$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa File: d3baaff6-9184-3e90-aed6-78e8be196ba7.roa (raw, json) Hash identifier: sWFd/4DWey7zc97pwj/HK1H4Tw8+o+A7cv5tQxJm6jk= Subject key identifier: 6E:94:BA:1B:95:F1:E6:C6:69:CB:A3:F9:14:17:86:11:10:B1:C7:55 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584DBBA04EB31F92D0D7ACD38780 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 62651 IP address blocks: 2604:ea80:2400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:4e:b3:1f:92:d0:d7:ac:d3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=93320c8b-7a6f-4675-bed9-d62581c22902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:18:d1:39:21:4d:49:d7:a2:87:48:1e:f7: 59:2b:37:a8:ab:ed:ba:44:d2:42:a1:42:d5:da:35: 7b:bd:c0:a0:d0:4d:d2:4c:54:63:b5:ae:0c:6d:a8: 18:4e:fc:06:06:42:46:42:29:3e:cc:ca:2c:8d:6a: da:20:f4:ba:21:c9:bd:66:ed:f3:48:aa:b6:88:eb: 52:a1:35:2e:1d:70:ac:4f:4e:73:39:4d:f6:4e:23: 4e:64:e8:5d:52:79:70:97:fe:13:38:c8:58:c2:46: c1:6d:54:ca:bd:17:a3:6c:26:3d:4b:62:0c:f8:a7: 43:bf:68:f9:26:4c:ff:bd:7d:c4:02:48:4f:88:a2: 48:a8:4c:ed:a1:bf:53:14:b5:d8:c7:e5:9c:29:bd: 7a:7c:e8:bc:60:0f:14:bd:0c:a7:98:76:ca:ac:db: 7e:3e:85:62:8f:ff:26:9c:b1:df:9d:1c:c1:73:4c: 56:b8:76:a6:93:bd:c0:e2:fd:9a:2f:56:e1:d2:72: d6:51:3c:51:9c:65:df:87:ac:d5:d2:de:2e:1d:78: 9d:58:99:98:e2:59:b3:17:d5:87:dc:d7:d8:49:96: cf:ae:d4:fd:6d:14:dc:46:45:ae:ab:0d:13:d6:4a: 58:6b:cd:72:48:79:c3:4c:c1:04:06:dc:c3:06:ba: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:94:BA:1B:95:F1:E6:C6:69:CB:A3:F9:14:17:86:11:10:B1:C7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d3baaff6-9184-3e90-aed6-78e8be196ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:ea80:2400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5e:51:8a:68:3d:95:99:fe:85:a7:62:67:4d:aa:c4:f0:0f: fb:47:77:79:2c:be:ad:3f:bd:d7:1f:c5:63:d2:f1:e5:75:27: 23:d8:0a:aa:06:10:1a:1f:39:3d:8c:fa:7c:b2:67:55:5a:a8: 0d:16:38:7e:3d:72:30:13:58:aa:f5:5e:c2:2d:fb:f3:af:8f: 47:43:d0:54:15:a5:db:50:b1:aa:a5:92:80:49:55:7a:fb:a8: b6:a0:2a:44:e7:4a:92:13:ab:8e:dc:11:ec:eb:85:9f:68:9a: 84:37:05:de:e3:2d:1d:1f:35:ad:5e:5e:3d:c3:5d:8b:58:92: 9b:34:83:26:c1:97:fd:40:d8:74:b7:eb:9d:5d:b4:14:9b:0b: 16:4b:17:bb:a8:ac:d2:bf:00:75:2f:92:4c:4e:14:67:9d:dc: 94:3b:01:57:ec:9a:e4:52:c8:3c:6d:8a:57:8c:cb:0e:74:c1: 4c:8b:56:cf:28:90:72:93:e1:de:a2:20:54:a6:b4:8e:b3:34: 5f:33:1d:23:f1:5e:a9:3f:b6:df:da:f3:c0:72:5f:7b:e1:d1: b4:f7:71:20:3d:1e:38:7c:9e:ba:85:80:39:c3:c2:f2:f2:15: 27:c8:d5:81:9b:4f:05:c9:e4:90:3b:ec:38:df:1e:70:80:65: 60:75:73:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE27oE6zH5LQ16zTh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OTMzMjBjOGItN2E2Zi00Njc1LWJlZDktZDYyNTgxYzIyOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd0Y0TkhTUnXoodIHvdZKzeoq+26RNJCoULV 2jV7vcCg0E3STFRjta4MbagYTvwGBkJGQik+zMosjWraIPS6Icm9Zu3zSKq2iOtS oTUuHXCsT05zOU32TiNOZOhdUnlwl/4TOMhYwkbBbVTKvRejbCY9S2IM+KdDv2j5 Jkz/vX3EAkhPiKJIqEztob9TFLXYx+WcKb16fOi8YA8UvQynmHbKrNt+PoVij/8m nLHfnRzBc0xWuHamk73A4v2aL1bh0nLWUTxRnGXfh6zV0t4uHXidWJmY4lmzF9WH 3NfYSZbPrtT9bRTcRkWuqw0T1kpYa81ySHnDTMEEBtzDBrrQtwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG6UuhuV8ebGacuj+RQXhhEQscdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDNiYWFmZjYtOTE4NC0z ZTkwLWFlZDYtNzhlOGJlMTk2YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgCQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWV5Rimg9lZn+hadiZ02qxPAP+0d3eSy+rT+91x/FY9Lx5XUnI9gK qgYQGh85PYz6fLJnVVqoDRY4fj1yMBNYqvVewi3786+PR0PQVBWl21CxqqWSgElV evuotqAqROdKkhOrjtwR7OuFn2iahDcF3uMtHR81rV5ePcNdi1iSmzSDJsGX/UDY dLfrnV20FJsLFksXu6is0r8AdS+STE4UZ53clDsBV+ya5FLIPG2KV4zLDnTBTItW zyiQcpPh3qIgVKa0jrM0XzMdI/FeqT+239rzwHJfe+HRtPdxID0eOHyeuoWAOcPC 8vIVJ8jVgZtPBcnkkDvsON8ecIBlYHVzAQ== -----END CERTIFICATE-----Generated at Wed May 13 15:48:39 2026 by rpki-client