$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8253fd5-0d70-3722-835f-5339311277a3.roa File: e8253fd5-0d70-3722-835f-5339311277a3.roa (raw, json) Hash identifier: qMs+HxNoHf96CViyzkeK3bGOSRs8bLy6ggjYZ6lVoKI= Subject key identifier: 44:D4:90:C6:7A:63:6C:65:20:D0:01:E4:4B:09:4E:59:E5:82:D7:42 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DBD05DA1114C897A7E4E96748 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8253fd5-0d70-3722-835f-5339311277a3.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 6167 IP address blocks: 2600:1004:a100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:da:11:14:c8:97:a7:e4:e9:67:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=ae688d4a-dcd6-40ff-99a3-4504e031932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c9:e1:3f:95:02:97:cb:95:d2:22:57:7e:4c: 6b:8c:f7:d8:eb:1a:d9:f1:96:db:28:52:6f:5a:7d: 11:87:23:41:63:2e:95:7c:94:56:08:f3:21:b7:98: 9b:92:91:f9:63:6d:20:02:b7:21:66:d5:22:bc:fa: 83:b1:ca:cf:f3:d1:87:f1:6f:1d:5b:da:d4:5a:eb: ae:02:d7:51:1c:5d:f9:71:82:4c:f2:2b:b9:e5:8f: a4:72:30:a0:e8:ea:2c:6e:d2:42:2c:33:4f:29:0c: 0f:0d:e0:1d:98:2b:dd:14:ec:ce:bd:81:9c:ef:ed: a1:16:1c:09:e5:9b:12:1f:2c:3c:3e:8b:17:88:c2: 3f:58:a0:fd:eb:a8:cc:10:29:36:32:c2:eb:6f:c1: 0b:3c:25:55:42:94:b6:0f:7f:4a:0a:6d:76:d5:6f: b6:d4:6c:49:dc:98:71:71:91:da:a1:52:45:81:9b: 34:3d:2e:c2:d3:19:3a:96:27:87:3b:99:c1:3b:c3: e7:b4:09:9b:b7:e9:1d:88:d8:61:c9:f0:6e:44:01: da:09:b1:16:64:1f:7e:ae:c3:c4:f3:41:f8:96:0d: 35:f2:66:04:7d:2f:01:bb:69:eb:b6:aa:17:12:77: dc:2e:de:34:fa:a7:a3:f4:3b:d7:6f:0d:11:f2:4d: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:90:C6:7A:63:6C:65:20:D0:01:E4:4B:09:4E:59:E5:82:D7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8253fd5-0d70-3722-835f-5339311277a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1004:a100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:70:3a:4f:47:8e:17:46:9d:37:8d:bf:88:e7:0e:eb:e4:e3: 74:e5:dc:28:2a:f0:9a:a7:fc:44:46:30:8b:d1:26:de:81:d7: 21:82:de:80:a0:45:b3:13:4d:85:51:90:c2:e4:2a:5e:39:03: 93:91:d8:38:e0:a0:80:a8:62:4b:2a:ad:f6:c5:02:75:8b:23: 1f:18:99:e2:d9:7e:c9:da:0e:c6:64:f2:36:a2:0e:0c:b4:e0: e6:5d:be:60:4a:16:07:d4:14:10:81:df:38:d4:10:81:d3:1d: 09:29:d0:31:aa:f5:26:af:47:6f:ea:23:a5:38:cf:00:96:62: 6f:d2:6b:47:ff:7b:2a:8c:22:e0:d6:ee:30:61:7f:2a:2d:66: ee:ad:2c:50:4a:65:ca:91:66:7d:f3:0c:3b:8e:ef:bd:b2:da: f9:28:73:d1:e2:ad:4f:6b:1e:a7:ff:b6:8f:c2:f0:c9:89:36: 67:9a:d7:1e:17:bd:6c:f6:24:1a:93:ef:c1:91:35:88:ac:c3: 72:a5:86:79:18:f5:a9:82:ec:18:79:8b:94:5e:7f:20:e8:0d: 79:a8:e3:49:1c:67:ae:be:4b:63:cc:fc:71:fe:3b:72:dd:bb: f6:41:f9:39:39:db:3e:14:1d:05:70:97:22:34:da:19:4a:d9: a2:c9:d4:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29BdoRFMiXp+TpZ0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk YWU2ODhkNGEtZGNkNi00MGZmLTk5YTMtNDUwNGUwMzE5MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMnhP5UCl8uV0iJXfkxrjPfY6xrZ8ZbbKFJv Wn0RhyNBYy6VfJRWCPMht5ibkpH5Y20gArchZtUivPqDscrP89GH8W8dW9rUWuuu AtdRHF35cYJM8iu55Y+kcjCg6OosbtJCLDNPKQwPDeAdmCvdFOzOvYGc7+2hFhwJ 5ZsSHyw8PosXiMI/WKD966jMECk2MsLrb8ELPCVVQpS2D39KCm121W+21GxJ3Jhx cZHaoVJFgZs0PS7C0xk6lieHO5nBO8PntAmbt+kdiNhhyfBuRAHaCbEWZB9+rsPE 80H4lg018mYEfS8Bu2nrtqoXEnfcLt40+qej9DvXbw0R8k3z2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFETUkMZ6Y2xlINAB5EsJTlnlgtdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTgyNTNmZDUtMGQ3MC0z NzIyLTgzNWYtNTMzOTMxMTI3N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBKEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNwOk9HjhdGnTeNv4jnDuvk43Tl3Cgq8Jqn/ERGMIvRJt6B1yGC 3oCgRbMTTYVRkMLkKl45A5OR2DjgoICoYksqrfbFAnWLIx8YmeLZfsnaDsZk8jai Dgy04OZdvmBKFgfUFBCB3zjUEIHTHQkp0DGq9SavR2/qI6U4zwCWYm/Sa0f/eyqM IuDW7jBhfyotZu6tLFBKZcqRZn3zDDuO772y2vkoc9HirU9rHqf/to/C8MmJNmea 1x4XvWz2JBqT78GRNYisw3KlhnkY9amC7Bh5i5RefyDoDXmo40kcZ66+S2PM/HH+ O3Ldu/ZB+Tk52z4UHQVwlyI02hlK2aLJ1Fw= -----END CERTIFICATE-----Generated at Wed May 13 14:28:49 2026 by rpki-client