$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa File: 8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa (raw, json) Hash identifier: wbtzWm7XCvxBsSVyHCPhYBJecgVEqrCipU5PTnu1RWw= Subject key identifier: 83:EE:3F:84:58:B1:2F:15:CD:F0:CE:7A:98:4E:FA:57:5F:37:91:77 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B02CD00EC6FF69E1AA1A40 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 2620:147:128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:2c:d0:0e:c6:ff:69:e1:aa:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=b35b563f-a86f-4034-b1a4-f6580def9a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:97:e8:a3:37:47:53:ed:d2:8e:c2:0c:fb: ad:1c:cd:4e:7a:1c:eb:18:00:27:a5:b0:ce:71:d8: 0f:18:ab:e0:f3:48:cd:cd:2c:18:ec:d8:72:68:fe: 9b:49:01:7e:78:c6:40:1e:8d:e0:92:25:70:f1:05: 3a:d4:2d:ad:6a:b9:f7:6f:fb:53:dd:ef:64:21:a3: b4:a9:c9:09:de:f8:de:a6:e0:62:56:55:2c:42:4f: 21:d5:61:69:77:c0:dd:5b:65:1a:02:bd:99:05:5a: e8:f3:1d:51:f7:2e:8f:3f:08:c3:7e:21:fe:68:90: 1b:17:48:2c:99:42:78:ce:8a:65:22:e9:dc:d3:dd: 54:b3:09:6d:11:57:b1:75:a7:d1:57:20:6c:33:a4: 3f:6a:4d:db:e4:3e:57:3e:e3:45:3b:4a:27:63:01: 62:57:f1:17:5c:5b:0a:d8:7f:61:ec:3e:01:39:df: 78:eb:47:dd:0e:02:5b:d2:e9:39:f9:4f:fb:fc:d0: 4e:54:0f:fd:ac:ae:10:98:45:79:b3:1f:cb:97:92: 0e:47:fd:57:07:cc:ba:87:ed:97:a4:9b:d7:fe:31: 6d:fe:04:94:15:8d:f2:93:bc:a0:2a:0b:a8:ea:40: 33:bd:81:03:53:1a:eb:81:d8:83:c9:44:db:2f:d7: 4f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EE:3F:84:58:B1:2F:15:CD:F0:CE:7A:98:4E:FA:57:5F:37:91:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:128::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:88:1e:52:f6:af:20:6b:d9:ec:5a:86:0a:a0:93:df:3c:bd: c7:2c:9d:be:3e:be:d1:7b:15:2d:56:cc:89:97:79:56:df:b8: 87:4f:62:bb:5c:35:ad:46:e0:33:ee:3e:3a:39:ff:b6:3f:63: dd:ed:fb:87:44:5b:32:9a:48:47:53:a7:0a:0f:8e:2f:06:46: af:17:bb:ec:e5:54:ca:c6:f8:45:f3:db:61:16:89:95:50:e8: e8:49:23:77:c6:37:7c:31:8a:e5:7a:f6:2d:cd:d4:c9:c1:b2: 09:5b:86:8f:73:76:e0:4c:aa:f9:05:98:9a:d3:39:6c:bf:62: 23:ad:3a:1e:aa:c6:e5:e3:32:e8:8b:1d:f6:d4:93:ac:cb:3c: bf:cf:e0:12:1a:f6:62:e6:29:10:1b:d8:c3:bc:64:73:a6:eb: f3:1a:3a:ab:c2:87:20:e7:a1:f4:a6:68:cc:71:53:69:21:e4: 73:24:09:20:25:60:d3:9d:47:ea:5e:03:5a:b0:a6:ab:20:92: a2:17:ad:7f:9f:97:f4:9a:00:f8:fc:26:de:6f:42:22:12:bb: c5:4f:a3:2c:69:a4:1c:f0:6d:b6:fd:0a:44:0f:3d:da:95:13: e8:23:a6:8a:73:00:17:e2:50:b7:ef:ab:fd:17:08:0f:7f:b1: ff:fd:e6:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCzQDsb/aeGqGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YjM1YjU2M2YtYTg2Zi00MDM0LWIxYTQtZjY1ODBkZWY5YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV6X6KM3R1Pt0o7CDPutHM1OehzrGAAnpbDO cdgPGKvg80jNzSwY7NhyaP6bSQF+eMZAHo3gkiVw8QU61C2tarn3b/tT3e9kIaO0 qckJ3vjepuBiVlUsQk8h1WFpd8DdW2UaAr2ZBVro8x1R9y6PPwjDfiH+aJAbF0gs mUJ4zoplIunc091UswltEVexdafRVyBsM6Q/ak3b5D5XPuNFO0onYwFiV/EXXFsK 2H9h7D4BOd9460fdDgJb0uk5+U/7/NBOVA/9rK4QmEV5sx/Ll5IOR/1XB8y6h+2X pJvX/jFt/gSUFY3yk7ygKguo6kAzvYEDUxrrgdiDyUTbL9dPLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPuP4RYsS8VzfDOephO+ldfN5F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOGFjZTJmYmQtNjQzMS0z NTUyLTgzZjUtZmI4ZWZjM2RiMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABRwEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJKIHlL2ryBr2exahgqgk988vccsnb4+vtF7FS1WzImXeVbfuIdP YrtcNa1G4DPuPjo5/7Y/Y93t+4dEWzKaSEdTpwoPji8GRq8Xu+zlVMrG+EXz22EW iZVQ6OhJI3fGN3wxiuV69i3N1MnBsglbho9zduBMqvkFmJrTOWy/YiOtOh6qxuXj MuiLHfbUk6zLPL/P4BIa9mLmKRAb2MO8ZHOm6/MaOqvChyDnofSmaMxxU2kh5HMk CSAlYNOdR+peA1qwpqsgkqIXrX+fl/SaAPj8Jt5vQiISu8VPoyxppBzwbbb9CkQP PdqVE+gjpopzABfiULfvq/0XCA9/sf/95gk= -----END CERTIFICATE-----Generated at Wed May 13 14:42:09 2026 by rpki-client