$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa File: 1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa (raw, json) Hash identifier: LvtDQmg6gFU5/BSMS06QdVO74eYqkt3Dj7N5nF5eKQo= Subject key identifier: 9B:1A:AB:3A:FE:28:F8:B8:C7:5A:EE:21:9A:A5:0A:AA:E8:2E:D5:28 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DB4A5B0B5B7B3966520A42AC0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 63023 IP address blocks: 2604:86c0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:b0:b5:b7:b3:96:65:20:a4:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=e2e2a050-6e8f-431d-b0bc-dca51b81e8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:12:14:00:86:6b:45:44:f1:16:cd:18:52: ff:b6:8b:78:f0:bd:15:9a:26:a1:03:b0:4b:65:38: cb:4a:20:de:0c:2c:56:b0:fc:df:85:ad:38:75:11: 5d:2f:8e:7b:9f:8b:6a:1d:c4:14:ec:78:72:56:25: 5e:43:82:5f:03:08:e0:32:92:0e:0b:78:5e:3c:0b: b8:dd:9c:dc:45:b2:1a:31:9d:03:7a:40:cb:62:f7: c8:1b:7a:01:b7:80:e6:82:4c:d0:fe:0c:ca:81:f0: 2f:38:fb:bc:ab:e8:99:ff:16:d1:4b:0c:62:33:16: 4e:32:66:cb:18:98:a6:c3:34:60:99:13:eb:8b:e7: da:18:1b:d3:1b:83:3f:01:19:f0:20:e0:3b:4e:47: 23:fd:c4:c5:ce:98:13:82:5c:26:5e:47:81:25:50: 8b:e0:84:4d:90:16:21:6d:e1:92:91:28:3f:8a:83: 18:29:2b:9a:f1:5d:11:5e:72:11:92:7a:80:f5:47: 45:9b:83:94:64:b3:17:c6:ce:e0:6b:13:93:d8:84: de:4e:f8:c2:b8:41:1c:fb:a6:d8:12:6f:4f:b6:19: 24:90:2a:2f:02:89:a0:de:e4:78:41:c1:88:cc:fd: d9:c5:db:ce:1b:1f:ab:18:8c:87:b0:83:4a:b3:ac: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:AB:3A:FE:28:F8:B8:C7:5A:EE:21:9A:A5:0A:AA:E8:2E:D5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d95a1db-0817-3f7f-b931-3ba0e5c314a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:6000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7d:0b:66:9a:c3:7c:51:10:df:36:fc:4f:1f:69:e2:64:28: 2e:80:61:54:0d:d0:a0:d4:fa:ce:f2:fa:c3:41:5e:be:50:ce: 1a:16:04:4a:b7:d5:81:09:05:00:1e:8d:eb:b7:51:93:2b:e1: 8c:85:43:e6:fc:39:fa:5a:24:56:5b:71:19:5f:1b:49:82:ac: 2d:a6:6e:34:be:17:d2:e2:cf:57:28:19:cd:41:f5:64:9d:86: e4:ed:2b:a8:6c:37:69:78:ba:e6:0e:2f:a7:5c:1b:a4:22:2a: fc:bc:ac:01:16:c9:fc:86:a5:35:5e:a1:6c:10:53:82:b5:c4: cb:d5:2d:fe:b7:f2:88:5e:35:26:4e:16:32:8e:f3:7e:cb:33: 06:13:3c:4c:cf:01:9d:6c:83:cc:b7:d7:52:ea:04:f7:37:74: 2a:bc:53:07:aa:09:48:c2:88:64:34:a3:85:45:8b:09:37:b8: e6:6e:9f:0f:13:19:65:f2:0c:94:c6:15:02:55:3f:df:19:93: dd:6a:04:34:5b:fe:48:33:79:b2:12:b8:46:18:f4:28:44:6d: ea:f5:38:7c:18:05:ab:cc:c0:9b:56:d4:dc:30:6e:80:7c:10: 6d:2a:1f:e3:a9:84:b0:f0:22:12:b1:b4:0f:7e:3e:f4:7b:26: 13:80:78:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE20pbC1t7OWZSCkKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZTJlMmEwNTAtNmU4Zi00MzFkLWIwYmMtZGNhNTFiODFlOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgQSFACGa0VE8RbNGFL/tot48L0VmiahA7BL ZTjLSiDeDCxWsPzfha04dRFdL457n4tqHcQU7HhyViVeQ4JfAwjgMpIOC3hePAu4 3ZzcRbIaMZ0DekDLYvfIG3oBt4DmgkzQ/gzKgfAvOPu8q+iZ/xbRSwxiMxZOMmbL GJimwzRgmRPri+faGBvTG4M/ARnwIOA7Tkcj/cTFzpgTglwmXkeBJVCL4IRNkBYh beGSkSg/ioMYKSua8V0RXnIRknqA9UdFm4OUZLMXxs7gaxOT2ITeTvjCuEEc+6bY Em9PthkkkCovAomg3uR4QcGIzP3ZxdvOGx+rGIyHsINKs6zOTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJsaqzr+KPi4x1ruIZqlCqroLtUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMWQ5NWExZGItMDgxNy0z ZjdmLWI5MzEtM2JhMGU1YzMxNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSGwGAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAU30LZprDfFEQ3zb8Tx9p4mQoLoBhVA3QoNT6zvL6w0FevlDOGhYE SrfVgQkFAB6N67dRkyvhjIVD5vw5+lokVltxGV8bSYKsLaZuNL4X0uLPVygZzUH1 ZJ2G5O0rqGw3aXi65g4vp1wbpCIq/LysARbJ/IalNV6hbBBTgrXEy9Ut/rfyiF41 Jk4WMo7zfsszBhM8TM8BnWyDzLfXUuoE9zd0KrxTB6oJSMKIZDSjhUWLCTe45m6f DxMZZfIMlMYVAlU/3xmT3WoENFv+SDN5shK4Rhj0KERt6vU4fBgFq8zAm1bU3DBu gHwQbSof46mEsPAiErG0D34+9HsmE4B45A== -----END CERTIFICATE-----Generated at Wed May 13 13:14:14 2026 by rpki-client