$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: F4u0aVTEypTLeVKMKPB+BuItuOjvgYGiTO90gOHVDXk= Subject key identifier: 17:85:A0:56:74:29:63:D9:E7:6D:47:38:E6:2A:44:39:4A:F0:C5:B5 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584DC6CB04BA8D5E66A235485740 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:04:ba:8d:5e:66:a2:35:48:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=c2059995-2a35-4260-be9d-aff0242700a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:d1:68:6c:27:eb:ce:32:99:69:3e:10:62: 46:13:96:9c:53:b1:c6:59:38:a6:88:55:06:13:8e: 2e:a3:06:a8:e4:b3:5e:41:be:86:d8:f2:5f:25:f6: ee:62:3a:03:0c:27:bb:a2:c2:9e:ab:ee:1b:4f:da: d7:13:9a:e6:58:45:89:9d:b0:7e:86:ce:1b:f9:bf: db:77:a3:24:aa:fc:33:6b:ea:bf:c0:b1:3f:30:80: 6f:cf:d8:f6:b7:be:61:28:2e:e1:a9:42:39:f4:7c: b0:88:f3:6e:5e:5f:c1:c2:d4:09:e9:69:5b:d0:33: 22:75:f0:5b:00:47:de:c3:1a:13:f4:37:31:54:43: 57:5e:b9:28:05:b5:7c:9e:a2:2b:ba:91:e5:5d:d7: 4b:0d:e7:92:5a:b7:e7:f4:e5:f4:9b:8d:45:c2:e8: e5:dd:a7:cf:13:1b:ef:bc:fc:0b:d3:85:87:2d:06: 37:ce:7e:36:32:10:a1:ff:c7:ec:f7:48:7c:4b:75: df:8b:53:46:37:5a:fc:d3:58:de:17:de:2c:1a:5a: 42:ee:43:fa:b0:23:60:e8:8f:6f:06:f8:8d:10:8d: 57:af:5d:ac:3c:73:47:b7:e3:d5:6f:96:f7:a5:2c: 22:cf:95:96:4b:8f:91:82:c1:6b:09:cb:a9:30:5e: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:A0:56:74:29:63:D9:E7:6D:47:38:E6:2A:44:39:4A:F0:C5:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:bb:e5:17:6f:e3:e3:00:a5:8e:8c:ca:7e:c2:cc:3e:50:98: b2:0a:8b:31:41:58:77:6f:b4:44:63:75:8d:07:15:96:ea:df: d2:75:9c:1f:5d:3b:e5:65:33:e7:81:df:97:14:1c:b0:2a:b6: 2a:b0:80:45:26:ad:31:20:bb:a1:fb:10:2e:50:11:68:f8:f1: f2:bb:14:d3:fb:2a:6b:20:2c:40:b0:a5:72:d4:06:52:e5:6c: 92:54:82:97:b9:59:93:3c:ad:8f:b0:d5:86:e1:a2:5b:d9:0e: ed:20:c5:20:1f:ef:3e:4b:d3:51:e0:d0:f9:b3:d3:a8:62:ce: d3:56:54:ed:7c:be:ec:37:0b:cd:10:0f:d2:85:b3:59:ef:f8: 26:2f:38:8c:ff:45:e9:30:3e:40:96:59:c3:be:83:25:74:aa: 93:a7:be:22:16:d9:db:ac:96:68:62:e7:42:a1:7e:6e:ff:27: 5a:18:5d:8b:cb:95:81:73:51:43:48:d6:85:c7:b9:48:b0:67: 4e:8b:df:7d:1b:bd:fb:2e:dd:9c:0e:b7:1b:1e:94:05:81:fc: 8c:97:bd:52:36:13:9d:91:c2:ae:04:fc:60:2e:95:47:9f:5a: 15:74:a9:04:34:e6:2c:48:a5:44:0a:00:cb:9e:35:81:9a:ae: c9:34:38:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3GywS6jV5mojVIV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk YzIwNTk5OTUtMmEzNS00MjYwLWJlOWQtYWZmMDI0MjcwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqLRaGwn684ymWk+EGJGE5acU7HGWTimiFUG E44uowao5LNeQb6G2PJfJfbuYjoDDCe7osKeq+4bT9rXE5rmWEWJnbB+hs4b+b/b d6Mkqvwza+q/wLE/MIBvz9j2t75hKC7hqUI59HywiPNuXl/BwtQJ6Wlb0DMidfBb AEfewxoT9DcxVENXXrkoBbV8nqIrupHlXddLDeeSWrfn9OX0m41Fwujl3afPExvv vPwL04WHLQY3zn42MhCh/8fs90h8S3Xfi1NGN1r801jeF94sGlpC7kP6sCNg6I9v BviNEI1Xr12sPHNHt+PVb5b3pSwiz5WWS4+RgsFrCcupMF67pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBeFoFZ0KWPZ521HOOYqRDlK8MW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHC75Rdv4+MApY6Myn7CzD5QmLIKizFBWHdvtERjdY0HFZbq39J1 nB9dO+VlM+eB35cUHLAqtiqwgEUmrTEgu6H7EC5QEWj48fK7FNP7KmsgLECwpXLU BlLlbJJUgpe5WZM8rY+w1YbholvZDu0gxSAf7z5L01Hg0Pmz06hiztNWVO18vuw3 C80QD9KFs1nv+CYvOIz/RekwPkCWWcO+gyV0qpOnviIW2duslmhi50Khfm7/J1oY XYvLlYFzUUNI1oXHuUiwZ06L330bvfsu3ZwOtxselAWB/IyXvVI2E52Rwq4E/GAu lUefWhV0qQQ05ixIpUQKAMueNYGarsk0OI0= -----END CERTIFICATE-----Generated at Wed May 13 11:49:17 2026 by rpki-client