$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa File: 0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa (raw, json) Hash identifier: fi6cci6wQwtVae3brdae/vA7fiMX2FUbA2NrV7kilvM= Subject key identifier: 06:7A:84:5E:C4:6E:1A:B8:E2:80:29:E4:58:5A:20:AA:F1:C7:C9:26 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584DCF2AFE8290D6A85B3C2DB480 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 16839 IP address blocks: 2606:3600:157::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2a:fe:82:90:d6:a8:5b:3c:2d:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=1bc23bef-cfd5-44a1-8656-c42b58302b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:d4:d3:a3:3c:f0:81:77:57:e9:0a:52:f6: 78:26:fb:4e:da:11:eb:0e:39:87:dd:ad:0b:be:84: 09:d7:45:92:1b:e1:c1:4d:eb:17:0b:3e:8f:59:11: 06:3f:d6:cb:9d:af:f9:8f:ac:0a:68:6c:7e:ee:f5: 56:85:6c:4d:17:0c:1a:e2:54:fd:40:02:91:ed:43: ee:51:c3:4b:3a:8c:6c:58:f9:0f:a5:4b:8c:25:6c: 09:08:c2:59:38:c0:64:88:65:c2:b4:ca:35:e9:95: 05:c2:c2:e9:d1:f3:2e:a9:c6:9d:a7:bf:58:27:18: eb:d1:dc:7e:66:a1:6b:6c:35:cb:88:dd:4a:8a:fa: a0:3c:12:44:6c:1a:60:13:5c:b3:60:51:51:11:bb: 57:29:f7:50:19:ce:1f:f1:31:9b:fc:01:b7:2a:7b: 8b:49:c9:48:c5:5b:21:a0:7d:25:d8:3f:7b:87:4e: 0b:23:b3:b0:1b:cd:54:e2:e5:c1:90:04:cd:5f:70: 28:b6:57:83:fa:b3:b9:ce:f4:aa:7f:68:6c:b0:7a: 93:0a:0c:46:dc:f1:38:29:0d:0b:92:fc:ea:d5:9e: 0a:f8:cf:02:41:ae:3e:1b:7f:43:ae:a2:ee:db:05: 85:18:d4:43:d5:ba:dd:ce:0c:7d:4e:88:62:14:8b: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:84:5E:C4:6E:1A:B8:E2:80:29:E4:58:5A:20:AA:F1:C7:C9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/0fe0a0c6-1b7d-35f6-ae42-eab3535e0ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:157::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:65:13:43:21:75:a9:f8:a1:59:68:eb:39:3d:ae:33:71:16: 5b:88:76:05:5d:f1:2e:8c:7f:92:ca:8d:36:11:a7:79:26:2e: a3:69:f6:12:91:dd:0e:f9:33:87:68:15:ed:00:cb:fd:dc:5c: bb:d1:17:27:a7:d5:a3:6b:0c:14:c8:f1:86:50:3e:9a:d3:9c: c0:cd:aa:6b:b0:55:26:ac:f1:42:27:e4:22:2e:94:91:b7:b7: c1:28:d4:da:dc:9d:dc:2c:8b:01:60:48:51:c4:4c:65:ba:12: e2:c5:74:9c:aa:47:3a:37:14:2a:09:3c:89:bf:a0:99:ac:e7: f5:7a:6b:65:fc:29:13:85:99:a1:57:23:0d:6d:4f:e2:8d:af: e8:fc:0b:cd:8f:76:be:0d:97:e4:8e:02:cd:8b:af:57:f8:a6: b7:83:39:01:8e:c3:7a:d1:da:5e:dc:ac:e6:d9:27:89:44:82: fb:4a:f2:23:13:95:b2:7f:87:3b:cf:76:ff:64:e8:d4:03:de: ad:1d:13:38:37:d1:06:06:2e:f3:05:cf:05:ed:e0:5d:3c:ee: 97:c9:c5:4c:bf:71:4b:74:31:b9:63:c7:59:55:85:08:62:27: 6d:87:6a:bb:e2:0a:6e:bf:a2:57:91:e0:4b:19:27:19:17:0d: 7a:6d:f2:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3PKv6CkNaoWzwttIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk MWJjMjNiZWYtY2ZkNS00NGExLTg2NTYtYzQyYjU4MzAyYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQXU06M88IF3V+kKUvZ4JvtO2hHrDjmH3a0L voQJ10WSG+HBTesXCz6PWREGP9bLna/5j6wKaGx+7vVWhWxNFwwa4lT9QAKR7UPu UcNLOoxsWPkPpUuMJWwJCMJZOMBkiGXCtMo16ZUFwsLp0fMuqcadp79YJxjr0dx+ ZqFrbDXLiN1KivqgPBJEbBpgE1yzYFFREbtXKfdQGc4f8TGb/AG3KnuLSclIxVsh oH0l2D97h04LI7OwG81U4uXBkATNX3AotleD+rO5zvSqf2hssHqTCgxG3PE4KQ0L kvzq1Z4K+M8CQa4+G39DrqLu2wWFGNRD1brdzgx9TohiFItnDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZ6hF7Ebhq44oAp5FhaIKrxx8kmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMGZlMGEwYzYtMWI3ZC0z NWY2LWFlNDItZWFiMzUzNWUwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1lE0Mhdan4oVlo6zk9rjNxFluIdgVd8S6Mf5LKjTYRp3kmLqNp 9hKR3Q75M4doFe0Ay/3cXLvRFyen1aNrDBTI8YZQPprTnMDNqmuwVSas8UIn5CIu lJG3t8Eo1NrcndwsiwFgSFHETGW6EuLFdJyqRzo3FCoJPIm/oJms5/V6a2X8KROF maFXIw1tT+KNr+j8C82Pdr4Nl+SOAs2Lr1f4preDOQGOw3rR2l7crObZJ4lEgvtK 8iMTlbJ/hzvPdv9k6NQD3q0dEzg30QYGLvMFzwXt4F087pfJxUy/cUt0Mbljx1lV hQhiJ22HarviCm6/oleR4EsZJxkXDXpt8ig= -----END CERTIFICATE-----Generated at Wed May 13 11:57:48 2026 by rpki-client