$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa File: a306220d-1b92-3ea3-97db-9adba304990f.roa (raw, json) Hash identifier: GaH+NOLTc3tLZMaImTdJYYtqyQ3NDcEFGVoZikSXCG0= Subject key identifier: E2:2D:36:9D:13:42:8D:09:B7:21:28:DB:BA:25:9A:B3:AC:DB:3A:D7 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584DA6B00A2667256A1F87C8AFC0 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2602:28c:2659::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0a:26:67:25:6a:1f:87:c8:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=60e2b987-15ca-41ef-992c-c86d8b3a6dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:6f:d4:b5:9f:ae:03:5e:de:61:fc:05:87: ce:aa:95:67:8e:9c:b6:56:e5:0a:fe:78:cb:a7:2d: f1:02:35:14:33:42:03:2f:10:9c:28:df:9a:f2:64: f0:1e:67:26:37:bb:db:ab:19:60:36:16:4f:06:85: 05:81:96:bd:68:a1:2d:6a:f9:02:2c:4b:fe:bc:54: c2:94:6a:93:f0:3b:94:7d:34:60:6d:4e:4c:54:3c: 2e:e2:fe:d3:3a:08:12:ca:5f:9a:7d:90:02:62:28: 9f:38:52:5b:57:96:12:99:c9:04:3f:83:37:d7:c7: 48:6e:b6:98:3e:28:58:51:e8:c9:84:d1:71:41:10: 93:7f:df:38:26:4f:dc:51:93:ac:28:29:11:17:c4: 8b:c9:1c:07:17:53:05:b2:97:60:b9:bb:d5:d5:e1: 4e:e8:87:ef:d8:12:fd:df:c1:52:1a:d4:db:59:75: 6c:9c:dd:dd:2c:9c:b7:5a:fa:cf:8e:29:59:bf:95: ea:40:25:04:e7:b9:e7:f4:36:0f:98:3c:6d:d9:66: 98:78:02:83:f9:2b:6e:ca:bf:9c:ba:e8:51:46:b1: 39:75:f0:9d:02:46:7a:e9:4b:ee:44:2b:9b:40:e8: d6:19:01:64:c6:6f:4e:0e:46:8d:56:81:ac:85:e7: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:36:9D:13:42:8D:09:B7:21:28:DB:BA:25:9A:B3:AC:DB:3A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:28c:2659::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:39:19:c8:87:cf:ef:39:ba:9e:87:b0:9d:7c:05:ee:bf:c6: 87:13:b6:b6:0e:ce:ee:52:e2:c3:39:51:af:30:2a:f0:98:3c: d7:f9:9a:81:9f:95:80:f2:08:cd:36:bf:27:24:14:ee:df:47: ed:b4:46:64:0f:b9:5a:66:59:a9:4b:80:22:01:06:64:98:27: e8:b4:77:6e:f9:4c:40:14:44:4c:c4:6c:8a:85:6a:fa:ab:a5: 65:b5:2b:ea:fe:21:6e:9f:eb:ca:d8:94:f0:95:c9:e1:d4:30: 1d:61:88:8a:18:fc:74:b6:1a:29:8b:af:44:8e:37:76:32:37: b2:81:8d:2a:d2:2d:c1:73:bf:76:6b:10:f5:4d:a2:36:ca:84: 32:89:87:98:bb:2f:87:93:e3:de:40:2d:01:30:53:0d:2d:54: fd:bc:34:40:df:07:56:b8:1f:33:3c:45:9f:13:eb:0d:1a:68: 01:15:8a:fc:2d:50:0f:f1:ca:b5:94:1a:d8:eb:af:bb:a3:47: e2:20:c8:6f:dc:37:44:60:43:e2:3a:3d:e8:5b:38:9c:d7:0e: f6:e3:08:02:44:68:a0:3c:ca:45:85:3c:d0:6b:c8:d3:1c:bf: aa:ef:91:e9:a2:8b:7c:67:69:7c:63:76:08:57:de:6b:59:12: ef:2a:10:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msAomZyVqH4fIr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NjBlMmI5ODctMTVjYS00MWVmLTk5MmMtYzg2ZDhiM2E2ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Zv1LWfrgNe3mH8BYfOqpVnjpy2VuUK/njL py3xAjUUM0IDLxCcKN+a8mTwHmcmN7vbqxlgNhZPBoUFgZa9aKEtavkCLEv+vFTC lGqT8DuUfTRgbU5MVDwu4v7TOggSyl+afZACYiifOFJbV5YSmckEP4M318dIbraY PihYUejJhNFxQRCTf984Jk/cUZOsKCkRF8SLyRwHF1MFspdgubvV1eFO6Ifv2BL9 38FSGtTbWXVsnN3dLJy3WvrPjilZv5XqQCUE57nn9DYPmDxt2WaYeAKD+Stuyr+c uuhRRrE5dfCdAkZ66UvuRCubQOjWGQFkxm9ODkaNVoGshecoxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOItNp0TQo0JtyEo27olmrOs2zrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYTMwNjIyMGQtMWI5Mi0z ZWEzLTk3ZGItOWFkYmEzMDQ5OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCZZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEM5GciHz+85up6HsJ18Be6/xocTtrYOzu5S4sM5Ua8wKvCYPNf5 moGflYDyCM02vyckFO7fR+20RmQPuVpmWalLgCIBBmSYJ+i0d275TEAUREzEbIqF avqrpWW1K+r+IW6f68rYlPCVyeHUMB1hiIoY/HS2GimLr0SON3YyN7KBjSrSLcFz v3ZrEPVNojbKhDKJh5i7L4eT495ALQEwUw0tVP28NEDfB1a4HzM8RZ8T6w0aaAEV ivwtUA/xyrWUGtjrr7ujR+IgyG/cN0RgQ+I6PehbOJzXDvbjCAJEaKA8ykWFPNBr yNMcv6rvkemii3xnaXxjdghX3mtZEu8qEK8= -----END CERTIFICATE-----Generated at Wed May 13 16:45:04 2026 by rpki-client