$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa File: a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json) Hash identifier: FpLco+qmgmyrVf+Rn7l+wemvJPsWhVaDF2N+WFMQdGM= Subject key identifier: 96:69:23:72:8F:10:5F:22:CC:7B:0F:57:00:82:A3:4A:F0:B6:E1:C6 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584DCDC5AED778F1534C89F1F5D0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 6391 IP address blocks: 2605:8c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:ae:d7:78:f1:53:4c:89:f1:f5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=45ab2d04-ccdc-4e84-ac87-059492b1ab74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:07:28:ad:39:32:6e:dd:2d:a4:e2:e8:aa: 48:38:2a:df:3a:89:5d:ff:cf:f6:de:3d:bb:3d:06: 1e:86:be:7e:09:c1:90:40:bc:77:a2:48:2d:89:63: 13:f9:ba:20:12:06:7f:a8:bc:a8:81:cb:79:70:5a: c6:66:63:8d:e5:4d:76:36:1f:5e:5b:d1:b6:41:38: 6b:af:f4:fd:a0:4f:49:2b:b1:e7:8c:60:29:4c:fc: bc:af:20:e3:34:4c:7f:5b:db:75:5d:da:86:da:47: 4e:b7:32:ff:49:fa:79:9d:a9:89:f9:4d:d1:21:19: 42:8a:c8:f6:be:f9:6f:06:e9:3d:5d:31:38:95:cd: c8:0a:1d:84:a7:c0:8e:d9:ca:e0:ce:74:3a:e6:c1: 51:44:f0:68:85:76:67:6f:bc:d5:d7:f8:2b:35:0f: f6:65:c2:a9:ae:f9:af:0b:a3:be:3a:34:e0:c5:9d: cb:bc:d2:fb:61:54:bc:4e:f0:47:c5:6b:a8:2e:6e: 24:82:6f:b4:71:13:b1:8d:7e:b8:55:f0:4e:6e:7f: fc:4c:87:18:f9:dd:22:93:58:77:86:a8:1f:58:95: e4:17:be:3c:dc:d8:f0:fb:59:80:22:90:95:88:45: c2:1e:86:34:51:ca:ee:89:1b:95:df:70:c9:44:b6: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:69:23:72:8F:10:5F:22:CC:7B:0F:57:00:82:A3:4A:F0:B6:E1:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6e:49:34:1d:03:f0:ca:41:d8:44:00:a0:6e:b6:d9:eb:39: af:7c:47:c8:a2:9a:c4:8e:b9:bb:cd:78:f7:dd:ee:3a:80:c7: 21:2d:82:41:c5:4f:9c:af:90:2e:f2:80:78:64:b5:b5:da:9a: f5:f9:07:28:f1:1a:3d:ad:1f:f9:e5:ab:56:ef:a4:46:cd:09: b4:38:ac:42:a3:21:f2:bc:41:8a:b0:fb:7e:f0:25:cf:3b:56: 2c:9e:8b:e0:c5:75:08:80:b6:c1:ba:99:da:6c:43:0d:77:14: 22:19:44:76:09:7a:1e:41:ee:9a:0d:0a:1a:ea:00:bb:7d:cf: 8c:85:fd:7b:7a:03:c1:a8:d2:06:5b:18:4f:c7:73:3b:38:c0: de:5a:95:67:bd:71:1c:5d:72:14:d4:f8:2f:1d:da:b8:48:53: 92:eb:e0:9b:34:db:22:4e:16:28:f8:e6:4f:4e:8b:b7:ef:a1: ab:ff:3d:82:57:4a:54:b3:ea:95:fd:4c:25:34:68:7f:cf:c9: c7:30:1b:1e:10:5e:93:72:c9:65:f7:a5:b3:77:d5:5c:58:95: da:9a:91:31:7e:75:a4:64:3e:07:d3:15:a0:4b:39:1b:39:b6: 93:93:f8:cc:f2:1b:c7:07:79:2d:c0:8d:13:a2:80:46:64:7f: 7c:ee:63:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3Nxa7XePFTTInx9dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NDVhYjJkMDQtY2NkYy00ZTg0LWFjODctMDU5NDkyYjFhYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyQHKK05Mm7dLaTi6KpIOCrfOold/8/23j27 PQYehr5+CcGQQLx3okgtiWMT+bogEgZ/qLyogct5cFrGZmON5U12Nh9eW9G2QThr r/T9oE9JK7HnjGApTPy8ryDjNEx/W9t1XdqG2kdOtzL/Sfp5namJ+U3RIRlCisj2 vvlvBuk9XTE4lc3ICh2Ep8CO2crgznQ65sFRRPBohXZnb7zV1/grNQ/2ZcKprvmv C6O+OjTgxZ3LvNL7YVS8TvBHxWuoLm4kgm+0cROxjX64VfBObn/8TIcY+d0ik1h3 hqgfWJXkF7483Njw+1mAIpCViEXCHoY0UcruiRuV33DJRLZa9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZpI3KPEF8izHsPVwCCo0rwtuHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTQ2MzE3ZjktNTE4MS0z NWE3LWFiMjAtMDBiYWNmNjhiZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTbkk0HQPwykHYRACgbrbZ6zmvfEfIoprEjrm7zXj33e46gMchLYJB xU+cr5Au8oB4ZLW12pr1+Qco8Ro9rR/55atW76RGzQm0OKxCoyHyvEGKsPt+8CXP O1YsnovgxXUIgLbBupnabEMNdxQiGUR2CXoeQe6aDQoa6gC7fc+Mhf17egPBqNIG WxhPx3M7OMDeWpVnvXEcXXIU1PgvHdq4SFOS6+CbNNsiThYo+OZPTou376Gr/z2C V0pUs+qV/UwlNGh/z8nHMBseEF6Tcsll96Wzd9VcWJXampExfnWkZD4H0xWgSzkb ObaTk/jM8hvHB3ktwI0TooBGZH987mMX -----END CERTIFICATE-----Generated at Wed May 13 13:14:22 2026 by rpki-client