$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa File: 857171dc-1cf1-350c-bc80-6881e5f008ea.roa (raw, json) Hash identifier: QhFqvZPn0S1bHVhv0ZRzj/sndfZ7g/gUMTtfswOKjLg= Subject key identifier: 12:D7:92:0E:47:34:6E:19:73:D8:0A:09:C8:13:D1:73:DD:B2:61:E2 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584DAC45920EA6B3DB0A1F7E0540 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11232 IP address blocks: 2605:4a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:92:0e:a6:b3:db:0a:1f:7e:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=1ea37d08-c4f2-4078-b0a3-48d41b7fcfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:c0:c8:60:0b:40:d4:f5:3c:d4:dd:24:9d: 26:45:34:4a:85:e0:51:2e:2a:ef:25:22:47:2e:6b: 89:f9:61:af:2c:95:7a:b8:52:b4:a7:24:6b:ad:da: f1:6b:53:2d:17:6b:a1:c6:c8:07:92:00:7f:de:22: 53:33:b3:1c:f5:6f:32:ca:c2:b6:26:f5:41:32:44: b0:26:4d:60:3c:c5:cb:ac:a6:32:6e:23:ad:dd:bc: 43:32:37:fc:12:f9:a9:90:f6:45:57:26:bc:d7:56: 04:a7:6d:b2:a6:d9:d8:a3:ef:90:24:ad:1a:20:52: 51:ca:38:56:29:d1:7b:b0:2c:14:45:43:39:bb:83: be:18:39:77:79:36:2d:fc:2d:e5:af:6d:be:95:a0: 83:19:85:8f:a0:68:08:88:79:d9:2d:b0:93:9b:5e: 33:e4:58:ba:40:98:7d:f4:34:80:45:3b:f4:02:d0: 85:68:a3:b1:02:f1:5e:f4:8f:28:05:7d:8b:34:44: 6c:b1:de:a6:e3:61:8a:1a:cd:2e:96:f3:b6:91:81: dc:97:2c:b6:e2:ba:3b:78:50:29:a5:a3:4e:39:f0: 76:70:89:c0:37:a8:64:1d:14:32:cc:b8:35:1f:2d: b0:66:6c:80:72:c5:49:cb:e8:d7:c7:57:cf:12:c8: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:92:0E:47:34:6E:19:73:D8:0A:09:C8:13:D1:73:DD:B2:61:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/857171dc-1cf1-350c-bc80-6881e5f008ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2605:4a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ad:2e:4d:ab:45:99:b3:b0:2f:b5:0f:cf:89:93:84:d1:13: 8c:00:d1:f4:74:66:bb:d4:60:d9:2e:f6:bb:20:42:51:50:8d: 42:74:73:54:b8:87:c5:6a:60:43:5a:ab:03:6a:97:73:c7:c8: 75:80:a5:54:50:3f:15:ae:4f:f6:55:99:a7:34:a2:58:e9:8a: b5:26:99:8d:aa:92:a6:39:6e:5f:36:f6:71:38:fd:08:59:20: 40:11:c6:eb:6e:93:28:7b:78:18:12:12:41:19:bf:d2:12:6e: 3c:ee:16:cc:77:15:44:8a:6d:39:b0:be:5a:fe:bd:ea:b3:be: b7:98:d6:83:ef:e7:ca:5e:67:35:d2:03:44:62:a2:9e:7e:36: df:5f:c9:4b:a7:07:87:1a:76:17:40:54:d5:25:d8:4a:81:12: 48:9d:e7:07:da:5a:67:18:de:4f:12:a1:d3:39:72:d0:1c:44: 7e:f8:8c:b8:51:ee:f2:de:83:2f:f2:de:81:e4:a0:a0:5b:e4: 55:eb:c6:d4:eb:f0:70:4a:58:f9:9b:64:b3:ad:6a:c8:9e:77: 4f:ee:70:d0:1c:53:46:55:74:fc:82:4e:81:85:d8:a8:8e:31: 90:55:d5:71:4a:6a:b0:a6:b3:8e:43:df:d3:90:50:bf:c7:77: 7f:47:ef:0c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRZIOprPbCh9+BUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MWVhMzdkMDgtYzRmMi00MDc4LWIwYTMtNDhkNDFiN2ZjZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXvAyGALQNT1PNTdJJ0mRTRKheBRLirvJSJH LmuJ+WGvLJV6uFK0pyRrrdrxa1MtF2uhxsgHkgB/3iJTM7Mc9W8yysK2JvVBMkSw Jk1gPMXLrKYybiOt3bxDMjf8EvmpkPZFVya811YEp22yptnYo++QJK0aIFJRyjhW KdF7sCwURUM5u4O+GDl3eTYt/C3lr22+laCDGYWPoGgIiHnZLbCTm14z5Fi6QJh9 9DSARTv0AtCFaKOxAvFe9I8oBX2LNERssd6m42GKGs0ulvO2kYHclyy24ro7eFAp paNOOfB2cInAN6hkHRQyzLg1Hy2wZmyAcsVJy+jXx1fPEsgr9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBLXkg5HNG4Zc9gKCcgT0XPdsmHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODU3MTcxZGMtMWNmMS0z NTBjLWJjODAtNjg4MWU1ZjAwOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVKgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAFrS5Nq0WZs7AvtQ/PiZOE0ROMANH0dGa71GDZLva7IEJRUI1CdHNU uIfFamBDWqsDapdzx8h1gKVUUD8Vrk/2VZmnNKJY6Yq1JpmNqpKmOW5fNvZxOP0I WSBAEcbrbpMoe3gYEhJBGb/SEm487hbMdxVEim05sL5a/r3qs763mNaD7+fKXmc1 0gNEYqKefjbfX8lLpweHGnYXQFTVJdhKgRJInecH2lpnGN5PEqHTOXLQHER++Iy4 Ue7y3oMv8t6B5KCgW+RV68bU6/BwSlj5m2SzrWrInndP7nDQHFNGVXT8gk6Bhdio jjGQVdVxSmqwprOOQ9/TkFC/x3d/R+8M -----END CERTIFICATE-----Generated at Wed May 13 08:27:07 2026 by rpki-client