$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa File: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json) Hash identifier: swsLMV7Ljvlg6Xqlv6dyGllMNPQRcfZdqCSL9HUbUlc= Subject key identifier: A9:23:0A:90:05:90:8E:BE:BA:25:9E:EB:CD:81:29:86:7A:87:45:D0 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584D9325476FAA9BD80F6ACC4580 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 19528 IP address blocks: 2605:14c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:47:6f:aa:9b:d8:0f:6a:cc:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=500b5cc0-7e40-4d23-b64c-73ef5a812960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b1:d1:0b:74:8f:b8:6f:cb:d8:6c:56:80:09: 11:c3:1f:9c:74:ac:09:f5:67:e2:1c:61:b7:97:41: e7:8b:6b:7e:e5:a0:08:05:85:08:3c:a1:65:b1:fe: 1b:ff:a9:b8:e7:45:7f:35:e4:4a:d1:ef:bf:03:40: ba:78:02:7d:d2:cb:c2:1e:e2:d5:96:ed:9b:16:59: bd:6a:18:c4:b9:54:61:95:c2:e4:bb:43:10:27:1c: b9:ae:b6:4e:55:33:bd:3e:6f:af:07:73:7a:51:31: b1:da:76:7a:bf:44:b5:98:b0:24:a3:f8:4f:d4:e7: bb:5d:98:31:e0:5d:60:3a:09:43:1a:16:c9:48:01: ed:39:33:3f:d8:bc:c6:73:cf:9b:f5:8b:95:a2:7b: d1:fb:a6:cf:a5:d0:60:de:b6:0b:dd:a5:80:c5:8f: 60:84:90:03:98:ff:94:66:98:87:eb:b1:4a:14:5c: 1e:67:97:d7:30:03:d6:e4:cf:6e:12:f2:1b:23:0c: e7:a6:99:ba:96:3d:33:c5:ca:e6:c6:98:12:7a:21: 83:f4:fb:cc:bd:2e:54:02:80:d1:32:e0:03:02:7c: 9c:f9:c9:56:a8:6b:63:7d:27:21:ab:cd:e3:28:94: cb:7b:4a:dc:c5:7b:0a:0f:23:7f:f8:ff:8b:ac:22: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:23:0A:90:05:90:8E:BE:BA:25:9E:EB:CD:81:29:86:7A:87:45:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv6: 2605:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:20:8d:e1:d4:bd:af:53:16:e3:0b:e3:85:0a:a4:09:12:06: 33:9f:fc:9e:8a:f6:a9:8b:1d:b8:65:49:ba:ff:d5:75:35:6f: 88:c8:6d:f4:d0:24:20:48:eb:0c:01:45:31:b0:75:04:52:13: e2:6a:04:1d:22:90:71:89:a5:88:0a:03:92:79:64:54:94:25: f1:f8:0f:3c:13:5c:46:a9:79:6c:e7:2e:09:72:dd:de:7b:4d: 94:c4:28:9d:1c:f3:2e:a1:bf:2d:8f:e9:cf:b9:d8:cd:25:bc: c2:88:08:3a:84:f2:47:98:e4:53:10:f9:4e:2b:38:62:70:1a: e9:25:6d:c0:8e:54:aa:32:20:67:0e:cf:d9:58:0b:34:79:32: 1d:94:35:f8:b3:e5:02:5d:d9:60:9e:21:54:b4:60:97:23:34: 6f:6a:7f:19:40:e9:bc:e7:f1:9b:18:1d:63:c3:c2:a2:74:b5: ea:f2:11:53:7b:fe:e4:49:ae:7c:56:0e:6a:5a:1d:4d:c0:2e: 52:5f:fb:9c:eb:a1:90:44:9e:9c:b5:d7:45:03:6a:48:26:08: f3:a9:7f:3d:67:71:b4:29:16:e7:d8:a9:79:9c:f7:aa:c3:55: 29:aa:5f:68:19:50:de:d0:c5:75:99:d7:67:29:43:d0:bf:57: ce:d0:a7:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2TJUdvqpvYD2rMRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NTAwYjVjYzAtN2U0MC00ZDIzLWI2NGMtNzNlZjVhODEyOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLHRC3SPuG/L2GxWgAkRwx+cdKwJ9WfiHGG3 l0Hni2t+5aAIBYUIPKFlsf4b/6m450V/NeRK0e+/A0C6eAJ90svCHuLVlu2bFlm9 ahjEuVRhlcLku0MQJxy5rrZOVTO9Pm+vB3N6UTGx2nZ6v0S1mLAko/hP1Oe7XZgx 4F1gOglDGhbJSAHtOTM/2LzGc8+b9YuVonvR+6bPpdBg3rYL3aWAxY9ghJADmP+U ZpiH67FKFFweZ5fXMAPW5M9uEvIbIwznppm6lj0zxcrmxpgSeiGD9PvMvS5UAoDR MuADAnyc+clWqGtjfSchq83jKJTLe0rcxXsKDyN/+P+LrCI8CQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKkjCpAFkI6+uiWe682BKYZ6h0XQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvM2EyZDcyNzQtNDIzNi0z MGJkLTk2NTQtZDlhYjlkZmQzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1II3h1L2vUxbjC+OFCqQJEgYzn/yeivapix24ZUm6/9V1NW+IyG30 0CQgSOsMAUUxsHUEUhPiagQdIpBxiaWICgOSeWRUlCXx+A88E1xGqXls5y4Jct3e e02UxCidHPMuob8tj+nPudjNJbzCiAg6hPJHmORTEPlOKzhicBrpJW3AjlSqMiBn Ds/ZWAs0eTIdlDX4s+UCXdlgniFUtGCXIzRvan8ZQOm85/GbGB1jw8KidLXq8hFT e/7kSa58Vg5qWh1NwC5SX/uc66GQRJ6ctddFA2pIJgjzqX89Z3G0KRbn2Kl5nPeq w1Upql9oGVDe0MV1mddnKUPQv1fO0Kf2 -----END CERTIFICATE-----Generated at Wed May 13 05:31:38 2026 by rpki-client