$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa File: 284b97e2-d8e9-3620-98fe-65963d159161.roa (raw, json) Hash identifier: e1+PxO3xEE1Jl7TNgcSIVsrINxRHBCxTuwLX96mzSl4= Subject key identifier: A8:A0:70:A6:97:3A:20:C7:09:66:16:3F:0C:F7:00:DC:A0:5E:2B:4D Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D95EFF4C96833E66A03526980 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 14618 IP address blocks: 2606:7bc0:1090::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f4:c9:68:33:e6:6a:03:52:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=27a833ed-dd84-403d-afe5-fe164d1500f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:3e:32:23:01:d6:c0:cc:af:f0:f0:99:6f: b5:73:03:33:eb:12:c0:d7:cd:45:a6:a2:40:83:d2: c7:a6:ab:e7:2d:98:b0:04:cb:97:04:ca:04:0d:d8: e6:87:3c:d1:a2:8c:c9:9b:08:e9:bb:8b:62:54:ad: da:bf:3e:fb:86:18:00:59:6b:08:c0:0e:52:ee:f7: 26:e7:c0:fa:b8:b1:3d:84:0e:e1:99:6a:70:f4:1d: 40:de:06:b4:d8:c9:ae:88:11:41:c4:a3:9d:64:06: 60:ef:19:b2:24:ca:0e:8b:3a:bd:90:89:ff:c1:7d: b9:1b:4f:2e:ac:7b:18:25:61:f9:7f:d7:cc:a5:65: 6b:8d:8c:5a:35:62:eb:62:9c:2b:01:49:ed:e2:2d: 4e:13:55:cb:b9:0e:d7:c3:91:7c:5f:50:ab:df:87: 84:06:57:f1:a2:82:57:88:23:a1:15:a7:cd:97:67: 33:dd:fd:a2:60:46:ec:54:31:b0:35:70:c9:a6:eb: f1:53:52:bb:fd:5a:a7:b1:e3:ae:eb:a7:6f:32:ff: 80:6d:dc:a8:af:76:5a:3a:7f:c0:7c:91:f9:4d:e5: 8f:4d:65:0c:1a:c3:62:29:4f:45:a9:e1:a2:e6:bc: a5:04:66:6e:de:d5:fe:29:2d:cb:40:a4:e5:76:f1: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A0:70:A6:97:3A:20:C7:09:66:16:3F:0C:F7:00:DC:A0:5E:2B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1090::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:be:7b:2d:bc:9c:9d:9e:4a:34:4c:b4:5e:89:48:d3:b9:4c: da:3a:03:7c:4f:fb:f3:2f:4a:ec:8e:b7:f7:2a:21:41:10:1b: 5d:54:4b:1b:84:fb:41:7c:35:0b:21:51:f7:b2:d8:f6:f1:c5: 18:78:d5:38:88:0d:a2:94:f5:0c:93:33:b7:d6:80:03:7c:cb: 46:ed:a2:88:31:7b:31:30:9c:f2:99:90:22:31:9d:7a:86:8c: 0b:57:86:ee:fe:10:21:81:72:c7:99:4c:16:b6:36:10:df:09: da:3c:79:78:ee:d9:ad:cf:2d:ef:e0:64:e5:70:c1:0b:70:27: 14:10:56:54:e9:27:82:4d:5a:4e:50:c2:d0:1a:53:b5:41:d9: b8:ba:e0:35:17:0d:df:32:bf:b2:c6:76:ec:5f:31:c2:f8:22: cd:76:38:e6:eb:b9:d8:3e:c2:9e:b3:85:76:62:0a:b3:4c:5d: e7:f3:25:18:84:cd:75:f6:8d:ad:af:f4:c7:0d:3a:28:34:50: cf:11:c6:9d:e4:f3:5f:e5:92:a4:49:cc:c5:b1:0c:eb:e5:ca: 51:dc:07:73:20:01:ae:17:08:7b:15:e0:46:64:06:55:6f:27: 81:1f:c8:82:b3:ba:9e:a1:a3:61:f9:f5:ce:c4:20:30:11:6a: fe:4c:ac:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/TJaDPmagNSaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MjdhODMzZWQtZGQ4NC00MDNkLWFmZTUtZmUxNjRkMTUwMGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYQ+MiMB1sDMr/DwmW+1cwMz6xLA181FpqJA g9LHpqvnLZiwBMuXBMoEDdjmhzzRoozJmwjpu4tiVK3avz77hhgAWWsIwA5S7vcm 58D6uLE9hA7hmWpw9B1A3ga02MmuiBFBxKOdZAZg7xmyJMoOizq9kIn/wX25G08u rHsYJWH5f9fMpWVrjYxaNWLrYpwrAUnt4i1OE1XLuQ7Xw5F8X1Cr34eEBlfxooJX iCOhFafNl2cz3f2iYEbsVDGwNXDJpuvxU1K7/VqnseOu66dvMv+Abdyor3ZaOn/A fJH5TeWPTWUMGsNiKU9FqeGi5rylBGZu3tX+KS3LQKTldvEJ7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKigcKaXOiDHCWYWPwz3ANygXitNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMjg0Yjk3ZTItZDhlOS0z NjIwLTk4ZmUtNjU5NjNkMTU5MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ7wBCQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABu+ey28nJ2eSjRMtF6JSNO5TNo6A3xP+/MvSuyOt/cqIUEQG11U SxuE+0F8NQshUfey2PbxxRh41TiIDaKU9QyTM7fWgAN8y0btoogxezEwnPKZkCIx nXqGjAtXhu7+ECGBcseZTBa2NhDfCdo8eXju2a3PLe/gZOVwwQtwJxQQVlTpJ4JN Wk5QwtAaU7VB2bi64DUXDd8yv7LGduxfMcL4Is12OObrudg+wp6zhXZiCrNMXefz JRiEzXX2ja2v9McNOig0UM8Rxp3k81/lkqRJzMWxDOvlylHcB3MgAa4XCHsV4EZk BlVvJ4EfyIKzup6ho2H59c7EIDARav5MrAg= -----END CERTIFICATE-----Generated at Wed May 13 11:39:22 2026 by rpki-client