$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa File: dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json) Hash identifier: rti53iHEvyUGomeTrX2RvYLlvBbkx6U/JBP/gCQdWas= Subject key identifier: 0F:09:E1:5E:38:8F:91:5F:75:DA:1A:8B:5C:51:90:13:46:5F:A1:56 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584DAC456BD984CB91A674AB5940 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 400065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:6b:d9:84:cb:91:a6:74:ab:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=a90cd4ac-fe1c-4e10-bd31-f2058e2831d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7b:49:17:34:af:1e:d8:9b:b7:ce:2e:8d:64: 87:66:24:fc:72:e3:00:a8:28:16:e5:2e:d5:c0:2f: 28:80:7d:97:a6:be:1d:40:c1:ad:55:2e:54:fc:a5: 57:c3:f2:fa:7a:5d:ce:06:e1:fa:71:81:3b:a6:93: d1:e8:e7:a0:62:18:03:26:8b:21:5e:9c:33:34:d6: 90:03:31:8c:10:64:aa:af:50:9e:56:29:6c:f8:d7: 89:89:88:75:e5:e9:a0:81:fa:d0:ff:a4:19:7b:dc: 7d:1f:0f:9e:8c:1e:11:38:06:b7:14:4d:86:21:c3: ad:54:cd:c4:dc:c7:ca:2f:52:99:36:bb:5d:93:90: eb:fc:a2:8a:96:17:e8:0d:43:0f:a9:c2:7a:40:3b: 1e:f0:ce:6b:c5:e4:6a:6e:98:13:61:29:dd:0a:19: 7c:a2:ab:db:8b:9b:fd:f9:52:ce:31:aa:f9:94:eb: 4d:9b:b1:40:8c:8d:71:18:85:0e:6b:05:c2:ee:24: f2:82:5a:2b:de:1d:34:b8:e5:28:ba:43:b7:46:4a: 16:fc:d2:f6:e1:85:6a:c6:fb:0d:05:23:bc:6f:bd: 1d:60:d1:44:90:8a:73:ee:29:39:12:49:3a:d0:8b: d8:0d:71:52:76:05:30:cd:c8:56:71:72:fc:8a:e0: 85:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:09:E1:5E:38:8F:91:5F:75:DA:1A:8B:5C:51:90:13:46:5F:A1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:95:ef:73:9d:4b:21:8d:6c:cf:fe:cb:6b:d2:aa:b3:1a:60: a8:79:0e:59:0f:fc:8a:5c:af:42:0b:68:7a:ea:aa:0e:88:95: 9c:1f:cf:18:ec:93:f3:53:ed:72:df:43:21:65:37:56:d9:71: 23:cc:9a:2c:38:37:31:b6:88:fc:6b:a9:33:99:c1:52:85:a6: bf:bc:db:1a:88:fd:91:c4:0f:84:63:df:45:17:2d:da:ad:14: ca:3d:e5:4e:78:0e:e6:b0:41:9b:d7:82:7c:22:de:e4:3f:0c: 8b:08:1a:69:ca:a9:21:39:ac:e0:d8:f8:2f:b8:73:3e:b6:aa: 7f:63:c3:53:90:44:d9:07:10:ce:cb:0a:d4:f8:f7:00:f0:59: 4d:fd:d4:26:63:5f:55:c9:25:02:e4:ff:95:35:40:4c:20:4b: 44:a9:c0:a7:c1:01:b7:5d:ff:f1:b7:56:e2:2c:e4:31:60:0b: c2:5d:f3:69:3c:0f:f4:70:de:3e:28:cb:bd:76:5c:26:8e:4b: e5:13:3d:08:54:c6:54:3e:76:50:4f:41:36:22:2a:81:ea:77: 2a:3b:92:0c:66:a5:f8:8c:9a:28:cd:56:47:ba:23:ca:5e:bc: 7b:ed:8c:09:70:cf:60:6a:1a:f3:b4:05:2d:2e:62:95:5d:bb: be:92:00:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2sRWvZhMuRpnSrWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk YTkwY2Q0YWMtZmUxYy00ZTEwLWJkMzEtZjIwNThlMjgzMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ntJFzSvHtibt84ujWSHZiT8cuMAqCgW5S7V wC8ogH2Xpr4dQMGtVS5U/KVXw/L6el3OBuH6cYE7ppPR6OegYhgDJoshXpwzNNaQ AzGMEGSqr1CeVils+NeJiYh15emggfrQ/6QZe9x9Hw+ejB4ROAa3FE2GIcOtVM3E 3MfKL1KZNrtdk5Dr/KKKlhfoDUMPqcJ6QDse8M5rxeRqbpgTYSndChl8oqvbi5v9 +VLOMar5lOtNm7FAjI1xGIUOawXC7iTyglor3h00uOUoukO3RkoW/NL24YVqxvsN BSO8b70dYNFEkIpz7ik5Ekk60IvYDXFSdgUwzchWcXL8iuCF+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA8J4V44j5Ffddoai1xRkBNGX6FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWV73OdSyGNbM/+y2vSqrMaYKh5DlkP/Ipcr0ILaHrqqg6IlZwf zxjsk/NT7XLfQyFlN1bZcSPMmiw4NzG2iPxrqTOZwVKFpr+82xqI/ZHED4Rj30UX LdqtFMo95U54DuawQZvXgnwi3uQ/DIsIGmnKqSE5rODY+C+4cz62qn9jw1OQRNkH EM7LCtT49wDwWU391CZjX1XJJQLk/5U1QEwgS0SpwKfBAbdd//G3VuIs5DFgC8Jd 82k8D/Rw3j4oy712XCaOS+UTPQhUxlQ+dlBPQTYiKoHqdyo7kgxmpfiMmijNVke6 I8pevHvtjAlwz2BqGvO0BS0uYpVdu76SACI= -----END CERTIFICATE-----Generated at Wed May 13 06:54:50 2026 by rpki-client