$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa File: 88e83136-5413-348d-8079-fc1adfac452e.roa (raw, json) Hash identifier: ROf8RK5TRW/iAbC90XUkiSg1GNiJ4aMTl0MEC8K6dtQ= Subject key identifier: 4C:21:B8:6E:E2:D4:46:31:1F:07:30:01:47:D2:B4:BF:00:30:9D:C2 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584DB4A57C6D41EBE0DE051A9E80 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 396416 IP address blocks: 2602:fb78:80::/41 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7c:6d:41:eb:e0:de:05:1a:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=58b84e2d-dd40-44c5-9878-defa63c4322b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:16:24:1b:ae:41:7a:14:81:54:e3:c0:58: 1e:80:c7:49:59:a8:a4:2c:d6:d7:ca:40:91:47:28: ea:f1:19:2b:79:0b:8a:86:2f:62:35:b4:7d:1b:37: 38:93:8e:4a:10:28:11:ea:64:ac:99:4a:47:60:87: eb:24:92:10:98:21:35:d8:ba:0a:65:ed:96:df:cc: e6:78:13:0a:2f:5a:33:81:13:31:72:3c:4d:2d:1c: 95:9a:79:fc:03:c1:3b:7b:f2:e9:79:2b:bf:05:19: 43:21:4f:d4:b5:a2:17:f5:76:f4:75:52:91:6c:eb: 60:42:01:f5:a7:3d:db:5b:52:f6:47:35:bb:f0:65: 71:1d:84:b1:c9:9f:de:a4:d1:a5:52:f0:97:31:07: f0:cb:ba:91:2a:f3:5a:d2:16:d2:df:ee:67:70:14: 60:8b:e6:79:ff:1f:04:d4:04:87:9f:fd:da:55:18: 4c:fd:8d:98:71:75:fd:b7:72:35:fc:6c:a0:7b:af: db:fd:a8:ae:92:a2:e0:19:40:ee:d7:9f:df:f8:7a: 0e:70:80:ad:01:54:9f:4a:40:29:1e:6e:4e:92:e8: b0:d6:3f:35:a8:85:18:bd:d3:71:e5:bb:da:0d:89: f5:c9:bf:5f:d4:1e:28:98:6f:25:62:b9:9e:4a:e4: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:B8:6E:E2:D4:46:31:1F:07:30:01:47:D2:B4:BF:00:30:9D:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/88e83136-5413-348d-8079-fc1adfac452e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:80::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bd:75:63:0e:5b:ce:61:1a:41:58:96:1b:10:27:6d:cf:a1: e0:e5:09:44:93:78:34:09:1c:1d:13:9e:37:dc:8f:45:98:b6: 05:e8:ac:09:cf:c1:7c:70:73:47:2c:92:35:cb:6a:97:a5:08: cb:ea:c2:10:d2:d9:16:e8:6c:6a:41:5d:3a:97:6f:44:d5:28: 17:91:c9:a3:04:b5:cb:76:1f:10:13:2e:76:92:cc:c1:20:76: fe:d1:76:75:21:ed:6b:97:ec:bd:92:c6:36:1a:9d:2c:d4:70: 57:62:39:73:24:9b:02:f4:71:c4:57:f9:38:02:d8:c6:0b:db: 37:ca:12:b0:23:af:de:1d:02:9c:05:60:b9:26:f3:e9:c4:f4: d5:84:45:18:50:a5:4f:59:d0:dc:79:fe:d8:e2:0e:c1:84:c6: 33:a2:18:5b:ba:26:bc:9b:7f:f8:08:00:dc:fc:77:e3:08:87: 90:6c:62:e8:17:65:0c:d3:db:d8:02:c3:82:fa:d2:58:fd:1f: c1:19:34:dc:41:ff:29:2b:6c:09:84:18:28:d1:7b:6e:d2:a7: 86:7e:af:58:80:08:1c:93:39:22:b8:cc:d1:6e:c7:94:76:8f: a7:67:10:a4:f5:7e:f6:74:05:7f:09:1e:66:a1:f4:bb:98:e5: 19:33:e6:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE20pXxtQevg3gUanoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NThiODRlMmQtZGQ0MC00NGM1LTk4NzgtZGVmYTYzYzQzMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iEWJBuuQXoUgVTjwFgegMdJWaikLNbXykCR Ryjq8RkreQuKhi9iNbR9Gzc4k45KECgR6mSsmUpHYIfrJJIQmCE12LoKZe2W38zm eBMKL1ozgRMxcjxNLRyVmnn8A8E7e/LpeSu/BRlDIU/UtaIX9Xb0dVKRbOtgQgH1 pz3bW1L2RzW78GVxHYSxyZ/epNGlUvCXMQfwy7qRKvNa0hbS3+5ncBRgi+Z5/x8E 1ASHn/3aVRhM/Y2YcXX9t3I1/Gyge6/b/aiukqLgGUDu15/f+HoOcICtAVSfSkAp Hm5Okuiw1j81qIUYvdNx5bvaDYn1yb9f1B4omG8lYrmeSuQvswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEwhuG7i1EYxHwcwAUfStL8AMJ3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvODhlODMxMzYtNTQxMy0z NDhkLTgwNzktZmMxYWRmYWM0NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgL7eACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHm9dWMOW85hGkFYlhsQJ23PoeDlCUSTeDQJHB0Tnjfcj0WYtgXo rAnPwXxwc0cskjXLapelCMvqwhDS2RbobGpBXTqXb0TVKBeRyaMEtct2HxATLnaS zMEgdv7RdnUh7WuX7L2SxjYanSzUcFdiOXMkmwL0ccRX+TgC2MYL2zfKErAjr94d ApwFYLkm8+nE9NWERRhQpU9Z0Nx5/tjiDsGExjOiGFu6Jrybf/gIANz8d+MIh5Bs YugXZQzT29gCw4L60lj9H8EZNNxB/ykrbAmEGCjRe27Sp4Z+r1iACByTOSK4zNFu x5R2j6dnEKT1fvZ0BX8JHmah9LuY5Rkz5gU= -----END CERTIFICATE-----Generated at Tue May 12 21:30:14 2026 by rpki-client