$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa File: 638c64fe-64fb-347f-be0f-66a64d56454e.roa (raw, json) Hash identifier: f9cFwjgRI9DeSBDb9ujIPM/9gSEDG1l/5z2dHs+rwz8= Subject key identifier: 0F:91:4B:AE:41:9D:28:FD:DE:35:F3:D6:DE:07:88:1A:6D:85:63:59 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584DB1DACAE7908924566F439B40 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 46432 IP address blocks: 2602:fe59:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:ca:e7:90:89:24:56:6f:43:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=e24490a4-3118-406e-8979-c94ed0585e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:55:1e:7f:53:d6:e3:03:d8:bb:c6:a9:59: ac:0d:d2:d3:30:d6:7b:a5:9e:70:b7:c5:ba:79:1e: 2e:4c:9c:bc:55:26:c2:67:74:c0:79:bd:70:f8:5c: 65:90:9c:c2:2b:25:26:20:77:c7:77:85:eb:a2:7c: 80:62:5e:92:eb:d0:0d:79:6c:f2:7b:cf:83:52:25: d8:0e:90:08:0a:70:8f:00:aa:38:b5:23:d6:84:74: 71:d9:94:09:1a:55:a5:59:1d:75:46:d7:f4:f9:59: 3d:bd:02:20:cf:0d:a4:a6:0d:c0:87:4c:86:ef:c9: fa:12:f4:3a:2a:fc:d7:8a:25:f1:e4:02:97:ba:59: 7d:4d:a6:da:c0:b0:e9:2a:5c:13:8b:c1:e8:d9:61: 12:3a:83:41:c7:06:9a:a1:66:35:a6:27:11:08:ed: 4f:95:e6:cd:df:88:dc:1c:5d:ef:dc:4c:ae:83:9c: 93:98:d8:7d:59:ff:b6:d0:cd:a6:8c:b7:a7:7d:b3: f7:7d:c5:30:94:1f:1b:14:dc:2a:16:e0:67:10:47: 5a:54:5a:09:8e:5f:9d:4c:e5:4b:89:db:ef:23:a6: 8c:c0:2a:54:d1:d6:53:f3:24:76:bd:c6:01:09:5f: 77:8c:a1:fd:8c:59:76:dd:4d:fa:6a:d6:20:8b:50: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:91:4B:AE:41:9D:28:FD:DE:35:F3:D6:DE:07:88:1A:6D:85:63:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/638c64fe-64fb-347f-be0f-66a64d56454e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv6: 2602:fe59:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:90:31:5b:82:b1:40:ed:b1:25:28:ed:56:6c:38:f7:85:4e: aa:2f:07:e6:93:4c:1e:80:58:66:6b:67:6f:08:99:d9:f2:35: f2:82:b3:d3:aa:f9:8f:eb:96:f8:b9:43:ac:5c:53:58:8a:76: 41:4c:55:5d:c8:4c:d2:6a:b4:d8:db:19:6e:b8:4d:47:b6:14: a9:a7:4a:ff:6e:66:fb:5c:e6:70:d1:ec:df:7f:e4:2e:42:be: 02:87:59:92:68:c6:e3:66:6a:88:4c:ed:8c:43:1e:34:58:4f: b7:91:64:d5:f7:15:b8:a3:88:88:76:0f:37:7c:3e:c5:75:ba: 10:e2:9e:9f:b5:b8:e0:89:d3:15:4a:58:8e:0c:66:20:8f:ba: e7:80:29:49:84:1c:c5:86:18:cc:85:27:b4:ea:e8:a2:29:c0: 34:80:04:61:1d:b4:fd:12:b3:7c:4d:4d:0f:2d:98:1b:b0:e0: c1:1c:21:8f:19:0e:8d:77:0d:22:a0:8e:69:d1:62:1b:bf:f5: 82:fe:3b:2e:fe:31:35:cd:77:8b:1d:35:4e:b3:c5:38:4f:3f: 06:7f:1b:e6:b0:8f:2c:12:95:e4:8f:5f:82:18:a2:1b:1e:c4: 7a:9a:29:8c:c5:57:85:c3:8f:1f:4b:78:c9:fb:ae:cd:80:53: bf:57:9c:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2x2srnkIkkVm9Dm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk ZTI0NDkwYTQtMzExOC00MDZlLTg5NzktYzk0ZWQwNTg1ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+lVHn9T1uMD2LvGqVmsDdLTMNZ7pZ5wt8W6 eR4uTJy8VSbCZ3TAeb1w+FxlkJzCKyUmIHfHd4XronyAYl6S69ANeWzye8+DUiXY DpAICnCPAKo4tSPWhHRx2ZQJGlWlWR11Rtf0+Vk9vQIgzw2kpg3Ah0yG78n6EvQ6 KvzXiiXx5AKXull9TabawLDpKlwTi8Ho2WESOoNBxwaaoWY1picRCO1PlebN34jc HF3v3Eyug5yTmNh9Wf+20M2mjLenfbP3fcUwlB8bFNwqFuBnEEdaVFoJjl+dTOVL idvvI6aMwCpU0dZT8yR2vcYBCV93jKH9jFl23U36atYgi1A42wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+RS65BnSj93jXz1t4HiBpthWNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNjM4YzY0ZmUtNjRmYi0z NDdmLWJlMGYtNjZhNjRkNTY0NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+WQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaQMVuCsUDtsSUo7VZsOPeFTqovB+aTTB6AWGZrZ28ImdnyNfKC s9Oq+Y/rlvi5Q6xcU1iKdkFMVV3ITNJqtNjbGW64TUe2FKmnSv9uZvtc5nDR7N9/ 5C5CvgKHWZJoxuNmaohM7YxDHjRYT7eRZNX3FbijiIh2Dzd8PsV1uhDinp+1uOCJ 0xVKWI4MZiCPuueAKUmEHMWGGMyFJ7Tq6KIpwDSABGEdtP0Ss3xNTQ8tmBuw4MEc IY8ZDo13DSKgjmnRYhu/9YL+Oy7+MTXNd4sdNU6zxThPPwZ/G+awjywSleSPX4IY ohsexHqaKYzFV4XDjx9LeMn7rs2AU79XnLk= -----END CERTIFICATE-----Generated at Wed May 13 14:35:04 2026 by rpki-client