$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9803e22c-6f54-33eb-8384-30552a50697c.roa File: 9803e22c-6f54-33eb-8384-30552a50697c.roa (raw, json) Hash identifier: 61edLwK/9rLuKWRL4jdRLrD79bIQ8cmpIhPV532gfSk= Subject key identifier: 8B:11:EC:90:10:AB:21:EF:29:7F:2B:49:85:3F:3E:70:EA:20:AA:4C Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B03195F9AB05ABD0DC4180 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9803e22c-6f54-33eb-8384-30552a50697c.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2602:28c:1229::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:31:95:f9:ab:05:ab:d0:dc:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=0c4d731e-00b8-4ff3-8843-da3f672c5b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:a4:f5:f7:a5:02:8b:cc:1a:d0:58:0c:d5: 2d:b8:70:8e:7c:c2:cd:8d:06:03:95:3f:14:60:87: 11:83:04:32:72:00:bf:3d:9b:4f:1d:f0:4c:e9:52: bb:11:e9:b7:57:da:82:7e:6c:e5:31:df:1d:4e:d6: ca:a6:7e:3b:8a:f5:8e:55:31:8d:d7:65:87:a4:65: 1a:1c:2a:08:0f:4a:83:46:9b:56:14:c0:10:a9:f4: 15:ba:f0:6e:9f:ab:79:69:fa:c2:f6:f4:f6:c5:d5: 02:b6:e4:ab:e9:98:10:e0:1f:9c:5f:97:a9:d7:6d: 10:ae:26:46:60:9e:8d:7f:b7:58:26:59:95:82:49: 09:e4:4c:4e:7c:94:b5:9f:36:f0:1e:d8:73:db:82: 35:06:7b:a8:d1:3a:b1:d5:c0:59:ea:02:9e:1e:3a: 46:f4:e1:3e:13:77:e5:70:5a:af:db:91:35:91:45: 8f:a9:a6:6d:13:8f:84:cd:09:d0:51:bc:b2:6d:34: 75:a8:5f:50:fa:4a:e9:6f:8c:96:58:6a:23:84:84: 9a:76:b1:9c:43:e9:63:3e:e5:70:e2:3b:c2:a7:5a: d2:18:9a:19:2e:01:79:cf:d2:ef:32:47:5f:f1:82: 88:d4:10:23:f2:d1:b1:64:a1:16:2a:69:10:97:23: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:11:EC:90:10:AB:21:EF:29:7F:2B:49:85:3F:3E:70:EA:20:AA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9803e22c-6f54-33eb-8384-30552a50697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:28c:1229::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e8:7a:b7:3b:d9:03:49:b8:73:be:fe:ed:28:d3:c9:ff:a6: 92:76:bd:1d:0b:4e:cd:69:3b:a8:1a:e3:f2:41:a2:8e:f3:e9: c7:e2:16:91:45:8b:7b:ce:0f:fc:0b:de:a2:3d:bb:30:1e:45: 66:6c:5a:d8:07:8c:74:96:6c:3a:a5:c4:56:b6:2c:af:07:67: 38:85:3c:91:4f:dc:92:07:f9:c6:4f:3c:df:2a:96:47:de:39: 7c:5c:73:76:24:eb:c1:ba:2c:05:61:57:c5:e4:85:fe:20:88: d3:eb:21:da:72:90:70:28:48:c2:bf:a0:5a:25:22:fc:06:64: 8d:07:3e:3b:09:8e:82:e3:99:85:a0:64:06:ae:3a:e1:b4:a4: 22:7c:b3:fc:dc:a0:cd:8b:65:d3:a5:dd:23:c3:77:3d:fa:be: 73:b0:5f:af:68:14:2d:f4:20:53:cb:eb:17:3c:da:97:ff:d7: c8:68:e6:f2:89:de:3c:8f:b9:35:95:98:73:12:cb:e0:ce:98: 8a:b4:aa:91:98:0e:55:b3:50:2f:d7:68:eb:f9:b1:0a:fa:bf: 8b:63:a6:c3:70:9d:1c:da:de:32:37:2d:48:2f:51:e7:ad:89: f5:d5:68:f6:9c:ac:9e:99:47:e6:62:64:b3:9c:fc:39:9a:04: 79:75:99:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msDGV+asFq9DcQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MGM0ZDczMWUtMDBiOC00ZmYzLTg4NDMtZGEzZjY3MmM1YjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp22k9felAovMGtBYDNUtuHCOfMLNjQYDlT8U YIcRgwQycgC/PZtPHfBM6VK7Eem3V9qCfmzlMd8dTtbKpn47ivWOVTGN12WHpGUa HCoID0qDRptWFMAQqfQVuvBun6t5afrC9vT2xdUCtuSr6ZgQ4B+cX5ep120QriZG YJ6Nf7dYJlmVgkkJ5ExOfJS1nzbwHthz24I1Bnuo0Tqx1cBZ6gKeHjpG9OE+E3fl cFqv25E1kUWPqaZtE4+EzQnQUbyybTR1qF9Q+krpb4yWWGojhISadrGcQ+ljPuVw 4jvCp1rSGJoZLgF5z9LvMkdf8YKI1BAj8tGxZKEWKmkQlyMOHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIsR7JAQqyHvKX8rSYU/PnDqIKpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOTgwM2UyMmMtNmY1NC0z M2ViLTgzODQtMzA1NTJhNTA2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjBIp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjoerc72QNJuHO+/u0o08n/ppJ2vR0LTs1pO6ga4/JBoo7z6cfi FpFFi3vOD/wL3qI9uzAeRWZsWtgHjHSWbDqlxFa2LK8HZziFPJFP3JIH+cZPPN8q lkfeOXxcc3Yk68G6LAVhV8Xkhf4giNPrIdpykHAoSMK/oFolIvwGZI0HPjsJjoLj mYWgZAauOuG0pCJ8s/zcoM2LZdOl3SPDdz36vnOwX69oFC30IFPL6xc82pf/18ho 5vKJ3jyPuTWVmHMSy+DOmIq0qpGYDlWzUC/XaOv5sQr6v4tjpsNwnRza3jI3LUgv UeetifXVaPacrJ6ZR+ZiZLOc/DmaBHl1mWc= -----END CERTIFICATE-----Generated at Wed May 13 16:44:50 2026 by rpki-client