$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa File: d8869c11-4c33-337d-a702-d11da6d17e67.roa (raw, json) Hash identifier: OaTL0cXZIkhjMyo3Rr5S9X8ZTlayTGQsNR7s2V7z120= Subject key identifier: BF:86:8B:63:D8:E5:4D:29:3C:F1:4C:7F:A5:76:A2:3B:D7:AB:8A:41 Certificate issuer: /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Certificate serial: 010D0C9F4328584D9FB56756A407435FCB63F600 Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 2602:80f:9002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:67:56:a4:07:43:5f:cb:63:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=780d1298-13d6-470b-97fe-02571f874dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:08:a1:b6:5e:cf:64:15:f0:f3:bf:c6:e4: f8:53:fe:c0:f2:1c:c4:c5:a7:a2:3f:5b:16:3a:38: 4a:a7:91:d6:cf:0a:c5:78:6c:27:9e:42:b2:69:5a: e1:ad:03:9e:c4:50:33:4d:45:cf:02:bc:e7:c9:f0: 24:bc:3b:3c:1b:c6:56:9b:51:a3:b4:59:51:63:84: d2:7c:b0:fe:dc:1a:69:4b:75:11:60:3c:61:7d:09: d5:f8:c2:06:81:86:3a:0f:bc:63:be:cc:f9:70:a6: 11:2c:53:d1:29:6d:ba:33:93:a0:8d:8e:74:20:bb: 72:b2:c8:7b:28:4d:ea:5d:0f:ea:7e:5a:89:de:1f: 06:76:8e:ee:95:2a:1b:74:e9:a7:f8:87:91:44:0e: dd:d5:1d:82:97:4b:db:aa:6c:6f:ba:82:a9:db:e4: 72:74:c7:58:ae:ad:f1:fa:ab:97:87:24:15:ef:e9: ee:62:8f:f0:7f:d8:dd:b9:05:cd:b5:41:4d:a4:9f: aa:42:0b:32:cc:53:1f:e5:db:8f:e1:c7:5c:e4:43: 3f:a2:17:72:2a:be:cb:ab:38:36:3b:e1:dd:3d:e2: f6:7d:76:61:1b:f2:f9:56:35:bb:d7:b1:58:68:16: 04:9a:4c:97:a1:99:41:4f:b5:a1:24:78:df:fc:8d: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:86:8B:63:D8:E5:4D:29:3C:F1:4C:7F:A5:76:A2:3B:D7:AB:8A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/d8869c11-4c33-337d-a702-d11da6d17e67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl X509v3 Authority Key Identifier: keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer sbgp-ipAddrBlock: critical IPv6: 2602:80f:9002::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:92:40:5e:e8:75:9d:a6:20:19:47:87:fc:2e:41:aa:8e:bc: f6:fe:80:d8:d6:a9:e1:66:09:a3:df:0d:ee:be:38:e3:e8:35: 3d:a4:59:cc:17:ee:fe:a5:d7:bd:48:7e:d2:e7:14:3e:97:92: 54:42:ec:c3:88:1f:53:66:ad:e6:ff:e2:9d:71:43:5e:6c:23: 61:a2:28:0a:1d:3a:b5:12:68:12:ce:63:4a:ef:82:23:83:a7: 9f:af:62:4a:70:c4:a9:8a:54:2d:89:dc:4e:c2:be:c4:5e:e1: 9f:72:97:88:e1:8c:96:95:12:70:3a:9d:95:a0:c6:f9:cd:a6: ae:d8:25:3e:cb:da:1f:82:8a:66:f6:28:1d:dc:da:d9:37:87: e5:cc:59:58:d1:2b:76:34:ee:97:5d:9a:39:a8:f6:30:03:0b: d6:1e:ee:7c:49:e2:8e:94:78:0e:60:39:85:d8:b2:b8:47:8e: 67:9d:95:00:b3:60:93:36:dd:7e:53:6e:02:ce:de:e1:89:ce: c5:a0:b5:38:53:b9:ca:c9:0f:50:02:ae:de:86:c7:3b:99:26: d1:ab:2e:49:f2:68:b2:ef:48:b6:8b:15:9c:87:0e:fd:f6:9a: 1d:06:91:96:e9:41:cd:85:a9:63:14:a2:3d:29:8d:b6:f5:c8: 02:47:26:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2ftWdWpAdDX8tj9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM0NzY4N2MtZDgwZC00NmUyLWIzMGUtMTBhZTY4ZDhl MWVlMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk NzgwZDEyOTgtMTNkNi00NzBiLTk3ZmUtMDI1NzFmODc0ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3cIobZez2QV8PO/xuT4U/7A8hzExaeiP1sW OjhKp5HWzwrFeGwnnkKyaVrhrQOexFAzTUXPArznyfAkvDs8G8ZWm1GjtFlRY4TS fLD+3BppS3URYDxhfQnV+MIGgYY6D7xjvsz5cKYRLFPRKW26M5OgjY50ILtyssh7 KE3qXQ/qflqJ3h8Gdo7ulSobdOmn+IeRRA7d1R2Cl0vbqmxvuoKp2+RydMdYrq3x +quXhyQV7+nuYo/wf9jduQXNtUFNpJ+qQgsyzFMf5duP4cdc5EM/ohdyKr7Lqzg2 O+HdPeL2fXZhG/L5VjW717FYaBYEmkyXoZlBT7WhJHjf/I1jTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+Gi2PY5U0pPPFMf6V2ojvXq4pBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3 Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFlNjhkOGUxZWUvZDg4NjljMTEtNGMzMy0z MzdkLWE3MDItZDExZGE2ZDE3ZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTM0NzY4N2MtZDgwZC00NmUyLWIz MGUtMTBhZTY4ZDhlMWVlL2UzNDc2ODdjLWQ4MGQtNDZlMi1iMzBlLTEwYWU2OGQ4 ZTFlZS5jcmwwHwYDVR0jBBgwFoAUcaIz1Ch+MfU34SL6UnnC6wYl1ZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzQ3Njg3Yy1kODBkLTQ2ZTItYjMwZS0xMGFl NjhkOGUxZWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIID5AC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6SQF7odZ2mIBlHh/wuQaqOvPb+gNjWqeFmCaPfDe6+OOPoNT2k WcwX7v6l171IftLnFD6XklRC7MOIH1Nmreb/4p1xQ15sI2GiKAodOrUSaBLOY0rv giODp5+vYkpwxKmKVC2J3E7CvsRe4Z9yl4jhjJaVEnA6nZWgxvnNpq7YJT7L2h+C imb2KB3c2tk3h+XMWVjRK3Y07pddmjmo9jADC9Ye7nxJ4o6UeA5gOYXYsrhHjmed lQCzYJM23X5TbgLO3uGJzsWgtThTucrJD1ACrt6GxzuZJtGrLknyaLLvSLaLFZyH Dv32mh0GkZbpQc2FqWMUoj0pjbb1yAJHJlM= -----END CERTIFICATE-----Generated at Wed May 13 13:17:50 2026 by rpki-client