$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa File: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (raw, json) Hash identifier: agR94n7dcR81MY0solkeqVnqgr6lpEtxjkW6OmEquYw= Subject key identifier: 16:63:DA:23:90:AF:50:A6:FF:6F:11:E9:D5:20:1E:A0:95:B1:16:88 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584D95F00CCB372054E462663E80 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 46733 IP address blocks: 2602:f9f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0c:cb:37:20:54:e4:62:66:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=4a2ee239-7899-465b-babc-f93b7aee4600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:17:a7:70:77:97:27:c1:39:00:21:2c:ac: 5e:d4:27:de:5f:3c:26:80:79:5d:14:e3:bf:ca:47: 06:ad:02:28:97:fa:ef:c8:1b:9b:b4:07:80:94:53: f2:0f:40:28:b0:06:2b:15:ba:47:bf:34:8c:39:63: d7:84:24:55:cc:8a:0e:4b:09:bb:9f:28:21:b6:dd: d1:9e:4d:31:87:00:e2:59:b1:70:5b:2c:40:17:ec: 1f:39:78:93:55:5b:50:30:3d:29:7b:83:31:7b:db: 90:0e:09:c2:d7:36:d8:1d:12:fd:5b:b4:34:61:8c: 3c:c8:d0:7a:0d:16:ad:b0:11:77:af:de:aa:3d:4f: 70:88:50:dc:ad:52:ea:4c:52:5f:0b:86:dc:6c:82: bc:76:82:9e:21:2c:dc:57:48:f2:57:24:d3:78:ab: 5e:0a:82:fa:ec:78:c5:7f:30:e2:88:4d:af:ff:08: 85:0c:a0:1f:32:99:bb:7d:2d:5b:14:01:27:aa:eb: 44:fb:80:3f:cb:23:13:2a:d2:94:95:6d:78:ac:60: d1:17:4f:66:95:c3:f2:3c:3c:be:d2:d5:0d:21:64: e9:6d:0d:53:6b:70:c6:7f:a1:f2:32:7a:1e:5e:16: c2:52:66:16:e2:37:4d:12:7a:b6:c4:ed:ec:a6:84: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:63:DA:23:90:AF:50:A6:FF:6F:11:E9:D5:20:1E:A0:95:B1:16:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b5:c8:9b:25:2b:b6:4b:01:bb:3a:76:ff:9b:d5:2a:18:e7: ea:5d:be:01:33:40:c8:70:dc:8a:19:1b:df:e0:e3:83:13:9b: 0f:e0:de:bf:81:ca:7c:30:c2:be:26:e2:2c:25:a7:57:17:d4: 66:2a:97:44:f6:13:e8:53:ea:dc:46:bc:37:65:f2:c2:6f:02: 31:2b:7d:db:c5:e8:37:6e:87:23:64:98:76:75:95:cc:7c:9d: 22:db:c3:e5:66:e9:a7:60:6e:21:7d:ca:e2:86:6c:08:1b:03: 06:99:95:7d:9e:39:4f:2a:9f:cd:79:4f:e3:c7:0b:b3:59:3e: 8d:b2:d3:f0:4b:df:9d:3a:68:1f:01:96:b2:1e:83:c4:ee:d7: 0e:fe:d8:70:45:22:61:79:6f:82:ec:2f:c2:e8:0c:3b:5d:65: 1a:9d:69:18:b5:e3:26:80:60:a3:12:51:dc:8c:62:85:ac:d8: 45:20:82:d3:c2:1a:e0:85:a2:7c:2d:87:16:03:cc:77:30:c4: 73:63:10:1f:ce:68:33:d2:d0:d1:d0:a1:b5:23:27:9e:72:ea: fc:1b:cc:93:f7:97:6e:99:f9:58:ba:d2:a6:7a:05:ee:c5:f9: 37:ec:9d:64:38:d6:97:b2:8d:17:24:43:b3:de:3a:e3:6f:00: ad:01:2c:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8AzLNyBU5GJmPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NGEyZWUyMzktNzg5OS00NjViLWJhYmMtZjkzYjdhZWU0NjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2AXp3B3lyfBOQAhLKxe1CfeXzwmgHldFOO/ ykcGrQIol/rvyBubtAeAlFPyD0AosAYrFbpHvzSMOWPXhCRVzIoOSwm7nyghtt3R nk0xhwDiWbFwWyxAF+wfOXiTVVtQMD0pe4Mxe9uQDgnC1zbYHRL9W7Q0YYw8yNB6 DRatsBF3r96qPU9wiFDcrVLqTFJfC4bcbIK8doKeISzcV0jyVyTTeKteCoL67HjF fzDiiE2v/wiFDKAfMpm7fS1bFAEnqutE+4A/yyMTKtKUlW14rGDRF09mlcPyPDy+ 0tUNIWTpbQ1Ta3DGf6HyMnoeXhbCUmYW4jdNEnq2xO3spoTOGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZj2iOQr1Cm/28R6dUgHqCVsRaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvYjU3MzRhMjgtOGRkZi0z MDBjLWFiODEtZTZjYjY3Yjg3MGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL59AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF61yJslK7ZLAbs6dv+b1SoY5+pdvgEzQMhw3IoZG9/g44MTmw/g 3r+Bynwwwr4m4iwlp1cX1GYql0T2E+hT6txGvDdl8sJvAjErfdvF6DduhyNkmHZ1 lcx8nSLbw+Vm6adgbiF9yuKGbAgbAwaZlX2eOU8qn815T+PHC7NZPo2y0/BL3506 aB8BlrIeg8Tu1w7+2HBFImF5b4LsL8LoDDtdZRqdaRi14yaAYKMSUdyMYoWs2EUg gtPCGuCFonwthxYDzHcwxHNjEB/OaDPS0NHQobUjJ55y6vwbzJP3l26Z+Vi60qZ6 Be7F+TfsnWQ41peyjRckQ7PeOuNvAK0BLIA= -----END CERTIFICATE-----Generated at Wed May 13 16:17:24 2026 by rpki-client