$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa File: 7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json) Hash identifier: BfaRw+lFXDiFQ24DZjhsFF69xmIzQMAp00KoV5e9FXU= Subject key identifier: 5A:74:71:CB:20:4C:2C:95:E6:84:FE:A8:FC:70:27:5C:81:4B:94:09 Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F4328584DA6B0234CF77D05AEE3ED8D80 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 394770 IP address blocks: 2607:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:23:4c:f7:7d:05:ae:e3:ed:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=94fcc39b-da2e-4c86-bffd-e14d40f16350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:90:27:ef:36:84:61:35:80:36:1e:8a:89: 31:90:1d:10:79:81:0b:93:86:f2:ea:19:9c:40:8f: 0f:63:54:ef:15:46:56:f3:cc:2c:a0:f3:a7:33:4a: 15:85:38:60:c0:4f:f5:e8:18:3b:e8:4a:42:7c:3b: e5:ec:fb:61:0a:7e:3c:4b:5e:27:3d:30:5a:07:bc: f1:3e:b9:c6:4d:91:0a:44:cb:7d:c2:dd:60:17:8c: 51:d7:91:ca:f5:9b:b9:af:75:b9:ad:ed:11:c3:ba: 86:92:a3:63:dc:79:bc:ff:84:0c:ce:eb:1f:8c:d6: 2e:3e:66:45:f0:be:8f:3e:be:68:9c:23:23:3b:c7: 09:c1:7c:f1:b7:43:5f:e2:73:60:78:73:00:6e:25: d0:e8:83:e8:43:fd:63:41:f2:c0:f0:4d:bc:2f:6d: 3e:fc:be:28:95:41:23:c1:96:d5:96:32:95:78:40: 27:44:6f:74:77:bf:31:de:7d:00:77:47:98:96:33: 7b:43:9a:58:3e:14:96:e5:5d:70:ce:55:40:ce:fb: 4a:b2:2e:90:57:70:4b:c3:4b:b0:93:cb:73:9b:fc: 36:32:17:20:86:a1:ea:5e:c2:32:09:bb:fb:bc:0f: f8:2d:ae:a3:56:2f:f8:d6:13:5d:d3:46:ae:15:80: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:71:CB:20:4C:2C:95:E6:84:FE:A8:FC:70:27:5C:81:4B:94:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv6: 2607:68c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:99:e4:dd:dd:8a:1c:8a:34:13:36:96:0d:fd:4b:0e:77:11: 91:fb:e1:43:a5:85:a9:74:35:39:9a:7a:99:aa:18:8f:90:86: b1:08:90:08:27:2f:0a:f6:a4:83:56:3f:42:dc:cc:9a:29:9a: 50:76:33:ea:2a:0a:34:ee:c1:2a:42:35:7f:e5:ac:a3:28:73: df:81:78:e3:45:8f:9b:8e:93:15:3c:c3:db:ae:45:15:5e:81: 67:c1:1e:bb:f1:97:76:7c:e0:3b:0a:3d:f1:fa:15:18:de:e4: cc:7a:38:c1:2d:fb:fa:e4:6c:77:bd:dd:6e:52:3e:09:d7:a9: c5:0b:07:4a:5b:d8:43:bc:76:9a:5c:d6:7f:7c:ba:92:db:44: 1b:6c:4a:54:57:fb:90:2d:1b:f8:04:0a:b3:77:80:3f:a8:30: fe:88:bf:76:75:84:3d:46:be:67:2a:2e:4f:92:fc:73:80:7a: a8:a9:30:dd:7a:d0:e9:26:e9:d6:ca:5e:49:7a:b0:1c:a7:14: ed:5a:98:50:bd:66:d1:41:03:0f:13:2b:d9:af:ae:33:ac:cc: aa:5b:66:cc:ab:b5:99:e1:98:5f:12:01:9f:4a:d1:37:ab:0c: 6d:bc:da:cc:55:20:c3:4a:51:6a:bd:a8:86:5f:55:f6:6c:ec: 0f:32:e6:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msCNM930FruPtjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OTRmY2MzOWItZGEyZS00Yzg2LWJmZmQtZTE0ZDQwZjE2MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplmQJ+82hGE1gDYeiokxkB0QeYELk4by6hmc QI8PY1TvFUZW88wsoPOnM0oVhThgwE/16Bg76EpCfDvl7PthCn48S14nPTBaB7zx PrnGTZEKRMt9wt1gF4xR15HK9Zu5r3W5re0Rw7qGkqNj3Hm8/4QMzusfjNYuPmZF 8L6PPr5onCMjO8cJwXzxt0Nf4nNgeHMAbiXQ6IPoQ/1jQfLA8E28L20+/L4olUEj wZbVljKVeEAnRG90d78x3n0Ad0eYljN7Q5pYPhSW5V1wzlVAzvtKsi6QV3BLw0uw k8tzm/w2MhcghqHqXsIyCbv7vA/4La6jVi/41hNd00auFYBNBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFp0ccsgTCyV5oT+qPxwJ1yBS5QJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvN2RhZTMyNGUtZWM3NC0z MGMyLWIyMzUtMTNmMWVkODY5NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqmeTd3YocijQTNpYN/UsOdxGR++FDpYWpdDU5mnqZqhiPkIaxCJAI Jy8K9qSDVj9C3MyaKZpQdjPqKgo07sEqQjV/5ayjKHPfgXjjRY+bjpMVPMPbrkUV XoFnwR678Zd2fOA7Cj3x+hUY3uTMejjBLfv65Gx3vd1uUj4J16nFCwdKW9hDvHaa XNZ/fLqS20QbbEpUV/uQLRv4BAqzd4A/qDD+iL92dYQ9Rr5nKi5PkvxzgHqoqTDd etDpJunWyl5JerAcpxTtWphQvWbRQQMPEyvZr64zrMyqW2bMq7WZ4ZhfEgGfStE3 qwxtvNrMVSDDSlFqvaiGX1X2bOwPMubs -----END CERTIFICATE-----Generated at Wed May 13 10:53:58 2026 by rpki-client