$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa File: 953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa (raw, json) Hash identifier: 4VBh5cJqW04vXZq5wbYif2RmNM8CNuI1vkccvvgpQNc= Subject key identifier: C3:C6:63:8F:4B:A0:18:15:2D:29:C1:F5:EB:D2:69:2F:42:7E:AE:F0 Certificate issuer: /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Certificate serial: 010D0C9F4328584DC29AFC958EE88AD9D4F92940 Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 401442 IP address blocks: 2604:ba0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:fc:95:8e:e8:8a:d9:d4:f9:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=090b6d4d-a294-463e-b923-4b3e5f7ebfa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:1b:85:d6:15:94:a3:7d:a0:53:88:69:d4: 14:00:1d:9b:2b:0e:c1:45:14:4b:be:14:81:f8:0f: b7:46:d9:4f:68:fa:9e:18:48:78:5d:b9:7e:fe:42: 82:62:73:a5:7a:80:35:fa:c2:a6:53:6f:5a:57:ef: 4a:0c:db:b1:eb:66:d3:ae:89:0c:c9:c2:77:8d:97: f7:5f:75:a0:5e:cc:bc:78:75:a6:71:3b:dc:14:ac: ea:33:60:fd:8e:c9:90:a0:e6:eb:06:0f:32:9d:05: 7a:02:92:05:d0:c2:86:48:07:59:5a:23:88:b0:13: ca:12:5e:88:9b:3e:e1:5f:78:f6:49:21:1d:f0:bb: a6:75:d4:74:ef:ef:35:5b:0d:c8:99:e3:1b:51:59: eb:55:69:76:d3:d6:4a:0e:13:76:11:2a:82:5f:8d: b0:a5:03:b2:5f:42:28:ac:c4:59:2f:1a:77:b4:18: f2:fb:a5:15:22:c0:0c:3a:53:ba:04:62:8a:4a:1a: 30:f8:dc:2e:82:6a:5e:9e:e5:fa:8b:a9:57:6e:55: 74:f9:45:bd:56:19:da:0a:42:5e:0b:3f:d3:f4:50: b1:4b:16:0d:2c:68:39:f6:32:3f:32:0b:b7:e5:44: 92:d6:fd:0a:22:0c:a0:5e:48:c7:fd:96:eb:cb:2b: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:63:8F:4B:A0:18:15:2D:29:C1:F5:EB:D2:69:2F:42:7E:AE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl X509v3 Authority Key Identifier: keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:65:d2:9c:08:66:c5:a0:2b:16:28:a5:7f:45:e4:92:c4:4e: 78:71:7a:1a:27:ac:99:81:f7:01:1b:fe:0f:f5:16:1f:df:89: 1a:05:5f:47:60:03:44:68:08:a9:eb:bc:86:31:53:15:54:72: ad:61:23:8d:6d:86:60:01:61:b5:07:81:1e:29:62:cc:24:2e: 02:7c:bf:d3:b5:8c:a2:37:6a:1a:8a:a7:4f:2b:62:d6:e4:7b: 3e:52:35:6a:5a:31:7b:f6:2f:99:ce:d4:ff:70:31:4e:d1:e2: 16:da:ab:04:a3:ca:26:ed:01:78:6b:50:16:36:03:47:be:31: ee:53:54:27:62:ea:4c:9c:06:15:07:4b:1d:b6:d2:7e:e3:48: c4:7c:1e:e3:a4:56:d7:16:45:26:91:0c:4c:57:0d:c9:bc:1a: ab:a1:bf:fb:18:29:d0:ce:73:0c:c2:9e:ae:8e:b8:40:f4:3c: d8:b8:88:48:f9:4f:e3:19:80:ec:33:b1:13:86:bf:07:32:66: cb:50:91:4d:6c:42:39:38:77:6a:18:af:3f:56:ca:62:4a:12: 78:17:a4:1e:c1:31:32:4a:c5:28:3a:49:ac:c8:e6:4f:af:e0: 4c:9a:20:e5:4f:47:0d:b6:3a:e6:f7:ff:1a:1d:e5:94:e6:a4: 66:1a:1b:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3CmvyVjuiK2dT5KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRj NmQ0MB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk MDkwYjZkNGQtYTI5NC00NjNlLWI5MjMtNGIzZTVmN2ViZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcbhdYVlKN9oFOIadQUAB2bKw7BRRRLvhSB +A+3RtlPaPqeGEh4Xbl+/kKCYnOleoA1+sKmU29aV+9KDNux62bTrokMycJ3jZf3 X3WgXsy8eHWmcTvcFKzqM2D9jsmQoObrBg8ynQV6ApIF0MKGSAdZWiOIsBPKEl6I mz7hX3j2SSEd8LumddR07+81Ww3ImeMbUVnrVWl209ZKDhN2ESqCX42wpQOyX0Io rMRZLxp3tBjy+6UVIsAMOlO6BGKKShow+NwugmpenuX6i6lXblV0+UW9VhnaCkJe Cz/T9FCxSxYNLGg59jI/Mgu35USS1v0KIgygXkjH/ZbryyvE3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMPGY49LoBgVLSnB9evSaS9Cfq7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIz ZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvOTUzZDg3ZjItZTBiMy0z NWY2LWE5OGUtOWI4YzgwOGQxMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjEyM2ZkNjgtNTk2Yy00ODA2LWJk OWUtOTExNjdhNmRjNmQ0LzIxMjNmZDY4LTU5NmMtNDgwNi1iZDllLTkxMTY3YTZk YzZkNC5jcmwwHwYDVR0jBBgwFoAUmE78+x0R5FCBKsfpNazGGkn2gYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2 N2E2ZGM2ZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQLoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfZdKcCGbFoCsWKKV/ReSSxE54cXoaJ6yZgfcBG/4P9RYf34kaBV9H YANEaAip67yGMVMVVHKtYSONbYZgAWG1B4EeKWLMJC4CfL/TtYyiN2oaiqdPK2LW 5Hs+UjVqWjF79i+ZztT/cDFO0eIW2qsEo8om7QF4a1AWNgNHvjHuU1QnYupMnAYV B0sdttJ+40jEfB7jpFbXFkUmkQxMVw3JvBqrob/7GCnQznMMwp6ujrhA9DzYuIhI +U/jGYDsM7EThr8HMmbLUJFNbEI5OHdqGK8/VspiShJ4F6QewTEySsUoOkmsyOZP r+BMmiDlT0cNtjrm9/8aHeWU5qRmGhtR -----END CERTIFICATE-----Generated at Wed May 13 08:33:09 2026 by rpki-client