$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa File: dc0da51e-bddf-385a-bee9-51758d38ce9e.roa (raw, json) Hash identifier: fesrSx3ap/hKNSW6IVxJe3R2va3hP30VKoEdegKAHzA= Subject key identifier: C2:F2:B0:CB:1B:F4:48:ED:52:61:DB:A2:C6:E7:92:7C:A8:5F:02:55 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584DB7703427CEDF41150124A760 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 40627 IP address blocks: 2620:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:34:27:ce:df:41:15:01:24:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=299cecd2-b1fb-4235-856a-611eaaa7a64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:86:79:60:ae:6f:ca:22:3a:76:1f:c0:e6: e1:30:a1:84:4b:b5:ff:20:ed:ad:dc:68:5b:cd:c9: ab:7c:2c:34:27:d0:29:48:ad:30:aa:7f:d2:fc:24: 87:85:74:86:d8:25:27:6e:48:f4:13:a5:00:7c:98: f2:12:78:b4:66:3f:b3:3a:c3:76:5f:13:bc:78:ad: 7a:93:70:44:00:52:dc:02:d3:84:9d:f2:41:0f:58: aa:25:fe:b6:dc:4f:50:8b:71:13:5a:46:8f:80:7b: 47:ce:92:c4:6e:d6:7d:46:0a:d1:3d:29:f4:f9:74: bb:ae:ae:11:67:ae:cb:5c:aa:89:09:31:24:06:80: f4:ec:38:92:03:79:57:38:31:47:d2:66:58:8a:d4: 37:aa:86:3f:8b:11:d5:df:b7:da:0f:f8:79:ee:88: 1d:10:fb:91:4e:da:ef:5d:bb:b9:5d:04:15:06:a7: 61:f5:55:0d:f1:bd:00:49:9b:cf:5c:f2:5e:87:35: 27:3d:5e:d1:ff:f2:7e:5f:dc:ab:b2:95:d9:da:26: 1c:3c:d9:2e:40:2c:4d:44:5d:63:ec:74:b6:74:8b: be:06:f7:57:30:b2:63:c4:3b:65:4f:4e:b1:90:8f: 57:97:10:10:d6:d4:1c:1d:6c:bc:3f:d9:2c:43:e6: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:B0:CB:1B:F4:48:ED:52:61:DB:A2:C6:E7:92:7C:A8:5F:02:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/dc0da51e-bddf-385a-bee9-51758d38ce9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv6: 2620:77::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bf:5e:24:61:5e:07:2b:53:4e:c3:4b:65:f9:99:d8:57:f8: d1:54:dc:db:ba:16:c3:22:9f:16:e3:54:3a:d7:05:5f:ab:d9: 9a:d2:3a:c2:ff:64:60:c6:11:53:10:0a:12:bb:36:39:02:66: 70:05:6d:1f:59:df:a8:95:76:98:25:fb:0c:74:64:e8:29:8e: 02:bb:a7:4a:e3:30:1e:a5:d7:2f:ec:e6:f4:38:39:a8:a2:35: 86:5b:46:b4:f5:f9:8f:18:cd:f1:b7:6c:8b:98:7c:4a:fe:15: 1b:35:c4:a3:89:25:aa:18:40:11:ac:4d:8c:95:28:a7:f2:6b: e3:d7:f2:e9:80:d8:54:1b:0c:c9:3d:fa:2a:0c:fc:11:e6:41: 58:07:84:53:50:d2:78:51:c4:e8:85:a5:dc:35:d1:db:32:da: 31:09:aa:68:df:4b:2a:e0:52:30:3e:c5:b7:4c:71:2e:20:24: 64:b0:67:c5:d1:c2:bd:b4:77:bf:88:c1:59:28:2f:9c:7b:52: 7f:19:dd:7e:45:47:75:44:a1:ce:e2:98:dd:f7:eb:bb:92:2b: f4:c2:eb:15:67:5f:8c:e4:aa:eb:7a:44:63:69:bd:3d:a7:7c: d1:b0:09:7f:39:0f:26:57:04:a6:6a:1f:f9:07:01:4b:87:9b: 9c:aa:a7:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE23cDQnzt9BFQEkp2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk Mjk5Y2VjZDItYjFmYi00MjM1LTg1NmEtNjExZWFhYTdhNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mKGeWCub8oiOnYfwObhMKGES7X/IO2t3Ghb zcmrfCw0J9ApSK0wqn/S/CSHhXSG2CUnbkj0E6UAfJjyEni0Zj+zOsN2XxO8eK16 k3BEAFLcAtOEnfJBD1iqJf623E9Qi3ETWkaPgHtHzpLEbtZ9RgrRPSn0+XS7rq4R Z67LXKqJCTEkBoD07DiSA3lXODFH0mZYitQ3qoY/ixHV37faD/h57ogdEPuRTtrv Xbu5XQQVBqdh9VUN8b0ASZvPXPJehzUnPV7R//J+X9yrspXZ2iYcPNkuQCxNRF1j 7HS2dIu+BvdXMLJjxDtlT06xkI9XlxAQ1tQcHWy8P9ksQ+ZLSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLysMsb9EjtUmHbosbnknyoXwJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZGMwZGE1MWUtYmRkZi0z ODVhLWJlZTktNTE3NThkMzhjZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABC/XiRhXgcrU07DS2X5mdhX+NFU3Nu6FsMinxbjVDrXBV+r2ZrS OsL/ZGDGEVMQChK7NjkCZnAFbR9Z36iVdpgl+wx0ZOgpjgK7p0rjMB6l1y/s5vQ4 OaiiNYZbRrT1+Y8YzfG3bIuYfEr+FRs1xKOJJaoYQBGsTYyVKKfya+PX8umA2FQb DMk9+ioM/BHmQVgHhFNQ0nhRxOiFpdw10dsy2jEJqmjfSyrgUjA+xbdMcS4gJGSw Z8XRwr20d7+IwVkoL5x7Un8Z3X5FR3VEoc7imN3367uSK/TC6xVnX4zkqut6RGNp vT2nfNGwCX85DyZXBKZqH/kHAUuHm5yqp8Q= -----END CERTIFICATE-----Generated at Wed May 13 09:45:01 2026 by rpki-client