$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa File: 294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa (raw, json) Hash identifier: gIPMDGYlDa3yiRWh4Su+Kd85lPo4VORuON+sCpiBWfo= Subject key identifier: A6:EB:4F:F6:74:F9:B7:E2:D8:95:72:7A:71:94:83:D1:70:D4:A0:C8 Certificate issuer: /CN=3299f656-5665-469b-8729-13b669bb2153 Certificate serial: 010D0C9F4328584D9E502C8147FB7205E720A40C Authority key identifier: 19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 23294 IP address blocks: 2620:0:1a70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2c:81:47:fb:72:05:e7:20:a4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3299f656-5665-469b-8729-13b669bb2153 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=f9c9256f-efc8-4af4-ae22-c82a44f9c410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:bc:b3:b4:ef:f3:c3:37:31:2f:a7:23:d9: c5:29:e8:eb:e0:80:7e:93:e1:b7:29:b4:1d:33:5c: f7:7b:fb:21:77:4a:02:14:dc:56:ad:f8:9a:c7:0f: 86:18:82:1e:cf:7a:4a:08:34:87:7b:56:33:1b:8f: 63:5e:ad:37:a2:4a:b9:17:b0:ff:38:99:ff:fc:f3: 22:21:85:71:8b:54:c7:91:58:f7:99:0c:fb:ab:10: 41:4b:b5:71:d0:46:5e:c4:0f:d9:18:b5:c8:eb:07: 8f:26:97:f6:83:ad:46:98:fa:e0:15:8e:d5:c2:35: 94:72:58:a6:bb:ae:e3:00:13:6d:1d:fb:e2:65:73: 96:f0:1a:19:fd:8f:66:6a:e0:98:61:62:63:6f:8e: b2:4f:a6:f5:6c:f9:53:36:f1:2d:90:1d:de:36:b1: e2:a1:8d:13:30:98:76:7f:8e:2f:cc:fd:8e:5f:2a: 7e:9b:1d:ec:97:37:8f:e7:40:65:88:7d:a7:5d:31: 2f:75:6e:fe:78:72:db:bc:8e:f2:9b:19:8f:69:12: 93:ee:12:1e:ce:2f:a0:d7:95:51:b5:53:1d:aa:54: 2d:2f:21:6f:2c:eb:26:e6:81:2a:df:2b:72:64:d7: 52:c9:f7:5f:23:70:5c:15:11:be:43:06:2b:0d:12: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:4F:F6:74:F9:B7:E2:D8:95:72:7A:71:94:83:D1:70:D4:A0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/294ba07c-2701-30d3-a1e3-d62afe7acdd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153/3299f656-5665-469b-8729-13b669bb2153.crl X509v3 Authority Key Identifier: keyid:19:13:3B:1D:1D:5E:67:99:35:42:C7:DC:0B:AC:D2:1B:89:0B:74:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3299f656-5665-469b-8729-13b669bb2153.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:1a70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5a:a0:70:e2:5c:b8:ee:19:7a:2f:b9:f4:e1:82:04:99:85: 42:af:95:a2:68:52:e7:a0:07:2f:3a:33:4a:fc:e8:2a:92:3f: 88:d1:53:be:d7:e4:6f:fe:16:ac:c2:2d:54:93:32:4d:81:68: 61:eb:65:66:8f:d7:74:11:0e:b1:1f:5d:4f:11:38:fa:6b:13: a5:14:cf:93:31:cc:e0:82:cb:40:44:f4:e0:89:71:6d:ab:dd: b8:b1:ee:16:ea:43:13:68:ad:8b:5a:05:eb:cd:f9:5e:8e:2d: 44:16:86:d0:f7:63:ce:1b:b9:29:e3:c2:17:9e:f7:0f:e6:8f: 19:ed:7d:e9:17:33:e3:74:2b:38:f7:62:91:76:5d:57:fc:47: c3:bc:58:cf:1b:ad:18:a0:f6:9a:1c:93:0e:66:30:6f:d9:76: d4:cd:a7:56:7e:68:d1:be:18:7b:ad:f1:fe:7e:b6:10:f8:a2: 6e:d9:36:b5:46:94:1b:00:64:7a:36:d5:eb:b2:a5:6e:48:46: 37:4c:ca:91:fb:3b:c0:7e:50:88:f4:1c:8c:75:0c:54:a3:e9: 7c:9f:f9:e4:98:4a:e7:ec:75:7f:57:bd:3a:77:2c:3c:40:33: 83:65:11:97:bb:f4:62:a8:03:b8:3d:de:ed:d9:68:4a:1f:c2: 8f:2b:1b:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUCyBR/tyBecgpAwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5OWY2NTYtNTY2NS00NjliLTg3MjktMTNiNjY5YmIy MTUzMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjljOTI1NmYtZWZjOC00YWY0LWFlMjItYzgyYTQ0ZjljNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNq8s7Tv88M3MS+nI9nFKejr4IB+k+G3KbQd M1z3e/shd0oCFNxWrfiaxw+GGIIez3pKCDSHe1YzG49jXq03okq5F7D/OJn//PMi IYVxi1THkVj3mQz7qxBBS7Vx0EZexA/ZGLXI6wePJpf2g61GmPrgFY7VwjWUclim u67jABNtHfviZXOW8BoZ/Y9mauCYYWJjb46yT6b1bPlTNvEtkB3eNrHioY0TMJh2 f44vzP2OXyp+mx3slzeP50BliH2nXTEvdW7+eHLbvI7ymxmPaRKT7hIezi+g15VR tVMdqlQtLyFvLOsm5oEq3ytyZNdSyfdfI3BcFRG+QwYrDRJgoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKbrT/Z0+bfi2JVyenGUg9Fw1KDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5 ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2NjliYjIxNTMvMjk0YmEwN2MtMjcwMS0z MGQzLWExZTMtZDYyYWZlN2FjZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI5OWY2NTYtNTY2NS00NjliLTg3 MjktMTNiNjY5YmIyMTUzLzMyOTlmNjU2LTU2NjUtNDY5Yi04NzI5LTEzYjY2OWJi MjE1My5jcmwwHwYDVR0jBBgwFoAUGRM7HR1eZ5k1QsfcC6zSG4kLdGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjk5ZjY1Ni01NjY1LTQ2OWItODcyOS0xM2I2 NjliYjIxNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAABpw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNaoHDiXLjuGXovufThggSZhUKvlaJoUuegBy86M0r86CqSP4jR U77X5G/+FqzCLVSTMk2BaGHrZWaP13QRDrEfXU8ROPprE6UUz5MxzOCCy0BE9OCJ cW2r3bix7hbqQxNorYtaBevN+V6OLUQWhtD3Y84buSnjwhee9w/mjxntfekXM+N0 Kzj3YpF2XVf8R8O8WM8brRig9pockw5mMG/ZdtTNp1Z+aNG+GHut8f5+thD4om7Z NrVGlBsAZHo21euypW5IRjdMypH7O8B+UIj0HIx1DFSj6Xyf+eSYSufsdX9XvTp3 LDxAM4NlEZe79GKoA7g93u3ZaEofwo8rG00= -----END CERTIFICATE-----Generated at Wed May 13 12:38:26 2026 by rpki-client