$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa File: 57b2b121-c49d-3287-acea-daa76e44396a.roa (raw, json) Hash identifier: DtHo70AB0n+uSGi3zvGVGmHNZeDizVl0p8fZGom4it8= Subject key identifier: B5:0E:20:D9:CE:92:A8:C7:84:83:CA:07:4C:CF:26:D5:E8:39:9E:9E Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584D9FB569D9025E2D1D29E12C40 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 88 IP address blocks: 2620:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:69:d9:02:5e:2d:1d:29:e1:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=a61a77b1-0ef5-4975-ae11-38dca82d6976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:11:39:52:65:83:ae:a1:08:f7:8e:83:ae:1c: 72:30:24:65:8b:b4:3d:b5:16:13:b2:35:eb:79:c3: 3b:0c:0d:08:45:46:8d:29:10:d3:6e:16:df:bb:47: b4:42:f8:b8:f5:03:79:2a:39:e0:e2:4f:22:5f:e7: 1c:1c:f5:f5:c7:94:ff:91:58:f0:b4:ba:6b:b9:36: f4:2c:f4:7f:82:ae:d7:04:d3:b8:a6:98:90:0c:f6: 64:38:b2:75:03:99:b9:cd:f1:5a:28:b0:01:b0:9c: 88:c3:f8:56:01:96:13:d9:46:d8:2b:d3:20:93:99: 9c:cd:64:af:42:d9:80:e7:d7:9c:2b:7f:b6:90:de: 29:79:9a:4b:f2:56:a1:f7:48:d6:5c:47:1c:5d:17: 1a:19:8f:79:49:18:28:88:8f:98:8a:a5:15:9f:c9: 44:9f:19:8f:d3:68:6c:91:c0:f2:45:81:44:31:56: b3:d2:da:dc:8b:67:3f:ba:10:45:52:0b:ba:b5:9f: bc:be:16:5e:c6:c0:d1:48:45:d3:06:90:41:fb:0e: e6:25:69:4c:c8:f5:e0:ee:76:d3:8c:40:a7:5a:3a: a0:c7:7e:41:8e:c2:cd:ab:85:0c:07:9c:32:4a:bb: 9b:33:70:86:82:d8:6d:a3:9f:5a:df:1e:de:a3:aa: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0E:20:D9:CE:92:A8:C7:84:83:CA:07:4C:CF:26:D5:E8:39:9E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/57b2b121-c49d-3287-acea-daa76e44396a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2620:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d3:ca:a9:38:83:aa:b5:2c:78:e6:b6:27:cb:6e:96:22:60: d5:bd:6a:30:71:52:aa:d5:80:87:c1:fb:a6:f3:5e:18:00:a7: 9c:55:b2:d1:82:c1:bf:a1:cf:d2:8d:e7:7c:3c:f3:d6:87:59: 9f:9e:78:c0:0b:f2:07:9c:2f:16:a7:03:f4:b9:1c:ba:41:71: f2:d7:88:fd:b3:fb:c9:de:c0:f2:bc:b7:83:6f:4b:fb:44:fc: 59:81:fb:2c:07:c3:8b:f1:d9:16:f6:58:57:d1:28:98:5f:23: 1b:cd:b0:80:9a:45:f2:b7:3c:b3:e3:c4:cd:d9:ae:64:56:54: f7:02:20:7a:c1:86:9e:d4:df:bf:42:8e:57:8d:35:7f:17:d3: 52:93:e6:d5:43:2e:3d:af:05:d7:de:3f:93:82:e3:a9:a1:ec: 08:e3:4e:1c:a2:7c:bd:d1:ca:3c:e0:76:46:95:44:cc:d2:f8: e8:62:ca:b5:c7:7a:0b:ed:b6:9c:65:47:c2:62:73:36:a9:26: 51:a7:4c:43:19:0e:a5:83:82:67:1b:5f:00:7e:30:ba:6f:e4: 25:fd:cc:e0:67:f7:9d:df:3f:82:ba:ed:1f:16:f6:ce:c7:fd: 80:12:a8:b9:3e:31:3e:0e:95:6f:20:59:46:77:57:82:89:90: 25:8b:aa:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2ftWnZAl4tHSnhLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YTYxYTc3YjEtMGVmNS00OTc1LWFlMTEtMzhkY2E4MmQ2OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxE5UmWDrqEI946DrhxyMCRli7Q9tRYTsjXr ecM7DA0IRUaNKRDTbhbfu0e0Qvi49QN5Kjng4k8iX+ccHPX1x5T/kVjwtLpruTb0 LPR/gq7XBNO4ppiQDPZkOLJ1A5m5zfFaKLABsJyIw/hWAZYT2UbYK9Mgk5mczWSv QtmA59ecK3+2kN4peZpL8lah90jWXEccXRcaGY95SRgoiI+YiqUVn8lEnxmP02hs kcDyRYFEMVaz0trci2c/uhBFUgu6tZ+8vhZexsDRSEXTBpBB+w7mJWlMyPXg7nbT jECnWjqgx35BjsLNq4UMB5wySrubM3CGgthto59a3x7eo6qjawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUOINnOkqjHhIPKB0zPJtXoOZ6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvNTdiMmIxMjEtYzQ5ZC0z Mjg3LWFjZWEtZGFhNzZlNDQzOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAxAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3Tyqk4g6q1LHjmtifLbpYiYNW9ajBxUqrVgIfB+6bzXhgAp5xV stGCwb+hz9KN53w889aHWZ+eeMAL8gecLxanA/S5HLpBcfLXiP2z+8newPK8t4Nv S/tE/FmB+ywHw4vx2Rb2WFfRKJhfIxvNsICaRfK3PLPjxM3ZrmRWVPcCIHrBhp7U 379CjleNNX8X01KT5tVDLj2vBdfeP5OC46mh7AjjThyifL3RyjzgdkaVRMzS+Ohi yrXHegvttpxlR8JiczapJlGnTEMZDqWDgmcbXwB+MLpv5CX9zOBn953fP4K67R8W 9s7H/YASqLk+MT4OlW8gWUZ3V4KJkCWLqlA= -----END CERTIFICATE-----Generated at Wed May 13 09:22:13 2026 by rpki-client