$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: 0xrC4PkwAM4mKAweFJe0v+4cRvu2mz135Q8mKvFE1l8= Subject key identifier: 72:5C:77:3A:EF:76:A4:D9:78:62:22:8D:06:FC:99:54:9F:74:8A:F8 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F4328584DCF2B0E92EDB4013363F5B000 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Tue 12 May 2026 13:00:30 +0000 ROA not before: Tue 12 May 2026 13:00:30 +0000 ROA not after: Mon 10 Aug 2026 13:00:30 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:2b:0e:92:ed:b4:01:33:63:f5:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: May 12 13:00:30 2026 GMT Not After : Aug 10 13:00:30 2026 GMT Subject: CN=d9c7d596-1843-4687-a1ca-bab18b352232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:02:63:fd:72:3c:fa:9e:c9:b0:19:d0:86: d1:6d:d6:b8:7c:65:ad:5c:1d:54:a5:01:64:1b:cd: de:5d:ef:d4:16:c5:c5:8f:8e:08:62:34:d4:9d:ba: b7:83:1d:d2:bc:3f:4d:a7:75:1d:be:8f:6d:90:54: 65:f4:15:64:2e:06:76:82:6c:e2:5f:1e:79:85:12: d7:52:bf:3a:2f:63:49:e9:5c:cf:c3:bf:b4:a6:fb: ae:e8:43:5f:c7:90:51:14:e1:d4:d6:25:0f:5f:37: 31:f6:47:ae:8d:78:48:a9:54:af:8f:b9:22:2c:c1: 75:73:5d:07:c7:c5:ea:e8:00:10:fb:85:78:17:40: 4c:8f:42:37:9e:61:0d:27:a2:7c:cc:c1:41:34:dc: 66:12:db:7e:36:44:49:fa:25:b9:da:06:f9:a4:81: bb:2a:ab:6a:a4:b4:cd:c9:1f:9f:39:1a:7a:9f:9f: 5c:fb:b4:e0:79:4f:d2:8c:07:f3:95:72:a8:a2:81: 39:3e:f2:ab:1d:93:61:da:6c:d0:75:e0:c1:db:ec: 2a:ae:ed:3a:cf:3e:57:17:cf:a8:65:24:e4:52:80: 07:af:dc:9d:7f:31:31:ab:7a:9e:ce:ff:e9:e3:2d: 85:87:47:a3:46:b1:32:93:0a:86:cb:19:57:0a:74: 1b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5C:77:3A:EF:76:A4:D9:78:62:22:8D:06:FC:99:54:9F:74:8A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fb:b2:89:3b:ab:bb:8b:b9:cf:9d:5b:96:da:6e:d3:77:7f: 52:12:b4:af:52:59:9e:de:59:fa:a8:03:c0:d8:bf:83:3e:df: 70:a5:54:f5:8a:38:d1:51:7f:16:de:be:a5:8e:9c:83:94:e9: f0:60:66:d8:a1:cf:d7:7f:57:3c:28:f2:c2:b5:61:c5:b7:fb: 1b:d8:3d:3f:b2:93:42:2e:b8:60:a3:2b:7f:40:bc:97:9b:67: f4:41:3c:88:35:2c:b7:02:f2:37:2e:c1:9c:63:61:1c:88:8a: 28:b4:47:2c:cd:f8:15:f1:92:fc:46:39:48:99:db:41:05:af: ff:15:d3:f5:d4:96:2d:d9:ed:82:15:c0:4a:d6:a6:3f:e4:d8: 70:e4:55:c0:3b:ce:2e:3a:af:37:90:77:f3:d7:c1:23:9d:6f: 01:4f:7d:3d:fb:83:44:35:16:52:5f:58:ef:93:fc:8b:a8:16: f5:a0:37:07:69:96:30:7a:8e:cd:d8:84:49:b7:59:eb:7b:22: dd:69:52:30:2e:55:69:14:a3:bd:56:f9:b9:7f:d8:81:2f:ae: 1f:1b:c8:e2:11:0f:2f:8e:be:65:a3:66:fe:67:81:cd:9c:d5: 1e:74:f8:0b:5b:0c:d1:f8:90:eb:79:b2:77:3b:bc:27:a2:c3: 33:e1:c2:e9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3PKw6S7bQBM2P1sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI2MDUxMjEzMDAzMFoXDTI2MDgxMDEzMDAzMFowLzEtMCsGA1UEAxMk ZDljN2Q1OTYtMTg0My00Njg3LWExY2EtYmFiMThiMzUyMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbkCY/1yPPqeybAZ0IbRbda4fGWtXB1UpQFk G83eXe/UFsXFj44IYjTUnbq3gx3SvD9Np3Udvo9tkFRl9BVkLgZ2gmziXx55hRLX Ur86L2NJ6VzPw7+0pvuu6ENfx5BRFOHU1iUPXzcx9keujXhIqVSvj7kiLMF1c10H x8Xq6AAQ+4V4F0BMj0I3nmENJ6J8zMFBNNxmEtt+NkRJ+iW52gb5pIG7KqtqpLTN yR+fORp6n59c+7TgeU/SjAfzlXKoooE5PvKrHZNh2mzQdeDB2+wqru06zz5XF8+o ZSTkUoAHr9ydfzExq3qezv/p4y2Fh0ejRrEykwqGyxlXCnQbgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHJcdzrvdqTZeGIijQb8mVSfdIr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAr+7KJO6u7i7nPnVuW2m7Td39SErSvUlme3ln6qAPA2L+DPt9wpVT1 ijjRUX8W3r6ljpyDlOnwYGbYoc/Xf1c8KPLCtWHFt/sb2D0/spNCLrhgoyt/QLyX m2f0QTyINSy3AvI3LsGcY2EciIootEcszfgV8ZL8RjlImdtBBa//FdP11JYt2e2C FcBK1qY/5Nhw5FXAO84uOq83kHfz18EjnW8BT309+4NENRZSX1jvk/yLqBb1oDcH aZYweo7N2IRJt1nreyLdaVIwLlVpFKO9Vvm5f9iBL64fG8jiEQ8vjr5lo2b+Z4HN nNUedPgLWwzR+JDrebJ3O7wnosMz4cLp -----END CERTIFICATE-----Generated at Wed May 13 16:26:51 2026 by rpki-client