$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa File: f406936d-01d8-3b95-b19f-24a82e00e2b3.roa (raw, json) Hash identifier: K7+nYvskab+bWFIqka4UetF/t6EvbhoT3gYrS1VKhZo= Subject key identifier: AF:5F:C9:89:B6:D5:B9:98:9B:69:25:31:36:F6:AF:07:A2:86:AD:97 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B00982B45EA29E7166A880 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 8075 IP address blocks: 2620:147:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:09:82:b4:5e:a2:9e:71:66:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2bfc796b-63b5-4261-b5fe-4feac34ef42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2b:3b:e0:85:07:55:91:81:c5:32:c7:94:2b: 58:70:48:5e:1a:b9:7a:fb:91:e3:f8:1a:ef:6f:be: 4f:e7:d3:05:72:87:64:51:ff:81:62:c5:20:7a:f7: 73:48:37:a2:1b:84:82:6b:85:f5:25:dd:95:5d:fe: a2:df:9f:cc:e2:50:04:a3:af:01:3f:4f:f3:93:c4: 8f:73:3b:37:95:17:3f:ac:c1:78:42:5b:b0:00:69: fd:50:4c:00:a7:a5:37:7e:d6:58:42:9c:6a:6c:70: 74:29:46:9f:eb:2b:b9:2d:36:27:81:c3:e8:38:dd: 15:80:90:6e:9c:bf:26:3f:de:86:2a:ed:1b:ee:cf: 4f:50:e9:0c:c0:b5:32:b7:e6:40:e7:7c:41:7e:73: 3d:2f:53:64:bc:12:32:18:a2:e1:69:0c:b6:5b:5f: 2d:f0:87:62:24:33:23:ea:bd:ff:4a:88:a8:ab:12: 92:d6:37:a2:53:f6:28:8c:d9:c6:ff:c9:78:07:cf: 0c:f1:f7:78:54:4f:36:84:ea:f8:c7:0c:25:63:44: 81:a8:63:e8:40:a0:c7:bc:5a:84:80:2f:a1:62:a3: 79:7d:c7:1d:5d:3f:8b:ab:76:7c:a0:cf:a7:e8:f2: cf:a2:5c:3b:97:96:6d:70:07:76:8c:10:78:a4:04: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:C9:89:B6:D5:B9:98:9B:69:25:31:36:F6:AF:07:A2:86:AD:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e8:09:a2:e6:c2:d6:bc:25:be:46:5d:79:27:a0:db:39:d2: fd:d7:ad:ac:b5:bd:28:4a:df:1d:5e:11:8e:00:a9:59:cb:93: 17:72:95:09:7a:de:74:2f:4b:65:fb:78:57:a1:52:82:9c:10: 2e:ce:60:4d:76:bb:66:2a:44:af:e8:fa:fe:5d:46:37:d6:3b: bd:c0:f5:ef:d9:6e:84:c0:e4:62:0a:cb:9d:94:f6:7f:9c:4d: d0:77:f5:af:8a:26:47:66:a6:a0:7f:de:81:9e:2a:1c:ac:c7: 97:2c:f8:24:0f:6e:a8:41:a7:c2:24:aa:f5:2f:93:50:05:8a: 81:c6:0a:3e:f7:4e:7a:e4:fb:48:07:1f:ef:ce:b2:75:5f:3e: bb:d4:2d:c7:20:c8:16:0a:ae:dd:81:6e:c5:4e:b9:7a:6e:a3: 1a:59:89:88:e4:bb:15:0b:98:49:ee:f4:7c:0d:9c:6f:27:52: 49:96:9a:66:76:4b:71:ec:d7:28:94:ed:81:dd:12:5f:f3:1f: 6d:a1:d8:d5:37:bb:a4:16:1b:9c:10:e0:c0:d8:89:47:e0:25: cc:a3:be:93:59:bc:15:3b:39:05:56:77:bf:7d:3b:6a:ec:51: 5c:fa:b1:7e:67:91:0a:ec:ac:42:34:d5:ec:f6:3c:12:f6:58: 06:dd:ce:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msAmCtF6innFmqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MmJmYzc5NmItNjNiNS00MjYxLWI1ZmUtNGZlYWMzNGVmNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkis74IUHVZGBxTLHlCtYcEheGrl6+5Hj+Brv b75P59MFcodkUf+BYsUgevdzSDeiG4SCa4X1Jd2VXf6i35/M4lAEo68BP0/zk8SP czs3lRc/rMF4QluwAGn9UEwAp6U3ftZYQpxqbHB0KUaf6yu5LTYngcPoON0VgJBu nL8mP96GKu0b7s9PUOkMwLUyt+ZA53xBfnM9L1NkvBIyGKLhaQy2W18t8IdiJDMj 6r3/SoioqxKS1jeiU/YojNnG/8l4B88M8fd4VE82hOr4xwwlY0SBqGPoQKDHvFqE gC+hYqN5fccdXT+Lq3Z8oM+n6PLPolw7l5ZtcAd2jBB4pAS7CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9fyYm21bmYm2klMTb2rweihq2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZjQwNjkzNmQtMDFkOC0z Yjk1LWIxOWYtMjRhODJlMDBlMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIfoCaLmwta8Jb5GXXknoNs50v3Xray1vShK3x1eEY4AqVnLkxdy lQl63nQvS2X7eFehUoKcEC7OYE12u2YqRK/o+v5dRjfWO73A9e/ZboTA5GIKy52U 9n+cTdB39a+KJkdmpqB/3oGeKhysx5cs+CQPbqhBp8IkqvUvk1AFioHGCj73Tnrk +0gHH+/OsnVfPrvULccgyBYKrt2BbsVOuXpuoxpZiYjkuxULmEnu9HwNnG8nUkmW mmZ2S3Hs1yiU7YHdEl/zH22h2NU3u6QWG5wQ4MDYiUfgJcyjvpNZvBU7OQVWd799 O2rsUVz6sX5nkQrsrEI01ez2PBL2WAbdzlA= -----END CERTIFICATE-----Generated at Wed May 13 15:49:52 2026 by rpki-client