$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: ea30Yk3rY/tPIFr2Vh++z5o3iIWeK9RZDGevpECd03M= Subject key identifier: 94:47:5C:CE:12:9E:92:B1:6B:61:E5:C6:A2:5B:28:E4:70:1D:62:13 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584DAF1017C80AE58A37DF9B2120 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:17:c8:0a:e5:8a:37:df:9b:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=2f6ce679-aa67-4260-bc00-f55baa7d5c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:6f:ad:c8:17:c5:82:b6:e8:ff:06:6a:1d: 87:fd:da:85:e4:5a:56:d5:22:49:c3:9c:ce:22:5b: 69:ce:c1:16:fc:38:51:1f:f7:ed:2b:5c:3e:86:80: a2:6b:08:f0:7b:40:fb:6d:18:37:6b:c6:63:b7:91: f5:b8:f8:b7:87:e3:de:90:ca:c3:59:29:ad:e7:dd: cf:0d:b1:64:ef:d0:ed:2c:8a:90:a1:51:bf:1a:0c: 6b:ad:a6:96:9b:26:3a:8e:6d:5d:72:8a:8c:19:76: f9:4a:dc:4f:b2:ef:98:95:10:ba:8b:4e:74:21:78: 72:1b:10:4f:87:2c:9e:1e:70:9f:56:45:92:91:0e: c5:84:c7:fa:32:1c:bb:4b:c6:d9:80:4f:72:a4:55: bb:b7:39:45:07:27:80:fa:26:5e:07:71:ad:99:87: 38:46:d8:be:69:62:66:3d:91:cf:87:ef:0c:77:9a: 27:73:87:18:42:2f:a8:0a:a9:c9:5b:c8:de:17:c6: 26:66:dc:e0:93:84:94:d9:67:96:57:6b:2d:2c:49: c5:b3:0c:bc:f0:bf:15:0f:c2:40:75:17:b7:42:70: b7:fc:26:ab:06:d8:1a:76:6d:f7:ee:af:5b:a3:d2: 1f:fa:33:29:c1:77:03:b1:7f:cb:9f:3f:6f:86:55: ee:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:5C:CE:12:9E:92:B1:6B:61:E5:C6:A2:5B:28:E4:70:1D:62:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9c:17:33:8b:98:d2:a7:4c:74:1b:9a:b3:1d:3e:0a:52:25: 5d:b6:ac:f4:47:f8:15:23:d6:f3:17:d6:18:5c:c2:45:cc:8f: 5f:7d:c3:4d:89:85:35:a6:38:54:d3:33:9c:66:6c:e1:9b:af: 2e:ea:79:3b:37:48:18:3b:12:cd:96:21:36:d4:35:89:63:13: cf:b4:c3:b4:c8:36:0b:0b:85:e0:6f:2a:60:67:28:1e:f1:5b: 7d:6c:04:9c:98:a5:46:cf:ec:10:a6:82:5b:5b:f7:2b:1a:ae: eb:03:6c:dd:fa:d3:fe:b5:47:ec:e2:82:a5:03:b5:a0:ed:82: 41:cd:be:6d:b1:c0:87:02:2d:6b:48:95:ae:68:16:e9:b8:18: b5:20:1f:ec:b0:6d:07:fb:d5:7c:6c:3a:78:c3:8d:a3:75:26: 21:8f:88:a6:cd:a5:1d:d9:55:63:c4:36:32:63:1e:9e:2c:33: 67:98:28:1f:69:9c:f6:62:6d:41:c7:9b:32:89:47:15:a5:90: 6c:be:01:36:7c:01:80:18:16:7b:cd:9a:5a:27:f0:67:00:fe: 0a:d1:fe:09:f0:9d:61:a3:bd:a0:67:b3:18:f7:d6:95:a6:62: cd:87:1e:02:76:c2:3f:bc:82:6c:49:ea:3e:ca:77:f4:2a:7b: a0:f4:c6:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2vEBfICuWKN9+bISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk MmY2Y2U2NzktYWE2Ny00MjYwLWJjMDAtZjU1YmFhN2Q1YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOhvrcgXxYK26P8Gah2H/dqF5FpW1SJJw5zO IltpzsEW/DhRH/ftK1w+hoCiawjwe0D7bRg3a8Zjt5H1uPi3h+PekMrDWSmt593P DbFk79DtLIqQoVG/GgxrraaWmyY6jm1dcoqMGXb5StxPsu+YlRC6i050IXhyGxBP hyyeHnCfVkWSkQ7FhMf6Mhy7S8bZgE9ypFW7tzlFByeA+iZeB3GtmYc4Rti+aWJm PZHPh+8Md5onc4cYQi+oCqnJW8jeF8YmZtzgk4SU2WeWV2stLEnFswy88L8VD8JA dRe3QnC3/CarBtgadm337q9bo9If+jMpwXcDsX/Lnz9vhlXuaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJRHXM4SnpKxa2HlxqJbKORwHWITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWnBczi5jSp0x0G5qzHT4KUiVdtqz0R/gVI9bzF9YYXMJFzI9ffcNN iYU1pjhU0zOcZmzhm68u6nk7N0gYOxLNliE21DWJYxPPtMO0yDYLC4XgbypgZyge 8Vt9bAScmKVGz+wQpoJbW/crGq7rA2zd+tP+tUfs4oKlA7Wg7YJBzb5tscCHAi1r SJWuaBbpuBi1IB/ssG0H+9V8bDp4w42jdSYhj4imzaUd2VVjxDYyYx6eLDNnmCgf aZz2Ym1Bx5syiUcVpZBsvgE2fAGAGBZ7zZpaJ/BnAP4K0f4J8J1ho72gZ7MY99aV pmLNhx4CdsI/vIJsSeo+ynf0Knug9Ma8 -----END CERTIFICATE-----Generated at Wed May 13 04:12:49 2026 by rpki-client