$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa File: 5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json) Hash identifier: Nz9OIGwFpxsLZ7WClgfJe5TkZxGov01drAPJJBkdFCs= Subject key identifier: 1F:87:77:39:43:C4:E7:F2:6A:E3:25:84:D3:84:B2:7E:2A:76:F7:1B Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584D95EFEC3E08649E22B85F6680 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 33208 IP address blocks: 2607:9a80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ec:3e:08:64:9e:22:b8:5f:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=9c4da8cd-43b7-4c1e-90cc-e8b9f86e7a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:ac:e2:70:fa:85:db:e7:6f:c2:90:f8:78: 05:4b:4a:7d:8a:5a:55:57:19:d6:3f:cf:45:6b:95: da:6e:1e:78:f7:95:b7:2d:37:11:45:81:01:c9:93: e6:cf:25:6e:85:c4:4f:00:10:8e:f0:72:5b:c4:5a: 99:70:5a:91:43:8d:30:7d:f1:a6:2e:ba:a9:d4:7e: 0a:7b:62:c2:55:b3:30:44:53:9c:b4:39:25:1f:0b: a5:84:59:d6:59:f5:92:cb:89:b3:de:af:4e:c7:59: 6f:04:87:62:49:21:32:aa:eb:29:f9:33:60:61:15: db:8e:26:78:d2:a2:b8:28:ec:01:7d:34:ce:57:aa: 80:5b:32:ca:ab:4f:41:f2:19:9b:c3:05:39:4b:78: ff:ab:3b:e8:02:4b:9b:37:ba:12:46:89:59:84:d6: 2d:21:41:c1:f3:e8:24:e7:ad:3f:dd:54:f3:09:20: 27:9e:c8:f2:ac:a7:76:b7:a0:f0:78:42:d8:5c:23: c4:eb:fd:c7:53:34:fe:f0:03:db:cc:b5:95:60:f2: 71:52:5c:5b:bf:a3:e3:e4:22:60:c9:0f:ea:ec:c9: c6:8a:d8:01:75:d3:bc:c8:f4:42:8e:e9:15:a9:c4: 07:ba:6d:46:66:86:65:58:13:d1:d8:24:89:c9:c2: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:77:39:43:C4:E7:F2:6A:E3:25:84:D3:84:B2:7E:2A:76:F7:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv6: 2607:9a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b2:7d:64:3a:55:ce:b1:7b:70:39:21:88:c5:0b:bf:d7:52: 7c:08:82:dc:99:52:29:5c:98:09:05:36:fc:aa:e6:0a:9f:72: 66:02:e8:81:d1:ea:49:38:8d:92:0a:de:a9:05:53:de:7b:63: 4e:b8:e0:51:66:5a:27:4a:95:52:a3:65:54:05:48:7f:35:cc: 3b:6f:71:2a:4d:e1:90:88:d0:b5:8e:cb:bd:41:52:6b:51:de: 6c:14:a8:77:60:5c:39:0c:8c:4d:8a:29:fb:f3:61:b1:5d:25: 51:55:57:54:72:a6:a3:fe:cd:79:11:54:37:71:c2:ff:e1:a0: 41:a0:7b:af:7c:ea:40:a9:bb:9c:2e:dd:ad:98:eb:9b:c6:72: ba:22:c5:aa:56:1e:e8:ab:25:4f:d4:a5:df:d6:e1:d3:ed:8f: d3:4b:29:0e:10:f4:fb:6c:34:40:86:c5:06:82:9a:5e:e3:e6: aa:1a:94:cb:22:e8:0b:c9:8c:2b:be:af:1a:f0:9e:84:48:8a: 05:16:58:99:f4:fa:94:1b:a8:96:52:a6:ea:5e:55:cc:64:e5: 99:59:e2:ab:e3:7c:be:f9:be:4d:bf:7c:1c:c1:ba:0f:a3:73: 49:81:90:dd:75:6c:1a:9a:bc:62:92:58:96:69:30:7a:81:76: 78:23:8f:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2V7+w+CGSeIrhfZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OWM0ZGE4Y2QtNDNiNy00YzFlLTkwY2MtZThiOWY4NmU3YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Ks4nD6hdvnb8KQ+HgFS0p9ilpVVxnWP89F a5Xabh5495W3LTcRRYEByZPmzyVuhcRPABCO8HJbxFqZcFqRQ40wffGmLrqp1H4K e2LCVbMwRFOctDklHwulhFnWWfWSy4mz3q9Ox1lvBIdiSSEyqusp+TNgYRXbjiZ4 0qK4KOwBfTTOV6qAWzLKq09B8hmbwwU5S3j/qzvoAkubN7oSRolZhNYtIUHB8+gk 560/3VTzCSAnnsjyrKd2t6DweELYXCPE6/3HUzT+8APbzLWVYPJxUlxbv6Pj5CJg yQ/q7MnGitgBddO8yPRCjukVqcQHum1GZoZlWBPR2CSJycLmQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB+HdzlDxOfyauMlhNOEsn4qdvcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNTU3OWMwMGYtYzM4Ny0z YzVjLThiMGEtZTNmOWI1OWVjMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeagDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARsn1kOlXOsXtwOSGIxQu/11J8CILcmVIpXJgJBTb8quYKn3JmAuiB 0epJOI2SCt6pBVPee2NOuOBRZlonSpVSo2VUBUh/Ncw7b3EqTeGQiNC1jsu9QVJr Ud5sFKh3YFw5DIxNiin782GxXSVRVVdUcqaj/s15EVQ3ccL/4aBBoHuvfOpAqbuc Lt2tmOubxnK6IsWqVh7oqyVP1KXf1uHT7Y/TSykOEPT7bDRAhsUGgppe4+aqGpTL IugLyYwrvq8a8J6ESIoFFliZ9PqUG6iWUqbqXlXMZOWZWeKr43y++b5Nv3wcwboP o3NJgZDddWwamrxikliWaTB6gXZ4I49k -----END CERTIFICATE-----Generated at Wed May 13 11:30:55 2026 by rpki-client