$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa File: 649e83e9-e363-3e14-afde-69d51ff34eb8.roa (raw, json) Hash identifier: /qyxX6W2Bk9aA5WycLJ3Hwb4XuqauN0c0jF4bTMGOXE= Subject key identifier: E8:11:2E:D8:4B:11:34:78:1B:21:5E:63:C9:F5:97:11:6B:CB:61:EA Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584D905A9F4F41ABC5B2558FBD80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 26666 IP address blocks: 2601:2010::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9f:4f:41:ab:c5:b2:55:8f:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=dbceac6d-2af5-42de-b654-f49d0de4af49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:4a:f9:ff:05:44:8d:b4:07:af:70:22:6e: 07:2c:5e:91:6a:be:0b:fb:c0:cd:f9:ec:54:71:86: 0c:9a:1a:c9:90:72:53:eb:27:bd:14:43:62:be:1b: 3e:25:37:dc:3c:9e:44:c6:32:57:62:7b:71:d6:5f: f2:d2:46:0d:ad:19:00:87:6e:f3:5c:fa:af:f4:ec: b9:e3:63:06:e3:13:d2:80:24:18:6d:ac:2f:91:f8: 92:92:fd:ac:a7:b4:e8:81:d0:c4:63:6a:38:fb:24: 01:fe:83:0d:eb:d0:66:fa:0e:05:0a:a5:c1:00:72: a8:ee:23:4c:64:fb:c0:fe:7d:ab:22:d9:12:eb:b9: 14:d1:70:b1:af:47:f9:ea:8c:d3:d1:04:4f:55:55: 31:b2:63:1d:99:f2:61:e5:e5:b5:5c:81:9d:5f:7b: cc:bd:cb:b3:bd:ab:93:98:7e:15:03:92:af:8c:b5: ca:35:f2:c1:4a:21:9b:e3:1e:d4:d9:83:83:e7:6e: 19:48:3c:9a:de:16:ce:f2:e0:86:22:c2:71:21:0a: 02:3f:d1:91:5c:62:27:cd:7e:37:27:97:52:7e:22: 24:a3:e2:00:1b:9e:b7:de:ed:53:75:46:15:22:76: 14:60:f8:d6:ec:c4:11:5b:9a:03:6b:90:13:ce:82: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:2E:D8:4B:11:34:78:1B:21:5E:63:C9:F5:97:11:6B:CB:61:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2010::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:55:da:ff:64:af:bb:08:a4:75:28:74:b9:77:da:2e:5a:d6: 6e:06:3e:db:81:bc:32:5d:c2:ca:94:fd:5e:b7:d1:c1:a9:f2: af:0d:21:87:54:bc:1f:e4:a1:67:20:1a:5e:c6:1a:be:18:71: b4:c2:46:d5:ae:fc:5d:02:23:66:5e:00:10:af:05:d4:70:a9: 27:96:71:fc:0a:de:4b:12:e5:3c:6d:81:5c:e4:c5:19:04:c5: f4:47:07:a8:93:26:4d:c6:47:65:18:36:47:1c:c1:fa:f4:d3: c4:89:13:1a:4d:df:04:e5:cb:79:45:d9:69:4b:ca:18:c5:bf: 03:24:cb:6a:ee:b4:89:1a:27:49:82:a1:05:6c:dc:0a:88:d4: 52:71:50:5c:60:a5:be:59:a5:e8:2a:0a:4e:29:fc:cb:79:16: dc:55:f5:a9:47:ff:ee:89:71:fa:d2:4f:32:58:b6:f0:f7:56: ca:7d:0e:4f:c5:8b:0f:1e:22:ce:84:c6:da:e5:e4:5b:51:05: 3c:d3:15:93:c8:c8:bf:c0:4f:81:68:ed:69:d0:65:05:12:2c: 4c:2e:3b:4d:4f:31:da:49:7d:41:a2:c2:5d:81:23:40:45:3e: e5:57:4c:07:d8:89:66:5d:68:f7:fa:a1:23:c3:d3:39:50:c2: 74:b0:24:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2QWp9PQavFslWPvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGJjZWFjNmQtMmFmNS00MmRlLWI2NTQtZjQ5ZDBkZTRhZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS5K+f8FRI20B69wIm4HLF6Rar4L+8DN+exU cYYMmhrJkHJT6ye9FENivhs+JTfcPJ5ExjJXYntx1l/y0kYNrRkAh27zXPqv9Oy5 42MG4xPSgCQYbawvkfiSkv2sp7TogdDEY2o4+yQB/oMN69Bm+g4FCqXBAHKo7iNM ZPvA/n2rItkS67kU0XCxr0f56ozT0QRPVVUxsmMdmfJh5eW1XIGdX3vMvcuzvauT mH4VA5KvjLXKNfLBSiGb4x7U2YOD524ZSDya3hbO8uCGIsJxIQoCP9GRXGInzX43 J5dSfiIko+IAG5633u1TdUYVInYUYPjW7MQRW5oDa5ATzoKwSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOgRLthLETR4GyFeY8n1lxFry2HqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjQ5ZTgzZTktZTM2My0z ZTE0LWFmZGUtNjlkNTFmZjM0ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkVdr/ZK+7CKR1KHS5d9ouWtZuBj7bgbwyXcLKlP1et9HBqfKvDSGH VLwf5KFnIBpexhq+GHG0wkbVrvxdAiNmXgAQrwXUcKknlnH8Ct5LEuU8bYFc5MUZ BMX0RweokyZNxkdlGDZHHMH69NPEiRMaTd8E5ct5RdlpS8oYxb8DJMtq7rSJGidJ gqEFbNwKiNRScVBcYKW+WaXoKgpOKfzLeRbcVfWpR//uiXH60k8yWLbw91bKfQ5P xYsPHiLOhMba5eRbUQU80xWTyMi/wE+BaO1p0GUFEixMLjtNTzHaSX1BosJdgSNA RT7lV0wH2IlmXWj3+qEjw9M5UMJ0sCSi -----END CERTIFICATE-----Generated at Wed May 13 08:15:28 2026 by rpki-client