$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa File: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json) Hash identifier: zUO0R4ozzAKckrwVznY+tTEBq+2vFTPjluZaiSdnjeA= Subject key identifier: 73:13:12:5F:BB:9E:2F:42:17:89:F8:02:7F:57:39:E9:C8:FA:87:6E Certificate issuer: /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Certificate serial: 010D0C9F4328584D95F0053569DDC12129F1CD00 Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 396996 IP address blocks: 2602:f9c8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:05:35:69:dd:c1:21:29:f1:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=6a43ba5d-845b-49a9-b242-0205f7381ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ca:f7:73:a8:d3:be:79:d3:f3:2b:63:ed:a2: 84:54:e4:56:c2:db:8a:99:b7:93:5a:11:e9:a8:e1: 3e:ca:e3:d1:ee:91:a3:f4:48:93:ee:0b:46:62:e0: d9:01:f4:53:dd:bf:78:d3:e0:03:0a:3b:6d:f2:54: b4:8f:49:44:9b:94:42:7f:57:58:77:ee:d4:70:a4: 00:ec:61:b7:c4:35:e1:65:28:ab:d3:eb:ce:77:bb: b5:be:40:de:92:33:95:31:70:ce:91:ab:dc:a8:3b: 87:ac:e4:56:2e:09:48:fb:40:2b:15:8e:4d:31:3b: 80:ce:1a:a0:43:76:56:1c:9d:39:68:15:ae:a7:9c: a9:e6:58:58:ab:12:c1:15:2e:84:5f:ac:88:8c:18: b9:55:e2:94:f3:9a:94:db:51:ad:d8:f8:36:b4:01: 2e:76:cb:49:04:12:26:db:27:b0:9e:c5:8f:9d:46: 01:59:03:63:13:b0:34:80:3d:44:cd:58:12:8a:66: 05:1b:05:41:91:79:80:2a:46:d9:fb:ad:f8:09:ea: 2d:aa:e4:1c:92:62:5f:1c:fa:5d:9d:b1:7a:c1:db: be:df:2f:35:28:e4:01:f8:95:fa:52:10:b1:ff:1f: 17:64:e3:b6:1b:90:75:2e:be:eb:26:af:8b:da:00: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:12:5F:BB:9E:2F:42:17:89:F8:02:7F:57:39:E9:C8:FA:87:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl X509v3 Authority Key Identifier: keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5e:5e:eb:14:83:aa:8d:01:89:d8:e7:1e:ac:17:2e:7d:21: 0b:94:3e:7e:8e:87:e7:82:68:d5:69:2e:e2:ea:1c:eb:c9:b2: 89:72:64:6d:9d:b2:58:de:88:2e:cb:3f:b3:ab:be:c3:f7:5f: ed:53:09:a3:08:d7:1f:b8:79:1c:54:d8:0c:1d:ea:42:a3:58: a9:9b:03:89:1e:15:ea:f9:f9:7f:86:b5:e5:4e:2d:65:3c:3a: 6a:a1:7c:8e:27:40:ae:53:9e:c3:0d:5c:23:ee:f7:81:cf:08: 4e:47:3d:f4:5b:a6:8a:dd:97:98:8f:b8:a9:fb:2c:9b:5f:e0: fb:ac:82:2c:20:96:cf:65:a8:b8:a8:8e:7f:7f:76:1d:34:86: cb:87:60:4b:9e:4b:6d:c8:7f:d5:cf:54:49:67:bd:63:fd:f7: 83:ed:cd:bc:b3:6b:17:63:bc:4f:71:d8:91:eb:a8:64:2b:43: a5:f6:44:42:1e:0d:18:81:01:2a:01:2b:61:0a:fe:65:76:a4: 66:20:71:bc:83:8b:5e:bf:c4:17:8a:e2:8a:27:35:05:67:97: 17:b5:c5:39:54:aa:1c:c3:dc:e1:8b:36:64:5e:43:1d:10:4c: 5d:7d:7b:4d:97:0b:59:cb:ed:7b:d8:d1:69:21:cb:cd:38:a1: 29:ad:16:c8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2V8AU1ad3BISnxzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5ZjlkMzYtZjk3MC00ODFmLWFlNTItZTc0YTZmOGE3 NTQxMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NmE0M2JhNWQtODQ1Yi00OWE5LWIyNDItMDIwNWY3MzgxY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksr3c6jTvnnT8ytj7aKEVORWwtuKmbeTWhHp qOE+yuPR7pGj9EiT7gtGYuDZAfRT3b940+ADCjtt8lS0j0lEm5RCf1dYd+7UcKQA 7GG3xDXhZSir0+vOd7u1vkDekjOVMXDOkavcqDuHrORWLglI+0ArFY5NMTuAzhqg Q3ZWHJ05aBWup5yp5lhYqxLBFS6EX6yIjBi5VeKU85qU21Gt2Pg2tAEudstJBBIm 2yewnsWPnUYBWQNjE7A0gD1EzVgSimYFGwVBkXmAKkbZ+634CeotquQckmJfHPpd nbF6wdu+3y81KOQB+JX6UhCx/x8XZOO2G5B1Lr7rJq+L2gAz6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHMTEl+7ni9CF4n4An9XOenI+oduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlm OWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRhNmY4YTc1NDEvZGRkMTlkMzMtZWYwMi0z NGMxLWFiZDEtYWVmMjkwNGI3YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTk5ZjlkMzYtZjk3MC00ODFmLWFl NTItZTc0YTZmOGE3NTQxL2E5OWY5ZDM2LWY5NzAtNDgxZi1hZTUyLWU3NGE2Zjhh NzU0MS5jcmwwHwYDVR0jBBgwFoAUvMRVQVuDs9BtufBxgJNbtCGZ05swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlmOWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRh NmY4YTc1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5yAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArF5e6xSDqo0BidjnHqwXLn0hC5Q+fo6H54Jo1Wku4uoc68myiXJk bZ2yWN6ILss/s6u+w/df7VMJowjXH7h5HFTYDB3qQqNYqZsDiR4V6vn5f4a15U4t ZTw6aqF8jidArlOeww1cI+73gc8ITkc99Fumit2XmI+4qfssm1/g+6yCLCCWz2Wo uKiOf392HTSGy4dgS55Lbch/1c9USWe9Y/33g+3NvLNrF2O8T3HYkeuoZCtDpfZE Qh4NGIEBKgErYQr+ZXakZiBxvIOLXr/EF4riiic1BWeXF7XFOVSqHMPc4Ys2ZF5D HRBMXX17TZcLWcvte9jRaSHLzTihKa0WyA== -----END CERTIFICATE-----Generated at Wed May 13 17:02:19 2026 by rpki-client