$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa File: 1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa (raw, json) Hash identifier: riOH9Byxwqvf+uNN5ebm5lKusjllwogYu+fmIg9rY58= Subject key identifier: 67:3E:2B:D5:F7:0C:AD:B1:CE:B7:C3:C8:84:32:30:F8:D5:3F:D0:CB Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab Certificate serial: 010D0C9F4328584DBBA055D716B253C1454C5D00 Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 8075 IP address blocks: 2620:12a:c0a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:55:d7:16:b2:53:c1:45:4c:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=09414ae7-2781-4312-8c10-780d0670fe78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cc:65:55:02:4a:44:79:85:53:4d:ca:72:c3: 9a:f4:2f:72:76:49:5b:c6:6d:fb:42:02:19:c3:1a: 37:34:90:64:ca:3e:55:ee:21:6d:69:65:c8:23:0b: 8d:ab:22:1a:a0:47:df:55:c3:2e:c1:75:ac:a9:c1: a9:31:5b:ea:28:ee:7a:7f:aa:72:56:76:15:00:68: dc:80:d6:56:c7:03:aa:ec:a1:51:86:cb:3a:fd:d0: c1:21:1f:60:e1:67:23:27:10:9d:bd:dc:11:57:56: 5c:69:ab:00:56:57:33:4c:34:e8:44:67:a8:a8:e7: 50:30:6f:48:89:1d:44:c9:96:dc:07:64:08:6c:31: 93:8b:96:7b:b3:8e:42:bf:5a:fb:00:c8:b4:0f:b4: 0e:b5:0b:3b:14:e8:aa:cb:21:16:f5:85:8b:c7:11: 28:cd:06:dd:dc:38:c1:a0:a8:95:fb:41:06:f3:70: 6b:05:68:60:87:15:1d:e4:1e:01:b7:37:40:5a:9d: 14:a1:a9:fd:b7:19:1d:c0:fa:30:59:79:b3:0f:c1: 7a:5a:2e:6b:2d:2b:45:d1:f2:1f:5f:11:84:ae:3b: 31:56:18:ef:e9:8d:bb:ec:c6:65:a3:34:5b:38:7d: 0c:67:52:80:75:9e:c0:35:bc:58:74:d3:e5:47:85: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3E:2B:D5:F7:0C:AD:B1:CE:B7:C3:C8:84:32:30:F8:D5:3F:D0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/1020aa92-2f16-3a75-a96f-1eb7d6bfaac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl X509v3 Authority Key Identifier: keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer sbgp-ipAddrBlock: critical IPv6: 2620:12a:c0a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ab:49:56:13:3a:f0:f5:0f:23:0b:a1:4f:9f:83:43:09:6b: c4:54:bb:9b:9a:09:3e:b5:8d:f1:a6:8d:33:62:08:a0:6b:e9: 7a:a1:47:70:82:03:bc:47:e7:0d:e5:98:7b:0d:c2:28:09:2c: 34:51:e5:e4:e7:dc:39:04:fc:62:45:25:9f:de:59:e2:70:28: 9f:16:74:d4:c9:42:1b:07:75:03:70:09:9a:16:89:ad:e0:a0: df:02:17:b8:10:c1:31:ef:8e:c1:56:87:18:6d:4a:17:28:fb: 67:ca:04:1f:36:c2:dd:c6:2b:2d:16:07:0f:a6:85:06:99:19: 41:9d:32:9f:e4:7f:ca:26:b4:8a:4e:ff:01:2e:9d:62:33:f8: 3a:83:7a:36:ce:d1:e2:1e:2b:8a:43:4c:ab:32:93:f5:ae:83: 89:63:97:e7:2b:6b:a1:79:9a:7b:20:0e:f7:35:83:94:60:4d: f5:41:33:f3:3d:2b:2c:b4:5c:2f:26:1f:44:0f:69:64:76:b0: 29:13:26:83:3e:4e:00:b4:d6:50:bc:17:cb:03:a2:c4:38:d0: a6:f4:60:b2:14:49:09:29:0a:88:38:3d:13:16:53:0f:b3:e2: dd:08:48:61:45:a2:ee:76:25:ec:d4:dd:c5:2b:2c:ce:9b:c5: eb:a8:91:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE27oFXXFrJTwUVMXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzMWE0YmEtNmFiYy00NDdjLWFkZDgtNjdlZGMzYzQ4 M2FiMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MDk0MTRhZTctMjc4MS00MzEyLThjMTAtNzgwZDA2NzBmZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMxlVQJKRHmFU03KcsOa9C9ydklbxm37QgIZ wxo3NJBkyj5V7iFtaWXIIwuNqyIaoEffVcMuwXWsqcGpMVvqKO56f6pyVnYVAGjc gNZWxwOq7KFRhss6/dDBIR9g4WcjJxCdvdwRV1ZcaasAVlczTDToRGeoqOdQMG9I iR1EyZbcB2QIbDGTi5Z7s45Cv1r7AMi0D7QOtQs7FOiqyyEW9YWLxxEozQbd3DjB oKiV+0EG83BrBWhghxUd5B4BtzdAWp0Uoan9txkdwPowWXmzD8F6Wi5rLStF0fIf XxGErjsxVhjv6Y277MZlozRbOH0MZ1KAdZ7ANbxYdNPlR4UJbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGc+K9X3DK2xzrfDyIQyMPjVP9DLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTMx YTRiYS02YWJjLTQ0N2MtYWRkOC02N2VkYzNjNDgzYWIvMTAyMGFhOTItMmYxNi0z YTc1LWE5NmYtMWViN2Q2YmZhYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUzMWE0YmEtNmFiYy00NDdjLWFk ZDgtNjdlZGMzYzQ4M2FiLzI1MzFhNGJhLTZhYmMtNDQ3Yy1hZGQ4LTY3ZWRjM2M0 ODNhYi5jcmwwHwYDVR0jBBgwFoAUnjqfdPlsZO1jn6yB8uQ3Qy72OwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTMxYTRiYS02YWJjLTQ0N2MtYWRkOC02N2Vk YzNjNDgzYWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKsCj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKrSVYTOvD1DyMLoU+fg0MJa8RUu5uaCT61jfGmjTNiCKBr6Xqh R3CCA7xH5w3lmHsNwigJLDRR5eTn3DkE/GJFJZ/eWeJwKJ8WdNTJQhsHdQNwCZoW ia3goN8CF7gQwTHvjsFWhxhtShco+2fKBB82wt3GKy0WBw+mhQaZGUGdMp/kf8om tIpO/wEunWIz+DqDejbO0eIeK4pDTKsyk/Wug4ljl+cra6F5mnsgDvc1g5RgTfVB M/M9Kyy0XC8mH0QPaWR2sCkTJoM+TgC01lC8F8sDosQ40Kb0YLIUSQkpCog4PRMW Uw+z4t0ISGFFou52JezU3cUrLM6bxeuokVQ= -----END CERTIFICATE-----Generated at Wed May 13 05:21:30 2026 by rpki-client