$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa File: cfcc50c5-85a1-3171-9f0f-8655231e6995.roa (raw, json) Hash identifier: aUK+0orb2ju8KcVQ6YBn0wU5vRmsyEQk3I1NTqFaHV4= Subject key identifier: 95:D8:24:1D:4D:73:A2:AE:6E:A9:ED:73:AC:B3:BE:14:19:55:2A:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DBD05AE8C666985C3FF4C1180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 6167 IP address blocks: 2600:1002:b020::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:ae:8c:66:69:85:c3:ff:4c:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=5cd01d95-5b72-4a47-babc-b37d3a2b5d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:74:5b:3a:65:b0:df:b0:e1:de:26:36:b3: e3:64:17:f4:ac:14:c2:c5:10:d7:74:3a:8e:62:f4: b5:91:db:80:c5:5a:11:94:72:2c:65:19:51:70:d9: e7:7d:57:7e:dd:c6:59:ae:1d:48:b8:d0:86:7e:96: 0c:80:30:0d:2b:53:d8:ba:ab:b8:05:e2:e8:82:c5: d0:1b:5d:3f:55:b6:d6:d9:92:b4:26:8c:57:04:0f: b1:4f:69:cc:ef:23:a4:81:cf:d0:17:20:cc:2f:90: 8f:49:95:b5:df:bf:81:03:26:6f:d5:c8:63:07:d8: d0:a3:be:71:ef:8e:22:c7:48:47:e0:ce:c4:1a:f0: 18:44:0f:17:da:8e:51:cd:e5:f4:34:3a:f5:d1:5c: bd:f2:bc:55:6b:8e:bf:05:ca:d0:cc:c5:cd:15:be: e7:3f:12:37:8e:db:d3:1b:9f:b0:93:3b:e1:63:0b: 72:e3:fb:73:95:c1:04:23:32:17:d7:8b:65:ed:58: 02:39:6a:b3:df:dd:bc:ae:39:ea:90:96:48:fa:e8: bc:ee:f4:d5:f6:8a:a0:64:02:20:cb:1b:56:09:10: 72:0a:5f:f4:97:fd:a5:f2:3d:56:39:d4:e0:aa:2a: 9a:39:6b:f3:8c:a8:5a:3f:99:18:b2:a0:23:75:fc: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D8:24:1D:4D:73:A2:AE:6E:A9:ED:73:AC:B3:BE:14:19:55:2A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1002:b020::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f3:83:c8:36:0f:36:64:21:63:6e:fc:3c:cb:10:b2:41:68: f0:03:b3:3d:0c:86:36:60:66:8c:2e:5a:31:e6:1b:d5:9c:31: f0:a8:0c:7b:ed:a5:9c:b0:41:15:e6:6d:62:8b:85:3f:25:fd: 85:a7:98:c3:35:d3:95:14:0b:a4:ef:6d:2d:e0:fb:d2:50:93: 42:2d:52:39:ff:69:1a:16:d8:21:a3:98:66:1b:06:30:e9:4b: 25:b1:cf:ec:24:5d:6a:47:a6:c1:e7:2b:c3:5d:88:3b:0b:e7: d8:73:2e:a1:e5:47:7c:0b:a1:11:65:40:6f:11:3e:d1:8e:b5: 3c:52:12:3c:d9:c2:27:84:ed:95:55:3e:40:f8:c8:c1:ef:67: ab:5f:da:21:21:c9:85:62:53:1e:87:15:0d:ab:19:ad:a4:80: a1:7b:19:ca:f5:2b:44:81:b7:60:c9:50:65:8f:87:78:bc:b5: 6d:83:c9:3b:d7:b7:b0:21:a8:d1:f7:9c:79:ed:e7:ae:75:ed: f9:20:4a:11:b1:be:84:0b:74:5c:89:df:85:ee:d7:57:ca:59: dd:25:17:8f:bd:fb:94:07:91:49:cb:7e:d3:b6:2c:61:70:3c: e5:44:c4:d6:39:eb:9f:5a:d7:a4:57:08:cc:ca:92:87:b9:80: f6:6e:a6:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29Ba6MZmmFw/9MEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NWNkMDFkOTUtNWI3Mi00YTQ3LWJhYmMtYjM3ZDNhMmI1ZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtt0WzplsN+w4d4mNrPjZBf0rBTCxRDXdDqO YvS1kduAxVoRlHIsZRlRcNnnfVd+3cZZrh1IuNCGfpYMgDANK1PYuqu4BeLogsXQ G10/VbbW2ZK0JoxXBA+xT2nM7yOkgc/QFyDML5CPSZW137+BAyZv1chjB9jQo75x 744ix0hH4M7EGvAYRA8X2o5RzeX0NDr10Vy98rxVa46/BcrQzMXNFb7nPxI3jtvT G5+wkzvhYwty4/tzlcEEIzIX14tl7VgCOWqz3928rjnqkJZI+ui87vTV9oqgZAIg yxtWCRByCl/0l/2l8j1WOdTgqiqaOWvzjKhaP5kYsqAjdfz1wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJXYJB1Nc6Kubqntc6yzvhQZVSoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2ZjYzUwYzUtODVhMS0z MTcxLTlmMGYtODY1NTIzMWU2OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvzg8g2DzZkIWNu/DzLELJBaPADsz0MhjZgZowuWjHmG9WcMfCo DHvtpZywQRXmbWKLhT8l/YWnmMM105UUC6TvbS3g+9JQk0ItUjn/aRoW2CGjmGYb BjDpSyWxz+wkXWpHpsHnK8NdiDsL59hzLqHlR3wLoRFlQG8RPtGOtTxSEjzZwieE 7ZVVPkD4yMHvZ6tf2iEhyYViUx6HFQ2rGa2kgKF7Gcr1K0SBt2DJUGWPh3i8tW2D yTvXt7AhqNH3nHnt56517fkgShGxvoQLdFyJ34Xu11fKWd0lF4+9+5QHkUnLftO2 LGFwPOVExNY5659a16RXCMzKkoe5gPZuptc= -----END CERTIFICATE-----Generated at Wed May 13 13:38:39 2026 by rpki-client