$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa File: 25f78cd6-2361-34d7-bc58-29a86b5c8031.roa (raw, json) Hash identifier: KKrOAqK1C5Nn9l3E6l8mhJ14Rnrgh3aTqT3vM2uKREQ= Subject key identifier: 19:4C:99:6C:C0:C4:9E:7D:8E:57:DF:E3:F4:2F:0C:2C:79:D2:7F:54 Certificate issuer: /CN=0acd930f-69db-4fad-a737-b4b3b2f142c6 Certificate serial: 010D0C9F4328584D97A5CE5B67AC30DE49909380 Authority key identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa Signing time: Wed 22 Apr 2026 15:42:43 +0000 ROA not before: Wed 22 Apr 2026 15:42:43 +0000 ROA not after: Tue 21 Jul 2026 15:42:43 +0000 asID: 396836 IP address blocks: 2604:24e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:a5:ce:5b:67:ac:30:de:49:90:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0acd930f-69db-4fad-a737-b4b3b2f142c6 Validity Not Before: Apr 22 15:42:43 2026 GMT Not After : Jul 21 15:42:43 2026 GMT Subject: CN=cff34001-5973-475b-af21-7d9d6255490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:ba:e8:2a:10:24:a2:52:33:61:5e:56:00: 5b:9b:76:3f:3b:c3:24:53:a7:96:ee:8e:79:ca:f2: 80:a8:2a:d5:68:db:6e:ae:61:f2:b8:b2:5f:08:51: 5e:28:b1:35:5b:43:e4:0a:53:0e:ef:14:57:88:b7: b3:57:82:3a:8e:59:c9:91:80:6a:bf:cd:c8:7c:2c: 9a:a1:fd:9b:4a:8f:7b:64:de:cc:47:f2:e3:f8:06: c4:b9:f9:21:85:80:c3:f1:52:cd:3d:a6:03:4c:ec: 64:82:ed:da:ba:0c:93:50:ed:b2:a3:dc:94:32:ba: a7:c7:ae:26:6c:51:9d:b2:32:60:a9:55:69:89:e0: e2:91:0f:7a:3e:c6:5f:89:db:be:7b:d3:48:8d:b9: f3:08:8e:b9:40:4e:e0:4f:84:a0:cb:77:ee:a8:55: af:c2:b2:66:a1:5f:00:62:da:ae:0b:2a:e1:cd:d1: 23:c0:c5:11:d8:57:81:e9:bc:83:b7:01:ef:a0:ec: cc:e1:1b:f3:7e:40:f9:72:d2:fd:99:1a:41:45:8a: 63:05:ef:35:8b:2a:82:bb:99:ca:ba:59:a6:f2:76: 70:fb:ab:de:2d:fb:d6:10:0f:82:07:37:b9:c2:c6: c9:5e:6a:b4:61:36:87:3a:c4:38:7d:f7:b7:ff:51: 92:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4C:99:6C:C0:C4:9E:7D:8E:57:DF:E3:F4:2F:0C:2C:79:D2:7F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/25f78cd6-2361-34d7-bc58-29a86b5c8031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl X509v3 Authority Key Identifier: keyid:12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer sbgp-ipAddrBlock: critical IPv6: 2604:24e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2e:22:17:dd:4f:e3:93:30:84:9c:bd:87:9b:b4:39:34:8b: 57:95:a0:86:61:71:6e:79:1d:ee:3d:26:fb:ab:05:42:b5:29: 84:38:43:e7:d6:0f:ae:32:83:2c:5d:e6:5b:03:8a:1e:c8:78: 26:32:f2:c7:d6:84:aa:12:dc:eb:06:f6:df:8b:7f:c7:5a:7b: 4f:79:ab:11:e4:c0:06:c5:ae:6f:c9:f6:fb:8b:e9:7b:4c:c3: 96:ad:3a:48:e9:82:57:9a:33:82:83:35:49:36:e4:69:91:72: c8:d9:4d:ed:98:be:37:46:03:8c:9d:4b:8e:21:eb:de:95:73: a8:73:1b:38:5f:c1:14:dd:ea:60:d7:c3:38:97:ab:ab:46:8b: 04:ca:71:3a:f9:54:32:b4:db:00:6f:b0:f0:9e:6d:20:1c:81: 5d:a4:9f:13:bc:13:2b:a1:02:06:b1:20:35:9e:33:d9:dd:c9: 67:ee:a8:e8:97:38:99:3c:da:82:9c:52:f2:9f:b3:82:ef:f8: 07:52:95:28:18:76:47:4e:f9:95:9d:55:1f:18:08:a4:3e:4b: ba:23:95:10:2d:59:5c:d1:3e:ed:1e:87:70:13:62:70:53:f9: 40:cc:87:46:94:48:e0:f6:cf:36:ce:d3:ac:a0:22:09:87:8e: 2b:3a:36:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Xpc5bZ6ww3kmQk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFjZDkzMGYtNjlkYi00ZmFkLWE3MzctYjRiM2IyZjE0 MmM2MB4XDTI2MDQyMjE1NDI0M1oXDTI2MDcyMTE1NDI0M1owLzEtMCsGA1UEAxMk Y2ZmMzQwMDEtNTk3My00NzViLWFmMjEtN2Q5ZDYyNTU0OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpa66CoQJKJSM2FeVgBbm3Y/O8MkU6eW7o55 yvKAqCrVaNturmHyuLJfCFFeKLE1W0PkClMO7xRXiLezV4I6jlnJkYBqv83IfCya of2bSo97ZN7MR/Lj+AbEufkhhYDD8VLNPaYDTOxkgu3augyTUO2yo9yUMrqnx64m bFGdsjJgqVVpieDikQ96PsZfidu+e9NIjbnzCI65QE7gT4Sgy3fuqFWvwrJmoV8A YtquCyrhzdEjwMUR2FeB6byDtwHvoOzM4RvzfkD5ctL9mRpBRYpjBe81iyqCu5nK ulmm8nZw+6veLfvWEA+CBze5wsbJXmq0YTaHOsQ4ffe3/1GSiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBlMmWzAxJ59jlff4/QvDCx50n9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYWNk OTMwZi02OWRiLTRmYWQtYTczNy1iNGIzYjJmMTQyYzYvMjVmNzhjZDYtMjM2MS0z NGQ3LWJjNTgtMjlhODZiNWM4MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGFjZDkzMGYtNjlkYi00ZmFkLWE3 MzctYjRiM2IyZjE0MmM2LzBhY2Q5MzBmLTY5ZGItNGZhZC1hNzM3LWI0YjNiMmYx NDJjNi5jcmwwHwYDVR0jBBgwFoAUEnzpB2drgeJ3n5xiN123GV/jZEgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wYWNkOTMwZi02OWRiLTRmYWQtYTczNy1iNGIz YjJmMTQyYzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQk4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCRLiIX3U/jkzCEnL2Hm7Q5NItXlaCGYXFueR3uPSb7qwVCtSmEOEPn 1g+uMoMsXeZbA4oeyHgmMvLH1oSqEtzrBvbfi3/HWntPeasR5MAGxa5vyfb7i+l7 TMOWrTpI6YJXmjOCgzVJNuRpkXLI2U3tmL43RgOMnUuOIevelXOocxs4X8EU3epg 18M4l6urRosEynE6+VQytNsAb7Dwnm0gHIFdpJ8TvBMroQIGsSA1njPZ3cln7qjo lziZPNqCnFLyn7OC7/gHUpUoGHZHTvmVnVUfGAikPku6I5UQLVlc0T7tHodwE2Jw U/lAzIdGlEjg9s82ztOsoCIJh44rOjY4 -----END CERTIFICATE-----Generated at Wed May 13 07:56:14 2026 by rpki-client