$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa File: bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa (raw, json) Hash identifier: gxwcNyLNnGFb0SoeQ3oRATnJ9Y+LznuGp5C4Gz6RNXM= Subject key identifier: 97:3F:81:EB:51:7B:B2:2D:E9:87:ED:A0:B3:74:7B:2E:46:57:1A:C0 Certificate issuer: /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f Certificate serial: 010D0C9F4328584DA6B0159872EBF3DC3BF7DF40 Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14478 IP address blocks: 2602:fb65:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:15:98:72:eb:f3:dc:3b:f7:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=91bc4de1-b806-48a1-943a-47bcc7ca978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:21:06:60:ae:31:83:69:e7:08:ac:58:99: 8a:79:0d:27:53:6d:ca:e1:8f:1b:4d:9b:21:ba:13: f2:c7:30:37:14:45:ec:9e:93:25:7e:df:49:c1:38: e3:f9:e8:cd:98:83:ba:ae:90:b8:c9:45:a2:9f:5d: 1e:1a:46:e3:35:99:d0:7e:6f:da:5b:18:00:07:4b: 2f:71:e6:d7:1c:97:86:be:38:6d:6b:b6:77:b9:8b: 4b:16:af:f9:52:33:eb:d1:c8:0d:10:b1:1b:13:20: 83:3f:f1:4a:99:94:de:69:6d:b8:12:b0:a9:ed:f1: 9c:27:a3:77:f1:71:ac:8f:5e:80:ab:9f:9f:e2:54: a5:cf:d3:bb:5b:3e:87:f9:8b:4c:71:52:af:f6:d0: 75:11:7f:25:a1:a0:6c:b4:95:63:3c:79:f2:c8:4e: 3e:af:a8:02:a4:0d:51:3c:60:d5:30:d9:0f:8e:f6: 56:7d:22:e6:ed:35:e6:e5:ba:fd:0c:07:d1:02:77: c7:e1:77:b4:2b:20:ea:f5:28:a6:ba:a0:95:4c:32: f3:a7:41:d9:64:13:c5:a6:92:e1:a4:d9:d2:57:00: 26:09:38:4b:18:34:9a:0a:1e:43:0a:67:89:61:72: e3:64:05:fd:20:a2:c3:5f:1c:19:4a:d1:39:58:d9: 30:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:81:EB:51:7B:B2:2D:E9:87:ED:A0:B3:74:7B:2E:46:57:1A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl X509v3 Authority Key Identifier: keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb65:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:04:4c:70:88:0a:7f:e9:4a:fa:fe:bc:60:e6:9e:5f:a6:d8: b4:83:1e:88:a6:73:06:e6:53:a0:7f:7e:d8:1a:2f:37:06:32: 02:6b:70:67:d7:f9:22:a6:8c:e3:c9:08:65:51:ee:04:3b:9a: f4:b7:f6:54:fc:74:8f:c3:1b:7d:83:99:b1:78:24:eb:93:5c: e3:88:5b:de:b5:60:63:5d:5b:55:60:53:39:4b:c2:63:72:5d: 91:eb:6c:23:b5:33:6f:57:74:34:38:bf:e2:40:09:3e:3e:20: 68:50:6f:f3:79:77:cd:1d:30:03:3e:23:f4:f0:8a:1e:59:7d: 99:8e:3e:3b:d4:c1:dd:a1:99:74:fb:65:82:df:95:40:d0:e6: 3f:e5:ea:ad:ee:e1:61:35:e1:f0:0b:21:f8:6f:71:17:37:2c: 73:76:57:b4:f0:e8:d4:47:11:fd:37:4b:b0:bb:15:55:49:ca: 9d:4d:e2:40:76:a9:b1:f7:de:27:f8:c2:58:28:b5:df:56:8a: c5:d3:5f:83:05:06:e3:17:75:bb:99:c3:e1:70:05:ec:16:3b: a0:07:66:79:a0:16:f3:bf:d6:1b:e8:72:b1:20:ba:ff:25:c8: 8b:0f:79:58:dc:b3:d9:25:8a:5d:6e:4e:a4:dc:db:e6:31:38: f1:33:7d:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msBWYcuvz3Dv330AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwMWY4MjktMWNlNi00N2Q1LWFmMmQtZjYxYTI1N2Yw MjNmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk OTFiYzRkZTEtYjgwNi00OGExLTk0M2EtNDdiY2M3Y2E5NzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6QhBmCuMYNp5wisWJmKeQ0nU23K4Y8bTZsh uhPyxzA3FEXsnpMlft9JwTjj+ejNmIO6rpC4yUWin10eGkbjNZnQfm/aWxgAB0sv cebXHJeGvjhta7Z3uYtLFq/5UjPr0cgNELEbEyCDP/FKmZTeaW24ErCp7fGcJ6N3 8XGsj16Aq5+f4lSlz9O7Wz6H+YtMcVKv9tB1EX8loaBstJVjPHnyyE4+r6gCpA1R PGDVMNkPjvZWfSLm7TXm5br9DAfRAnfH4Xe0KyDq9SimuqCVTDLzp0HZZBPFppLh pNnSVwAmCThLGDSaCh5DCmeJYXLjZAX9IKLDXxwZStE5WNkwLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJc/getRe7It6YftoLN0ey5GVxrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84YjAx ZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFhMjU3ZjAyM2YvYmQ2YjllZjQtNGQxMy0z YmZkLWIwZmQtMjEyZDdmYzlhNDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGIwMWY4MjktMWNlNi00N2Q1LWFm MmQtZjYxYTI1N2YwMjNmLzhiMDFmODI5LTFjZTYtNDdkNS1hZjJkLWY2MWEyNTdm MDIzZi5jcmwwHwYDVR0jBBgwFoAUN6UgHh7+xC+2bdTq4xb3MP7vkQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84YjAxZjgyOS0xY2U2LTQ3ZDUtYWYyZC1mNjFh MjU3ZjAyM2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7ZQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQETHCICn/pSvr+vGDmnl+m2LSDHoimcwbmU6B/ftgaLzcGMgJr cGfX+SKmjOPJCGVR7gQ7mvS39lT8dI/DG32DmbF4JOuTXOOIW961YGNdW1VgUzlL wmNyXZHrbCO1M29XdDQ4v+JACT4+IGhQb/N5d80dMAM+I/Twih5ZfZmOPjvUwd2h mXT7ZYLflUDQ5j/l6q3u4WE14fALIfhvcRc3LHN2V7Tw6NRHEf03S7C7FVVJyp1N 4kB2qbH33if4wlgotd9WisXTX4MFBuMXdbuZw+FwBewWO6AHZnmgFvO/1hvocrEg uv8lyIsPeVjcs9klil1uTqTc2+YxOPEzfZM= -----END CERTIFICATE-----Generated at Wed May 13 17:14:55 2026 by rpki-client