$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa File: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (raw, json) Hash identifier: 9PjCxDRs+ctFI7+zXgd0t6i7EwfKS5xMVbv4D+7dcwQ= Subject key identifier: 99:7B:C7:C5:3F:55:8C:B0:FC:E9:F1:37:9A:9A:57:2D:7E:12:A8:E6 Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584D9E501D2FBF358BCF61494940 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 399825 IP address blocks: 2602:80a:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1d:2f:bf:35:8b:cf:61:49:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=3fd10d35-ec9e-4108-bafb-f2313128e6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:a6:0f:14:3d:9b:27:34:27:2d:2d:4f:10: 99:25:87:c8:7d:97:9c:75:3e:35:29:2c:b4:e1:b6: 80:67:50:bb:57:a1:b4:72:8b:8e:5d:9c:af:62:29: a6:76:3e:a4:d2:aa:f5:6c:81:d2:44:21:99:35:24: 14:f5:f9:d8:03:37:45:b5:7f:ec:73:b0:e2:54:3c: 44:68:bd:09:72:73:cb:1f:7a:3d:32:f5:50:d7:59: e4:57:07:23:30:f5:55:f1:3a:3b:eb:df:9e:e7:9a: 7d:de:1a:c2:5b:74:45:6c:89:82:6f:d8:2b:26:39: 1c:17:d4:41:89:01:5c:42:be:31:5d:a2:44:32:54: db:e2:8c:5d:4f:58:59:f8:b7:a2:f0:5f:6a:8a:33: a8:a6:6d:c8:4d:cc:0d:fd:ba:d8:e2:84:2d:1e:f3: 9c:6a:a6:f9:f9:2e:3c:03:69:13:cb:c2:bb:6f:f7: 9b:fc:22:08:31:8e:82:58:61:c1:dc:36:5e:73:71: f1:2b:14:5f:c5:e2:be:d7:3e:5d:b0:66:5a:04:0a: ae:5f:c7:1e:b3:fc:d8:99:2d:1f:3a:7b:ec:33:69: 42:de:5a:a5:39:fc:ac:34:a0:fb:e6:30:5b:af:9e: 7a:97:ab:97:f1:22:f5:44:1e:c5:2c:44:d5:f0:bb: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7B:C7:C5:3F:55:8C:B0:FC:E9:F1:37:9A:9A:57:2D:7E:12:A8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv6: 2602:80a:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:14:0c:8c:8c:5d:dc:a3:06:e0:d0:2d:c2:6b:02:91:5f:d0: e9:21:26:f4:c6:1c:23:40:ba:d2:1c:77:f9:76:f2:4c:e5:d8: 4d:84:29:f3:c2:6e:ec:ed:d9:f8:d1:92:8b:f3:b3:2b:d4:1d: 33:3e:f4:ef:05:7e:d9:46:96:1d:89:3a:5f:f6:de:28:a2:a6: dc:76:77:8d:d0:a8:54:8e:5c:80:a9:cc:f9:21:f1:a4:a9:d6: a3:5d:81:c5:b5:67:68:7c:30:8f:8f:87:c5:ba:16:02:58:f9: 32:99:df:d9:20:14:09:c8:72:6a:52:90:8e:cc:f6:7a:2c:ad: e9:8e:37:60:8e:f0:46:ec:1b:63:04:72:55:ae:27:b8:79:48: 36:7e:6b:27:1b:ec:37:90:1e:a5:92:38:29:d5:cb:26:f5:f5: d4:c1:f5:8e:b3:35:59:7f:04:95:4c:04:66:7c:7c:32:3c:e8: 49:77:1c:40:ef:c1:a2:95:f9:c6:00:e8:a0:b1:c2:23:14:9e: 4c:ac:61:82:b5:e8:34:53:fa:ff:a1:e7:c6:d5:b3:e5:57:10: 75:79:18:03:c7:38:30:66:31:d7:a3:d5:1c:ec:12:6a:dd:ef: 9d:3d:e9:04:37:06:15:27:29:70:65:6c:77:28:79:da:f9:19: 26:a9:a6:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUB0vvzWLz2FJSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk M2ZkMTBkMzUtZWM5ZS00MTA4LWJhZmItZjIzMTMxMjhlNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJamDxQ9myc0Jy0tTxCZJYfIfZecdT41KSy0 4baAZ1C7V6G0couOXZyvYimmdj6k0qr1bIHSRCGZNSQU9fnYAzdFtX/sc7DiVDxE aL0JcnPLH3o9MvVQ11nkVwcjMPVV8To769+e55p93hrCW3RFbImCb9grJjkcF9RB iQFcQr4xXaJEMlTb4oxdT1hZ+Lei8F9qijOopm3ITcwN/brY4oQtHvOcaqb5+S48 A2kTy8K7b/eb/CIIMY6CWGHB3DZec3HxKxRfxeK+1z5dsGZaBAquX8ces/zYmS0f OnvsM2lC3lqlOfysNKD75jBbr556l6uX8SL1RB7FLETV8LuP9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJl7x8U/VYyw/OnxN5qaVy1+EqjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvZDY3YTViNjEtMDhmZi0z ZDkwLWFmMGMtNDM1ZWQ4YTBhY2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUUDIyMXdyjBuDQLcJrApFf0OkhJvTGHCNAutIcd/l28kzl2E2E KfPCbuzt2fjRkovzsyvUHTM+9O8FftlGlh2JOl/23iiiptx2d43QqFSOXICpzPkh 8aSp1qNdgcW1Z2h8MI+Ph8W6FgJY+TKZ39kgFAnIcmpSkI7M9nosremON2CO8Ebs G2MEclWuJ7h5SDZ+aycb7DeQHqWSOCnVyyb19dTB9Y6zNVl/BJVMBGZ8fDI86El3 HEDvwaKV+cYA6KCxwiMUnkysYYK16DRT+v+h58bVs+VXEHV5GAPHODBmMdej1Rzs Emrd75096QQ3BhUnKXBlbHcoedr5GSappr8= -----END CERTIFICATE-----Generated at Wed May 13 12:05:08 2026 by rpki-client