$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa File: 884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa (raw, json) Hash identifier: dbFi4/unhrbE9bUt/uiEGozG38NMa4zkFRw3plxvc0U= Subject key identifier: 2F:68:2A:5D:D2:9E:AF:3F:2D:7C:B9:C3:E4:C6:72:71:51:B3:4B:C3 Certificate issuer: /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599 Certificate serial: 010D0C9F4328584DC4005071F2D2E3F64087B278 Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa Signing time: Fri 08 May 2026 13:00:30 +0000 ROA not before: Fri 08 May 2026 13:00:30 +0000 ROA not after: Thu 06 Aug 2026 13:00:30 +0000 asID: 36858 IP address blocks: 2607:75c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:00:50:71:f2:d2:e3:f6:40:87:b2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599 Validity Not Before: May 8 13:00:30 2026 GMT Not After : Aug 6 13:00:30 2026 GMT Subject: CN=aa40df57-c9bc-4b8a-93ed-048a2be7ef0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:a7:d2:88:ed:28:0f:79:c2:47:93:93:48: 7c:f4:12:3a:e1:a2:14:93:d9:03:4f:d2:8c:bf:fd: 46:66:3b:97:1d:e8:34:55:b7:4d:21:6a:a7:90:d2: 0d:9d:40:14:8a:ca:67:c9:a9:1c:77:7e:45:52:c5: 1d:30:e5:30:7f:dd:a5:75:8c:16:50:57:15:5f:ce: 02:6f:9d:b1:3c:6b:7a:bf:72:67:b9:44:57:ce:87: 61:61:33:a4:56:8b:d9:71:20:3b:17:f1:43:21:be: 94:34:1f:e9:37:d1:7f:3c:14:c1:5f:17:02:43:a0: ff:f6:49:92:73:e5:9f:3b:54:6c:05:8f:28:89:df: c8:33:64:c1:5a:25:96:29:74:be:73:a9:2f:ec:9b: 5c:5b:db:f8:c9:2e:3c:64:69:b8:05:68:cb:55:53: 10:fb:c8:e4:4a:2c:ec:32:a5:bf:c7:a5:0e:13:fc: 1a:18:e2:6a:6c:cf:6d:ed:d1:41:5a:3c:3a:59:54: 98:5d:b0:c4:de:93:75:a4:b6:32:f9:db:d5:85:5a: 9b:a8:ca:b5:f5:13:7e:78:c6:01:fc:dd:be:3a:8d: 4e:af:b8:14:63:44:4f:98:9d:ff:c6:c0:b2:96:94: 08:3c:09:01:8b:e7:b4:51:df:e8:e6:cf:90:1d:59: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:68:2A:5D:D2:9E:AF:3F:2D:7C:B9:C3:E4:C6:72:71:51:B3:4B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl X509v3 Authority Key Identifier: keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer sbgp-ipAddrBlock: critical IPv6: 2607:75c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8c:3a:d9:cf:a2:06:c8:7f:76:1e:a3:b3:50:84:01:e7:d7: 73:d2:b7:14:db:3e:e3:67:6f:1c:c2:3d:3d:7e:02:c1:b6:3e: 6b:7c:c4:b4:3c:3c:2a:af:6a:e2:22:07:90:b7:c1:c9:4f:63: 32:4c:7a:e3:9c:03:d6:4d:79:e8:62:8e:ee:68:2e:e7:11:f3: 99:11:98:1a:cc:b6:a0:4c:6d:22:60:93:de:ef:0d:ab:21:d4: 2f:6e:37:2e:65:81:d2:47:d2:ae:0c:05:fa:a7:4c:db:0a:30: 91:d6:df:0f:6f:9e:8c:7e:37:0c:e8:f8:50:eb:76:53:11:8a: 0a:20:c6:cb:80:c3:a0:92:0b:2b:d2:2d:dc:34:40:14:8c:26: c9:32:8b:9e:1e:9d:32:ea:f2:bd:68:4e:7e:90:df:4a:2d:4e: 25:a1:a3:c2:57:02:65:99:93:30:8c:e6:80:bf:97:22:90:64: 27:eb:86:39:39:5e:1b:f7:1c:44:fe:97:b9:fb:bf:b7:e9:6b: 96:1a:85:77:60:d5:a8:56:fa:6e:6a:79:7f:1e:fb:37:19:06: b3:9e:18:9a:24:b5:e2:dd:3c:f1:59:87:8c:75:b5:31:5b:fb: eb:8c:b0:18:d0:55:10:5b:16:fa:05:09:3f:80:d4:04:ce:1a: d0:bf:3f:7a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3EAFBx8tLj9kCHsngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlOGJhMzQtYmE0YS00NzVlLTlmOTgtNmZkODJhYWJj NTk5MB4XDTI2MDUwODEzMDAzMFoXDTI2MDgwNjEzMDAzMFowLzEtMCsGA1UEAxMk YWE0MGRmNTctYzliYy00YjhhLTkzZWQtMDQ4YTJiZTdlZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyCn0ojtKA95wkeTk0h89BI64aIUk9kDT9KM v/1GZjuXHeg0VbdNIWqnkNINnUAUispnyakcd35FUsUdMOUwf92ldYwWUFcVX84C b52xPGt6v3JnuURXzodhYTOkVovZcSA7F/FDIb6UNB/pN9F/PBTBXxcCQ6D/9kmS c+WfO1RsBY8oid/IM2TBWiWWKXS+c6kv7JtcW9v4yS48ZGm4BWjLVVMQ+8jkSizs MqW/x6UOE/waGOJqbM9t7dFBWjw6WVSYXbDE3pN1pLYy+dvVhVqbqMq19RN+eMYB /N2+Oo1Or7gUY0RPmJ3/xsCylpQIPAkBi+e0Ud/o5s+QHVlinwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC9oKl3Snq8/LXy5w+TGcnFRs0vDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWU4 YmEzNC1iYTRhLTQ3NWUtOWY5OC02ZmQ4MmFhYmM1OTkvODg0ZWQ0MjctNmE2YS0z OWYxLWEyYTQtNGY0ZjdhMWIyYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDVlOGJhMzQtYmE0YS00NzVlLTlm OTgtNmZkODJhYWJjNTk5L2Q1ZThiYTM0LWJhNGEtNDc1ZS05Zjk4LTZmZDgyYWFi YzU5OS5jcmwwHwYDVR0jBBgwFoAU6gBu+RXgaHTpQEG6NUEVRA7yqmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWU4YmEzNC1iYTRhLTQ3NWUtOWY5OC02ZmQ4 MmFhYmM1OTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd1wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxjDrZz6IGyH92HqOzUIQB59dz0rcU2z7jZ28cwj09fgLBtj5rfMS0 PDwqr2riIgeQt8HJT2MyTHrjnAPWTXnoYo7uaC7nEfOZEZgazLagTG0iYJPe7w2r IdQvbjcuZYHSR9KuDAX6p0zbCjCR1t8Pb56MfjcM6PhQ63ZTEYoKIMbLgMOgkgsr 0i3cNEAUjCbJMoueHp0y6vK9aE5+kN9KLU4loaPCVwJlmZMwjOaAv5cikGQn64Y5 OV4b9xxE/pe5+7+36WuWGoV3YNWoVvpuanl/Hvs3GQaznhiaJLXi3TzxWYeMdbUx W/vrjLAY0FUQWxb6BQk/gNQEzhrQvz96 -----END CERTIFICATE-----Generated at Wed May 13 12:34:45 2026 by rpki-client