$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa File: ea1a9030-9438-32dc-88a6-09fec6a92edf.roa (raw, json) Hash identifier: s65sI1PuLJr8iUlV0rccAfpvmvq1lAs0X7fN9JDYJPg= Subject key identifier: BC:88:3C:97:06:C3:89:1E:F6:C7:A5:19:55:42:CA:9B:EB:F5:C9:BC Certificate issuer: /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Certificate serial: 010D0C9F4328584D91C0109AE999B9E766008E80 Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 399519 IP address blocks: 2606:3bc0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:10:9a:e9:99:b9:e7:66:00:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=56c83974-3851-4944-bf16-2a8457fcc0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:2e:a2:bd:3b:37:81:23:34:ef:fc:a1:03: 4f:95:22:15:d0:18:f5:7e:02:20:52:8f:b4:8d:44: bd:43:d8:cf:38:23:f5:3f:51:b8:23:4f:14:cf:af: 20:34:b5:96:6a:29:e2:0c:92:d8:e7:c5:19:b8:36: 9a:e5:8f:0b:67:34:98:5f:26:c2:6b:99:a9:8b:27: 50:c4:e0:50:de:63:f7:d6:f5:50:10:6c:c4:a8:1c: bc:b8:84:91:3c:ac:77:26:72:22:d9:c4:de:06:b5: 05:c3:fd:ca:05:bb:6b:06:f2:bd:98:72:08:f7:0c: af:16:18:7c:38:a4:ef:cb:8b:eb:79:5d:1f:e0:c1: e5:82:8c:91:35:86:5c:78:c6:e5:97:19:09:cf:36: 25:82:89:a1:fb:c6:d9:88:9e:62:b1:a9:a2:9f:0b: 35:72:b1:e6:76:de:5c:b1:fa:49:52:5a:f8:60:f2: 9a:8e:50:6c:9f:5b:58:c8:dc:42:3c:27:26:6d:97: a4:78:8c:25:1a:05:1a:96:3f:2e:59:cb:63:cd:13: 3b:8a:ea:fd:8f:ee:79:1f:70:dc:3f:7d:44:c4:f6: 30:5d:f9:d1:48:a3:8f:cb:62:97:8a:3e:c5:ba:c2: 72:09:c1:68:c5:bd:0b:20:c5:e8:67:7f:d3:c1:5d: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:88:3C:97:06:C3:89:1E:F6:C7:A5:19:55:42:CA:9B:EB:F5:C9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/ea1a9030-9438-32dc-88a6-09fec6a92edf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl X509v3 Authority Key Identifier: keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer sbgp-ipAddrBlock: critical IPv6: 2606:3bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:12:81:69:ca:bc:88:87:be:eb:d1:7a:81:95:c0:49:46:bf: 91:e7:30:27:1a:db:d6:6b:dd:27:a6:75:b4:4e:7a:bc:a9:17: c2:7d:26:e4:2c:cd:7a:fc:80:6f:db:7e:93:3d:f7:fc:95:3f: c3:87:22:2e:3c:44:00:07:56:86:b7:d0:31:79:fe:36:0b:d8: c6:a3:d5:ca:0c:38:d5:49:6f:a4:f8:90:05:c0:dd:62:e8:66: 11:2c:27:dd:32:c2:ca:77:49:97:38:06:de:51:62:87:9c:fe: 64:70:ed:6b:33:7a:29:a8:8e:b0:6e:2e:12:1b:eb:75:0b:32: 6b:ca:41:c7:6f:9d:b3:4d:6c:83:68:e8:5f:bb:f0:f3:05:b6: 1b:86:96:2a:80:c5:7b:38:69:64:f0:cb:fa:87:05:df:c9:02: 7e:a5:f7:a1:46:a7:63:e5:9d:9d:3e:fc:e3:15:51:ae:ac:ae: 2b:ae:ec:be:e4:df:55:cc:40:89:7e:3c:dd:b1:92:48:a0:52: 17:94:25:bf:cc:91:f8:f3:00:6f:93:05:dd:a6:95:46:c0:51: 7d:95:b2:72:16:91:28:f5:aa:4b:2e:77:9a:6b:46:bc:4b:b4: 25:64:bf:c3:08:39:e0:e0:ef:55:3b:38:ff:1b:32:3b:b4:00: fc:57:0a:a0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwBCa6Zm552YAjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNlNmM1ZjMtMDIyYS00ODYxLTg0MWEtMThiMGVkNmZh YWZiMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NTZjODM5NzQtMzg1MS00OTQ0LWJmMTYtMmE4NDU3ZmNjMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8uor07N4EjNO/8oQNPlSIV0Bj1fgIgUo+0 jUS9Q9jPOCP1P1G4I08Uz68gNLWWainiDJLY58UZuDaa5Y8LZzSYXybCa5mpiydQ xOBQ3mP31vVQEGzEqBy8uISRPKx3JnIi2cTeBrUFw/3KBbtrBvK9mHII9wyvFhh8 OKTvy4vreV0f4MHlgoyRNYZceMbllxkJzzYlgomh+8bZiJ5isaminws1crHmdt5c sfpJUlr4YPKajlBsn1tYyNxCPCcmbZekeIwlGgUalj8uWctjzRM7iur9j+55H3Dc P31ExPYwXfnRSKOPy2KXij7FusJyCcFoxb0LIMXoZ3/TwV2n7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLyIPJcGw4ke9selGVVCypvr9cm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2 YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIwZWQ2ZmFhZmIvZWExYTkwMzAtOTQzOC0z MmRjLTg4YTYtMDlmZWM2YTkyZWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNlNmM1ZjMtMDIyYS00ODYxLTg0 MWEtMThiMGVkNmZhYWZiLzAzZTZjNWYzLTAyMmEtNDg2MS04NDFhLTE4YjBlZDZm YWFmYi5jcmwwHwYDVR0jBBgwFoAUJIu7eOaLtm+VvLmMShi63y+2aU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIw ZWQ2ZmFhZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY7wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC4EoFpyryIh77r0XqBlcBJRr+R5zAnGtvWa90npnW0Tnq8qRfCfSbk LM16/IBv236TPff8lT/DhyIuPEQAB1aGt9Axef42C9jGo9XKDDjVSW+k+JAFwN1i 6GYRLCfdMsLKd0mXOAbeUWKHnP5kcO1rM3opqI6wbi4SG+t1CzJrykHHb52zTWyD aOhfu/DzBbYbhpYqgMV7OGlk8Mv6hwXfyQJ+pfehRqdj5Z2dPvzjFVGurK4rruy+ 5N9VzECJfjzdsZJIoFIXlCW/zJH48wBvkwXdppVGwFF9lbJyFpEo9apLLneaa0a8 S7QlZL/DCDng4O9VOzj/GzI7tAD8Vwqg -----END CERTIFICATE-----Generated at Wed May 13 12:11:08 2026 by rpki-client