUgLv2/TJIp5BYxjRvHMP7eBaQf9OuP4NrmSvaJE0Ch3KAq536Hr7QqFOAlf pVymdqdkPd5irbyq3ETVhom+xOc0udrFhO0JMhklkNn669WWAzzHCwfi8SjHtwxK sgQFKu4WG9N911i9Q+rM9r7iO8b2ucqE1w== -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:52 2026 by rpki-client