$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa File: a619e9f2-a5c2-3db3-989a-7abc86139860.roa (raw, json) Hash identifier: gkoPJ+jMuVZ8iXOUuZUztsFO+MlzgJsO5oQKE7hga0A= Subject key identifier: FD:71:B7:26:ED:12:49:05:BF:72:49:A1:5C:CC:EF:38:ED:D2:16:4B Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DB4A5B102B3D54310DC2770C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 63023 IP address blocks: 2604:86c0:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:b1:02:b3:d5:43:10:dc:27:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=83b89c9d-b80c-45aa-ad8f-55a3b47c00cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:4e:ad:aa:b2:ee:cb:4f:b3:ca:6d:5f:9a: 56:f8:f8:9f:73:9f:81:77:71:1f:56:c5:c6:36:1d: c4:74:3b:8b:8e:80:f4:56:7f:2c:84:82:12:fe:38: 8e:fb:9b:ea:68:0c:52:e1:b9:fd:3f:81:60:f0:96: b4:41:81:9b:3c:e4:00:17:6c:51:1c:6d:5e:98:f0: 0f:72:96:c7:b3:b0:94:20:ce:a4:e8:ee:05:c3:fd: c5:6b:9e:86:3c:27:cb:e4:71:46:d7:d9:9c:ae:3f: 9e:a4:83:e9:63:5e:77:a8:53:7c:69:c2:08:e4:ff: b4:5c:4c:ac:08:d8:d3:07:e4:63:ae:c1:12:01:50: 60:ff:c8:b3:c0:36:44:a8:b4:f2:b8:96:c0:74:a1: 2d:5c:4a:31:7b:3e:b1:4d:46:b3:d2:b3:42:5f:88: 66:ee:2e:90:f0:0b:21:14:2d:bd:c9:9c:ac:a5:a5: 33:9e:72:3f:34:fb:f8:fd:2a:f1:21:8b:24:f1:fa: c5:f2:f6:0d:4a:93:16:fc:53:3c:f2:c1:f9:bf:67: 4f:02:48:43:74:9e:15:82:a0:81:08:f7:38:1b:3c: 1a:23:7f:35:01:d3:ff:51:23:b3:42:54:7f:cf:c4: 6d:d6:33:ce:56:98:31:95:3a:83:d5:ce:83:c5:f9: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:71:B7:26:ED:12:49:05:BF:72:49:A1:5C:CC:EF:38:ED:D2:16:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a619e9f2-a5c2-3db3-989a-7abc86139860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8c:d6:93:96:be:96:63:ef:3b:f4:d6:5d:3e:1b:99:00:8c: 5c:65:c1:08:ab:59:4e:39:30:bb:5e:cd:50:f8:50:3f:9d:ce: 89:ff:95:a2:12:91:9d:4b:1c:de:01:b0:98:54:a1:37:98:9d: 68:24:50:92:2a:14:5a:a4:d8:ba:35:98:71:2e:fc:04:a9:a8: 66:30:62:1c:dd:2e:db:08:a4:f6:3a:78:2a:8b:45:8f:f7:ac: 38:5b:2e:14:1f:ca:f8:4d:78:9d:5d:3c:26:da:1c:2c:3b:93: 01:4c:f5:c5:63:25:ce:2d:9d:87:12:4a:35:9a:35:00:87:0c: 8c:39:64:7d:28:87:c3:44:03:4d:1e:44:6d:81:7a:fc:42:87: a5:8f:cf:96:e7:82:a9:7d:6b:36:c2:2e:46:da:ca:b0:8e:79: 89:3c:30:6e:23:66:c8:8e:a9:cf:27:4f:d9:c7:52:10:1c:f2: 7c:a2:75:b3:39:bd:e6:cd:ff:16:f4:88:8a:59:71:f2:23:11: 4c:55:39:15:ea:74:3e:cd:0e:f3:d8:b7:70:f9:12:e0:7e:d7: d6:c3:26:51:4c:ca:f8:de:fb:8e:c2:e3:4b:98:3c:4a:f4:40: c5:83:7d:6d:59:6f:92:57:22:b0:59:52:a2:34:ef:1a:30:a7: 6b:16:06:7d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE20pbECs9VDENwncMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODNiODljOWQtYjgwYy00NWFhLWFkOGYtNTVhM2I0N2MwMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp9Oraqy7stPs8ptX5pW+Pifc5+Bd3EfVsXG Nh3EdDuLjoD0Vn8shIIS/jiO+5vqaAxS4bn9P4Fg8Ja0QYGbPOQAF2xRHG1emPAP cpbHs7CUIM6k6O4Fw/3Fa56GPCfL5HFG19mcrj+epIPpY153qFN8acII5P+0XEys CNjTB+RjrsESAVBg/8izwDZEqLTyuJbAdKEtXEoxez6xTUaz0rNCX4hm7i6Q8Ash FC29yZyspaUznnI/NPv4/SrxIYsk8frF8vYNSpMW/FM88sH5v2dPAkhDdJ4VgqCB CPc4GzwaI381AdP/USOzQlR/z8Rt1jPOVpgxlTqD1c6Dxfk8ywIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP1xtybtEkkFv3JJoVzM7zjt0hZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTYxOWU5ZjItYTVjMi0z ZGIzLTk4OWEtN2FiYzg2MTM5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAFIzWk5a+lmPvO/TWXT4bmQCMXGXBCKtZTjkwu17NUPhQP53Oif+V ohKRnUsc3gGwmFShN5idaCRQkioUWqTYujWYcS78BKmoZjBiHN0u2wik9jp4KotF j/esOFsuFB/K+E14nV08JtocLDuTAUz1xWMlzi2dhxJKNZo1AIcMjDlkfSiHw0QD TR5EbYF6/EKHpY/PlueCqX1rNsIuRtrKsI55iTwwbiNmyI6pzydP2cdSEBzyfKJ1 szm95s3/FvSIillx8iMRTFU5Fep0Ps0O89i3cPkS4H7X1sMmUUzK+N77jsLjS5g8 SvRAxYN9bVlvklcisFlSojTvGjCnaxYGfQ== -----END CERTIFICATE-----Generated at Wed May 13 09:05:02 2026 by rpki-client