$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa File: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json) Hash identifier: qYka0E0YVjRf1ozYdCGCfTSknHrCljJAP8G4wDpqLfA= Subject key identifier: F5:8F:22:FD:64:23:0A:1F:16:C7:4E:E6:E7:4D:91:EC:4B:85:AA:52 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584D9E500D3739D33EFCE6AC7100 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 25968 IP address blocks: 2620:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0d:37:39:d3:3e:fc:e6:ac:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=b142cf8f-b4df-4ee0-9d1f-a643bd76d599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:6c:69:f4:b6:db:ce:79:eb:db:e5:01:e8: 56:61:28:0a:e9:bf:df:fb:e8:bb:08:b5:c8:bf:22: ec:27:06:a1:a0:5b:23:f6:bd:72:63:b5:de:ac:f1: 6d:f7:c6:66:5d:24:9a:f9:36:de:2b:93:73:de:ba: 8a:78:50:9b:90:17:0e:d8:67:6a:3f:47:22:4c:a7: de:77:01:b6:a8:41:18:dc:19:60:a7:8f:8c:3c:43: b0:5a:ef:2b:f2:3b:7d:3a:76:9a:b7:31:d8:a6:4c: b1:d5:43:d6:21:42:95:cb:40:da:94:28:78:9a:82: 6b:3f:26:3e:80:d6:28:ba:ec:15:1b:a4:10:c6:92: 97:2e:25:07:c3:c8:9e:a2:de:0d:3d:c8:c5:57:7d: b6:bd:0a:9c:f6:68:d7:61:0b:fe:59:fa:3d:9b:9f: a4:df:ce:e8:82:99:a0:54:39:8f:e7:2a:8f:88:f6: 57:43:16:a3:28:48:05:bf:64:f5:c5:3d:64:3c:aa: 91:03:a5:42:25:a5:c6:a4:68:ba:01:63:a0:c4:ad: 1c:71:02:fb:e2:b7:1e:c3:21:7f:13:2a:17:3d:68: 4e:5f:fe:f6:de:fb:66:88:14:5f:d2:5d:76:38:51: a8:ec:36:35:10:10:74:35:37:b4:f7:ef:f8:03:92: 73:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:22:FD:64:23:0A:1F:16:C7:4E:E6:E7:4D:91:EC:4B:85:AA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:34:1a:b3:1f:35:52:8c:d7:d3:70:68:3e:52:1b:86:96:4a: 47:ac:74:fb:7e:7d:15:98:24:15:10:df:a2:5d:31:ca:1f:ea: aa:17:0b:b4:26:8b:5c:9e:74:7f:88:54:02:45:8d:2c:ef:e8: d3:67:42:26:92:8a:1e:c5:ed:31:0e:9a:c6:5b:09:c3:11:9d: ed:eb:c0:f8:d7:d6:6b:79:43:57:e9:b9:85:05:20:bd:1c:15: 28:77:48:3d:e5:04:2c:ff:0c:97:6e:f7:22:59:72:ed:5e:fa: 18:61:f1:c9:bf:0e:fe:65:6b:99:94:0c:c4:49:0e:1d:0f:8d: 52:d1:a0:1f:d8:97:05:94:c6:6e:7f:dc:17:68:e0:4d:bf:e2: 75:3b:06:80:92:25:39:e3:3e:db:70:12:76:50:6f:8a:38:18: cf:0b:4e:ef:64:64:c1:d1:b7:72:11:b6:2b:23:58:79:ae:74: 5e:53:2a:04:5e:0c:d0:d0:26:30:3a:57:df:2c:13:53:22:fb: ca:63:d2:5f:ed:b0:c4:be:a5:3d:ab:7a:4a:a9:53:11:5e:94: 87:71:db:f7:9a:b7:15:1c:83:69:2f:72:7f:8e:b8:9b:fd:64: dd:e7:f6:84:31:ac:d0:91:e2:1b:48:69:f1:63:74:78:58:db: c9:3e:d6:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUA03OdM+/OascQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YjE0MmNmOGYtYjRkZi00ZWUwLTlkMWYtYTY0M2JkNzZkNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndpsafS2285569vlAehWYSgK6b/f++i7CLXI vyLsJwahoFsj9r1yY7XerPFt98ZmXSSa+TbeK5Nz3rqKeFCbkBcO2GdqP0ciTKfe dwG2qEEY3Blgp4+MPEOwWu8r8jt9OnaatzHYpkyx1UPWIUKVy0DalCh4moJrPyY+ gNYouuwVG6QQxpKXLiUHw8ieot4NPcjFV322vQqc9mjXYQv+Wfo9m5+k387ogpmg VDmP5yqPiPZXQxajKEgFv2T1xT1kPKqRA6VCJaXGpGi6AWOgxK0ccQL74rcewyF/ EyoXPWhOX/723vtmiBRf0l12OFGo7DY1EBB0NTe09+/4A5JzkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWPIv1kIwofFsdO5udNkexLhapSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvYzMyMmJjYjItMWVkOC0z MTMyLTk5OWEtYjIxOWU5ZjZmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAewAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABA0GrMfNVKM19NwaD5SG4aWSkesdPt+fRWYJBUQ36JdMcof6qoX C7Qmi1yedH+IVAJFjSzv6NNnQiaSih7F7TEOmsZbCcMRne3rwPjX1mt5Q1fpuYUF IL0cFSh3SD3lBCz/DJdu9yJZcu1e+hhh8cm/Dv5la5mUDMRJDh0PjVLRoB/YlwWU xm5/3Bdo4E2/4nU7BoCSJTnjPttwEnZQb4o4GM8LTu9kZMHRt3IRtisjWHmudF5T KgReDNDQJjA6V98sE1Mi+8pj0l/tsMS+pT2rekqpUxFelIdx2/eatxUcg2kvcn+O uJv9ZN3n9oQxrNCR4htIafFjdHhY28k+1ow= -----END CERTIFICATE-----Generated at Wed May 13 04:59:08 2026 by rpki-client