$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/613de6e3-e5db-360a-bd3d-6265aabfe4d3.roa File: 613de6e3-e5db-360a-bd3d-6265aabfe4d3.roa (raw, json) Hash identifier: 26NVbbIx5X7QCLSQ1RgJBR9MNqNTklwFEM+wH2FdmV4= Subject key identifier: B1:70:EC:55:07:F9:94:18:53:C5:2D:7E:79:14:FB:2E:A8:CE:8C:74 Certificate issuer: /CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Certificate serial: 010D0C9F4328584D961858B671F5DDF81D7D6100 Authority key identifier: 19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/613de6e3-e5db-360a-bd3d-6265aabfe4d3.roa Signing time: Wed 22 Apr 2026 02:21:53 +0000 ROA not before: Wed 22 Apr 2026 02:21:53 +0000 ROA not after: Tue 21 Jul 2026 02:21:53 +0000 asID: 3855 IP address blocks: 2605:5b80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:96:18:58:b6:71:f5:dd:f8:1d:7d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f65c9e2-b250-402e-aa3e-eb6f9552d378 Validity Not Before: Apr 22 02:21:53 2026 GMT Not After : Jul 21 02:21:53 2026 GMT Subject: CN=d86712b2-428b-4ebb-a399-f0f1f60ef6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:1d:87:13:77:51:51:13:62:38:f4:e9:f6: 6c:ad:2c:8e:dc:3b:8c:56:2d:40:2c:9c:bd:89:12: 53:47:8d:73:0e:2d:a6:a8:c1:29:c5:1a:19:4a:9d: 4b:e3:59:c0:64:d0:0c:2e:85:a9:b6:91:87:52:b6: 65:71:56:d5:72:ce:8b:44:c2:d4:cd:22:f6:9f:8a: 11:8c:8b:7a:42:b1:63:c3:a1:3b:13:8a:82:61:21: ab:47:5f:67:35:b2:69:2e:7b:7f:f8:06:f9:6a:f4: 3b:10:b5:8d:2d:8b:93:53:82:4a:cd:4a:53:01:51: fe:8d:a9:b1:bd:71:6a:9a:07:14:25:a7:74:b5:65: 65:f5:c6:63:3b:2f:50:ba:f3:44:d3:3c:9b:5d:48: 50:ae:0e:a6:02:e2:24:68:46:42:66:36:07:73:20: 5f:ab:ae:ec:c3:44:da:25:9b:bf:4c:dd:85:e5:ec: 37:85:4f:74:6b:70:76:8d:24:d5:49:7a:95:01:1f: 4d:d0:55:d9:3a:4d:1d:41:92:c9:7d:7e:61:ab:1c: a0:f3:81:cf:af:5c:2a:6b:57:20:8f:5f:b0:9a:f4: 45:34:de:8a:17:36:c2:d1:65:74:d1:81:04:fe:1a: e4:c3:27:01:0d:d4:fc:71:ca:f3:b1:fc:4d:5d:24: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:70:EC:55:07:F9:94:18:53:C5:2D:7E:79:14:FB:2E:A8:CE:8C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/613de6e3-e5db-360a-bd3d-6265aabfe4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378/6f65c9e2-b250-402e-aa3e-eb6f9552d378.crl X509v3 Authority Key Identifier: keyid:19:32:7F:F7:D4:07:EF:BC:E0:B8:AB:37:CC:34:96:F5:C7:84:B6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f65c9e2-b250-402e-aa3e-eb6f9552d378.cer sbgp-ipAddrBlock: critical IPv6: 2605:5b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3a:a2:99:39:46:df:0b:fa:72:54:fd:14:64:2c:71:c5:74: fc:ac:0c:14:50:fd:27:d8:f2:21:be:03:5a:2f:97:08:84:63: 39:d0:95:45:54:66:ef:b4:4f:97:6d:cf:f3:f0:10:c6:83:2a: 79:5f:43:25:e4:6a:5e:86:27:00:68:a6:bd:2d:b5:54:f5:06: 79:e3:d6:51:00:75:ae:0a:9c:3c:32:25:9b:8c:9a:06:59:52: aa:c7:18:43:53:a0:8b:09:dc:9f:b4:e9:19:74:c1:54:6c:2a: 1c:0d:df:20:f8:6f:9c:9d:da:bd:79:87:b2:2e:04:13:7b:29: 95:40:a9:8e:26:1c:2c:5d:63:95:a1:de:85:ff:7d:a6:59:7a: 2b:18:24:7f:10:cc:87:90:21:fe:f1:ff:e9:f6:7d:bb:72:6f: 38:fc:23:bb:d6:9f:f5:2e:99:ae:f8:d3:cc:dc:e4:22:fa:99: d5:b8:17:30:d0:71:3a:48:d0:6b:df:87:54:48:15:49:e7:35: 11:90:6b:60:09:66:8c:fd:33:c2:f6:f4:3c:b5:1d:5a:d2:79: 85:e1:5b:39:c5:3b:80:2e:06:d6:23:a9:a2:52:be:14:35:83: 37:d9:35:1f:e2:ea:81:db:6f:6a:cc:81:00:fe:4d:bc:36:01: 1e:bc:b4:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2WGFi2cfXd+B19YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY2NWM5ZTItYjI1MC00MDJlLWFhM2UtZWI2Zjk1NTJk Mzc4MB4XDTI2MDQyMjAyMjE1M1oXDTI2MDcyMTAyMjE1M1owLzEtMCsGA1UEAxMk ZDg2NzEyYjItNDI4Yi00ZWJiLWEzOTktZjBmMWY2MGVmNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfYdhxN3UVETYjj06fZsrSyO3DuMVi1ALJy9 iRJTR41zDi2mqMEpxRoZSp1L41nAZNAMLoWptpGHUrZlcVbVcs6LRMLUzSL2n4oR jIt6QrFjw6E7E4qCYSGrR19nNbJpLnt/+Ab5avQ7ELWNLYuTU4JKzUpTAVH+jamx vXFqmgcUJad0tWVl9cZjOy9QuvNE0zybXUhQrg6mAuIkaEZCZjYHcyBfq67sw0Ta JZu/TN2F5ew3hU90a3B2jSTVSXqVAR9N0FXZOk0dQZLJfX5hqxyg84HPr1wqa1cg j1+wmvRFNN6KFzbC0WV00YEE/hrkwycBDdT8ccrzsfxNXSSa4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFw7FUH+ZQYU8UtfnkU+y6ozox0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1 YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZmOTU1MmQzNzgvNjEzZGU2ZTMtZTVkYi0z NjBhLWJkM2QtNjI2NWFhYmZlNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY2NWM5ZTItYjI1MC00MDJlLWFh M2UtZWI2Zjk1NTJkMzc4LzZmNjVjOWUyLWIyNTAtNDAyZS1hYTNlLWViNmY5NTUy ZDM3OC5jcmwwHwYDVR0jBBgwFoAUGTJ/99QH77zguKs3zDSW9ceEtoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjY1YzllMi1iMjUwLTQwMmUtYWEzZS1lYjZm OTU1MmQzNzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJOqKZOUbfC/pyVP0UZCxxxXT8rAwUUP0n2PIhvgNaL5cIhGM50JVF VGbvtE+Xbc/z8BDGgyp5X0Ml5GpehicAaKa9LbVU9QZ549ZRAHWuCpw8MiWbjJoG WVKqxxhDU6CLCdyftOkZdMFUbCocDd8g+G+cndq9eYeyLgQTeymVQKmOJhwsXWOV od6F/32mWXorGCR/EMyHkCH+8f/p9n27cm84/CO71p/1Lpmu+NPM3OQi+pnVuBcw 0HE6SNBr34dUSBVJ5zURkGtgCWaM/TPC9vQ8tR1a0nmF4Vs5xTuALgbWI6miUr4U NYM32TUf4uqB229qzIEA/k28NgEevLRt -----END CERTIFICATE-----Generated at Tue May 12 21:39:19 2026 by rpki-client