$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa File: f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa (raw, json) Hash identifier: qmtMHHCpJApLRa7KdbaM0Gsfia9msnk1ozzcc/h3hrs= Subject key identifier: AB:71:57:91:66:DC:91:79:4C:AB:E8:49:5E:AB:57:D0:02:75:66:A4 Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584DA81591A67FD0F6988366F440 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 16524 IP address blocks: 2604:85c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:91:a6:7f:d0:f6:98:83:66:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=8c52130d-9f28-4b88-8515-f6e5585c1428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:8e:7f:b9:fa:57:c8:15:eb:f5:cc:6a:28: c7:94:5e:a9:2b:5c:d3:c8:fc:73:5c:28:46:b7:ad: 60:35:a5:62:63:f9:12:ed:cf:89:63:61:3d:d5:97: 38:38:9e:b5:ff:59:96:57:32:dd:c9:fe:b1:c7:a8: 83:f3:4b:ef:2a:41:16:29:70:1b:d0:a1:da:87:9b: 04:75:b6:c9:97:8c:bf:6e:a3:ee:ea:4e:84:f2:e0: 41:3a:6c:a1:3f:66:05:cf:5b:f0:63:f0:12:42:ca: ef:ab:e9:67:cf:1a:8f:c1:3c:6e:57:a4:09:0d:2e: b7:34:94:98:42:87:8a:c3:97:b5:30:b2:01:a0:24: 6c:00:e3:a7:19:b2:48:a7:2e:64:57:76:77:39:2b: ff:ef:ec:24:45:30:0e:c9:21:44:3c:96:12:aa:d3: 0e:37:a9:0e:64:d1:8e:c4:eb:e4:60:31:e9:21:0f: e5:49:9c:39:49:5e:90:e5:e7:a7:7b:3c:33:5d:a5: f8:3f:d6:b9:21:59:e2:a1:f0:cc:a9:7a:78:ed:5b: b1:97:41:cc:39:d1:86:a2:cf:8d:1e:3a:82:0d:8b: 62:70:41:e2:cd:12:39:bf:a4:f4:c0:5d:25:3d:4c: 29:cd:9a:18:a3:da:5c:31:25:03:9e:4c:9d:31:f5: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:71:57:91:66:DC:91:79:4C:AB:E8:49:5E:AB:57:D0:02:75:66:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:85c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9d:83:41:6a:c1:a1:bb:3b:b5:23:17:98:4b:ab:cc:02:44: 67:b1:cd:20:74:94:50:db:3e:fd:fb:33:8e:dd:76:81:e7:65: 23:b7:a8:25:78:73:d0:da:8e:68:10:e9:24:92:2d:e1:b1:52: 96:fc:5c:df:4e:91:da:d0:8e:09:80:2a:b5:4e:0f:21:18:06: a0:42:01:85:d4:b0:e9:25:89:97:eb:63:f2:88:23:aa:b4:c6: d4:71:49:64:fd:35:0d:f5:c0:54:c5:f8:65:19:52:92:60:c2: f7:b4:e2:1e:c3:ef:30:f5:f9:52:ed:06:54:bd:41:a5:de:2f: 0a:f7:2b:dc:bb:64:11:2f:0d:c9:5c:ad:d4:3e:2b:00:a5:3b: 93:2c:3f:ca:1c:00:c7:d4:54:8f:93:f7:70:a9:51:39:62:ad: 41:7a:07:cb:f1:b4:fc:bb:3c:f2:4f:1b:27:a3:32:55:40:10: 60:0f:6b:22:ac:16:9d:5f:6f:78:2c:b8:01:5b:04:fe:79:5a: d4:1d:8a:55:e0:36:58:ae:24:c3:b0:9a:e7:f8:15:31:f5:b5: ba:4a:c4:d1:a9:ac:8b:65:80:ec:c6:21:75:41:cc:7b:b2:ae: bb:64:12:f9:43:56:47:f3:eb:c6:9e:fb:ed:90:f9:23:b6:f7: ef:9e:fb:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2oFZGmf9D2mINm9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk OGM1MjEzMGQtOWYyOC00Yjg4LTg1MTUtZjZlNTU4NWMxNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpiOf7n6V8gV6/XMaijHlF6pK1zTyPxzXChG t61gNaViY/kS7c+JY2E91Zc4OJ61/1mWVzLdyf6xx6iD80vvKkEWKXAb0KHah5sE dbbJl4y/bqPu6k6E8uBBOmyhP2YFz1vwY/ASQsrvq+lnzxqPwTxuV6QJDS63NJSY QoeKw5e1MLIBoCRsAOOnGbJIpy5kV3Z3OSv/7+wkRTAOySFEPJYSqtMON6kOZNGO xOvkYDHpIQ/lSZw5SV6Q5eenezwzXaX4P9a5IVniofDMqXp47Vuxl0HMOdGGos+N HjqCDYticEHizRI5v6T0wF0lPUwpzZoYo9pcMSUDnkydMfURyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKtxV5Fm3JF5TKvoSV6rV9ACdWakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZjRmMzRiMWYtMmJmNy0z NzY5LTkzODktYjg4ZThkOGM2ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSFwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAUnYNBasGhuzu1IxeYS6vMAkRnsc0gdJRQ2z79+zOO3XaB52Ujt6gl eHPQ2o5oEOkkki3hsVKW/FzfTpHa0I4JgCq1Tg8hGAagQgGF1LDpJYmX62PyiCOq tMbUcUlk/TUN9cBUxfhlGVKSYML3tOIew+8w9flS7QZUvUGl3i8K9yvcu2QRLw3J XK3UPisApTuTLD/KHADH1FSPk/dwqVE5Yq1BegfL8bT8uzzyTxsnozJVQBBgD2si rBadX294LLgBWwT+eVrUHYpV4DZYriTDsJrn+BUx9bW6SsTRqayLZYDsxiF1Qcx7 sq67ZBL5Q1ZH8+vGnvvtkPkjtvfvnvuM -----END CERTIFICATE-----Generated at Wed May 13 14:12:38 2026 by rpki-client