$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa File: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (raw, json) Hash identifier: dMQ0s/S7WBEqM3KIUcU7aR8/jLZNgReF1dkdWVzgDD0= Subject key identifier: FD:50:3C:DA:20:E4:00:49:A0:93:34:7D:67:3D:23:F5:4E:85:44:35 Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F4328584D95EFF62BE8CD5CE6CAD53060 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 393819 IP address blocks: 2606:cac0::/32 maxlen: 32 2606:cac0:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f6:2b:e8:cd:5c:e6:ca:d5:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=13907c84-a400-4e8e-a450-cd7b7e4f56b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:4d:1d:7d:dc:e2:10:d0:48:47:02:6c:ee: 15:d1:c9:3b:0a:c9:fe:ad:b8:1e:b6:6b:59:a4:44: 2f:70:db:09:79:a7:d0:8f:98:dd:a7:be:c4:9a:ad: 28:03:6c:dc:10:be:07:2e:90:d3:4e:61:b7:a0:e8: b7:f4:3f:c3:5f:27:64:f6:e7:e0:fe:eb:bf:fe:14: f9:f3:3c:83:ee:38:b0:8c:df:81:c3:a1:a7:17:ce: 03:ef:5d:72:a3:75:47:00:2d:fa:f3:61:40:82:80: 84:3a:3c:09:91:a7:31:43:ea:68:86:f6:26:5b:20: 8b:29:4c:b4:f3:5b:b1:11:b6:36:d5:bb:29:5a:77: cd:32:45:24:f7:64:31:a9:73:4a:92:b6:11:32:a0: c5:83:aa:67:c2:ca:bb:b3:2d:56:fb:00:ab:e3:ce: 2f:b1:e2:bc:cd:b1:be:4c:a9:7b:19:c1:2d:99:9f: 69:e2:0f:9b:6b:8e:5b:72:1c:3e:8f:f7:a0:37:35: 26:19:2b:32:3e:32:c6:fd:42:63:13:dd:48:11:ee: 37:d5:da:b6:04:ff:da:e3:f6:dd:b8:d1:77:18:68: 75:63:6c:9d:1e:4e:cc:3d:ca:3f:78:b6:78:a2:d5: ef:15:8e:27:6a:cf:86:1e:b9:98:77:b7:ae:9e:ce: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:3C:DA:20:E4:00:49:A0:93:34:7D:67:3D:23:F5:4E:85:44:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:cac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:86:02:cc:67:7a:71:de:be:24:09:fc:69:89:ee:39:23:cd: a3:4d:57:0b:36:91:c8:42:91:05:a9:73:98:83:f3:ab:e8:33: 9f:86:77:8c:6c:6d:2a:59:ae:4f:c4:5e:ae:39:11:5e:7b:2a: 89:7a:f7:5b:fc:c2:7b:10:5a:f1:6a:ee:d5:2c:f9:f0:50:9f: e6:3c:ab:44:a1:0c:2a:42:e8:62:ee:0e:f0:ad:16:2e:ae:3e: ae:bf:f5:5c:27:f5:e3:ff:74:d0:d9:8f:a9:fe:f3:00:1e:12: ff:4a:88:6e:c7:41:99:8f:87:de:ee:4e:e4:d7:1e:fb:21:91: 48:5a:dc:fb:9f:62:8b:0e:d4:cf:05:e5:be:4f:d5:b4:85:33: 1d:02:1b:9e:e5:57:15:3e:6c:ed:95:b1:f9:dd:69:84:1b:d3: 89:95:85:a5:5c:21:99:4c:8f:8d:aa:09:aa:8f:00:07:85:14: af:5d:e9:fa:0e:0a:f7:ce:d4:45:0e:67:04:69:29:fd:8f:95: 2e:3a:1d:59:78:6a:41:43:f4:e9:3b:bc:3d:d4:ba:99:5e:7d: a2:70:f4:d3:f1:2a:02:d3:08:ac:f0:82:47:09:52:4b:0e:93: 65:f2:0c:81:f7:c1:23:ab:fa:9e:f3:5d:c1:64:45:f1:1b:2b: 03:e8:1a:6f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2V7/Yr6M1c5srVMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MTM5MDdjODQtYTQwMC00ZThlLWE0NTAtY2Q3YjdlNGY1NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtohNHX3c4hDQSEcCbO4V0ck7Csn+rbgetmtZ pEQvcNsJeafQj5jdp77Emq0oA2zcEL4HLpDTTmG3oOi39D/DXydk9ufg/uu//hT5 8zyD7jiwjN+Bw6GnF84D711yo3VHAC3682FAgoCEOjwJkacxQ+pohvYmWyCLKUy0 81uxEbY21bspWnfNMkUk92QxqXNKkrYRMqDFg6pnwsq7sy1W+wCr484vseK8zbG+ TKl7GcEtmZ9p4g+ba45bchw+j/egNzUmGSsyPjLG/UJjE91IEe431dq2BP/a4/bd uNF3GGh1Y2ydHk7MPco/eLZ4otXvFY4nas+GHrmYd7euns6RPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP1QPNog5ABJoJM0fWc9I/VOhUQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvY2ZjNjI1ZDItNTlmYy0z ZmNhLWE5NmMtZWMzNjYwMWFiZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbKwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyhgLMZ3px3r4kCfxpie45I82jTVcLNpHIQpEFqXOYg/Or6DOfhneM bG0qWa5PxF6uORFeeyqJevdb/MJ7EFrxau7VLPnwUJ/mPKtEoQwqQuhi7g7wrRYu rj6uv/VcJ/Xj/3TQ2Y+p/vMAHhL/Sohux0GZj4fe7k7k1x77IZFIWtz7n2KLDtTP BeW+T9W0hTMdAhue5VcVPmztlbH53WmEG9OJlYWlXCGZTI+NqgmqjwAHhRSvXen6 Dgr3ztRFDmcEaSn9j5UuOh1ZeGpBQ/TpO7w91LqZXn2icPTT8SoC0wis8IJHCVJL DpNl8gyB98Ejq/qe813BZEXxGysD6Bpv -----END CERTIFICATE-----Generated at Wed May 13 13:15:27 2026 by rpki-client