$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa File: 3021d954-9e02-3628-92f3-31f119119e7a.roa (raw, json) Hash identifier: Y6DdSjtm0gj95LDmhh5C0dF+lljte2RZg0w66hAiUdI= Subject key identifier: 61:49:B1:66:E7:EB:CD:54:EF:06:C9:3D:4C:CD:EC:2F:3A:4B:79:8F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D95EFF70ABC063E90D3119BC0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 2606:7bc0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f7:0a:bc:06:3e:90:d3:11:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=66a262e6-8209-45bf-bb81-294c6bca4e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:36:39:5b:2a:fe:f1:20:2b:95:f4:75:53: e4:9f:1a:15:35:69:5e:9e:2b:a5:14:e1:19:ec:5e: ea:b4:ed:de:3b:f2:c6:f0:f1:c0:63:b1:ae:f6:30: 00:ae:d4:1b:22:6c:fb:07:44:f4:a7:2e:07:cd:1f: 32:1f:93:01:1b:da:19:80:8a:ab:e5:f4:bf:bc:bf: a6:00:7e:af:c7:bb:b3:8d:99:df:98:5e:ef:2e:e3: d0:ab:f0:79:f6:e3:18:1d:9a:7b:3d:b1:33:6f:4c: 60:6f:74:5e:ab:37:81:31:9b:dd:89:b0:56:47:50: 97:99:94:dd:8c:40:d3:36:f3:ab:06:ef:c4:9f:a6: 90:eb:90:a2:ea:4f:af:c9:a7:7c:75:01:f8:9f:98: 61:06:e8:59:9b:2d:96:66:b0:33:40:05:2a:2b:77: aa:2e:1f:03:aa:10:d0:09:53:ed:dd:45:fe:37:c2: 6f:da:05:09:a8:6f:0e:6f:06:38:f1:8a:53:e4:3a: 67:91:2b:77:4a:d4:04:65:47:14:be:54:5f:65:f8: f9:94:69:c5:c0:ee:3c:d3:1b:0f:41:55:69:c0:db: 9c:a6:b5:b4:9e:8a:6e:d6:ea:8b:d4:b2:e0:fd:92: 15:b3:78:58:16:82:06:4a:2c:e5:2d:cf:26:91:51: e4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:B1:66:E7:EB:CD:54:EF:06:C9:3D:4C:CD:EC:2F:3A:4B:79:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3021d954-9e02-3628-92f3-31f119119e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6e:12:c1:ce:01:1f:75:c9:f1:49:7e:a3:a0:9d:c9:28:e0: c1:f1:cd:1c:b4:40:db:6d:3d:3e:ce:67:c2:ed:5c:ce:17:81: 88:af:e2:40:4a:f2:aa:19:be:eb:64:2d:4a:c4:c1:fc:06:4d: c0:9b:f6:37:70:fd:1d:e5:fe:b7:22:9d:57:5c:73:9f:05:65: 3a:13:2f:ac:ab:49:f9:ab:2a:48:47:94:14:69:2f:b4:ab:20: de:dd:bb:5d:1f:1c:e1:89:08:6d:a6:92:58:58:16:61:da:7d: 3b:ae:77:8e:05:c2:51:d5:b1:ea:17:da:db:5b:ab:ab:7e:cb: 39:ed:36:0f:a2:a9:19:a2:d9:54:8f:60:55:c8:95:95:16:69: 93:71:1e:bf:2e:e5:36:cb:aa:05:37:2e:b1:65:80:86:b2:3a: f3:d2:23:b3:28:df:93:38:bf:e6:0a:d3:7c:03:42:6b:69:f8: 1a:cc:3c:8d:fb:06:ee:79:eb:e2:c1:7f:03:b2:a0:dc:51:8e: 8d:07:55:91:99:27:28:8c:b7:32:be:e4:5e:e8:de:df:f8:f5: b2:e1:c2:0e:09:c9:f0:6e:87:8e:95:78:33:9f:2d:48:85:ff: 76:cb:08:05:09:6b:ac:6b:2c:10:31:1d:51:35:0c:ff:38:6f: 4f:b5:f5:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/cKvAY+kNMRm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NjZhMjYyZTYtODIwOS00NWJmLWJiODEtMjk0YzZiY2E0ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVc2OVsq/vEgK5X0dVPknxoVNWleniulFOEZ 7F7qtO3eO/LG8PHAY7Gu9jAArtQbImz7B0T0py4HzR8yH5MBG9oZgIqr5fS/vL+m AH6vx7uzjZnfmF7vLuPQq/B59uMYHZp7PbEzb0xgb3ReqzeBMZvdibBWR1CXmZTd jEDTNvOrBu/En6aQ65Ci6k+vyad8dQH4n5hhBuhZmy2WZrAzQAUqK3eqLh8DqhDQ CVPt3UX+N8Jv2gUJqG8ObwY48YpT5DpnkSt3StQEZUcUvlRfZfj5lGnFwO480xsP QVVpwNucprW0nopu1uqL1LLg/ZIVs3hYFoIGSizlLc8mkVHkOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGFJsWbn681U7wbJPUzN7C86S3mPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzAyMWQ5NTQtOWUwMi0z NjI4LTkyZjMtMzFmMTE5MTE5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxuEsHOAR91yfFJfqOgncko4MHxzRy0QNttPT7OZ8LtXM4XgYiv 4kBK8qoZvutkLUrEwfwGTcCb9jdw/R3l/rcinVdcc58FZToTL6yrSfmrKkhHlBRp L7SrIN7du10fHOGJCG2mklhYFmHafTuud44FwlHVseoX2ttbq6t+yzntNg+iqRmi 2VSPYFXIlZUWaZNxHr8u5TbLqgU3LrFlgIayOvPSI7Mo35M4v+YK03wDQmtp+BrM PI37Bu556+LBfwOyoNxRjo0HVZGZJyiMtzK+5F7o3t/49bLhwg4JyfBuh46VeDOf LUiF/3bLCAUJa6xrLBAxHVE1DP84b0+19XM= -----END CERTIFICATE-----Generated at Wed May 13 14:27:02 2026 by rpki-client