$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa File: 2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (raw, json) Hash identifier: rF0zCuLO3JFI1pj7HDIzZQAdyaqxljgh3krXDfl64Co= Subject key identifier: 11:9E:EE:54:AD:86:A8:25:9D:65:63:84:F1:0F:6B:77:5B:28:FB:95 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F4328584DC565903293C37F0EB4090A70 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 36374 IP address blocks: 2604:4200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:90:32:93:c3:7f:0e:b4:09:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=0a89b827-4a23-4a4b-bbe5-0fad5dbec724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:c1:f0:01:b1:bc:fe:44:9c:1c:16:f2:62: 48:58:e8:01:4a:f4:79:6b:d1:b5:af:ff:cb:bc:64: df:6a:dc:fb:94:59:b5:bb:9a:a4:9c:9c:ce:26:75: da:a9:35:75:c9:96:86:57:86:32:08:04:4d:2f:38: bf:e7:29:a6:05:a0:f2:59:cb:0a:6a:36:33:fe:42: dd:1a:13:da:36:e0:1b:a5:10:b3:62:9c:38:ed:57: 89:27:87:41:68:9f:9c:90:a4:31:b6:3b:cc:98:fb: 79:a6:43:18:50:85:44:08:34:d6:16:be:ef:b6:71: 26:d4:cc:df:f8:17:fb:7c:ac:cb:1c:bc:ab:8a:71: cf:6d:f5:54:55:ee:f1:25:50:23:4b:95:6e:2c:c7: 1f:78:b5:fb:45:89:8d:80:14:0b:79:86:50:42:2a: b4:ee:2c:ed:62:d9:dd:7e:15:7d:7e:0c:53:0e:08: 21:b9:4e:b8:fd:42:45:69:51:55:fe:64:94:51:53: c1:ec:2f:3f:9c:35:03:c7:e1:c5:a0:d7:ac:b1:8f: b2:83:e3:65:10:6d:26:60:d2:c4:9f:f3:2c:b9:96: 2d:07:64:b7:3d:a6:f3:c6:4a:41:3f:62:15:03:a9: 6c:f3:f2:16:43:ab:97:a7:f0:b2:8d:a1:6e:44:15: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9E:EE:54:AD:86:A8:25:9D:65:63:84:F1:0F:6B:77:5B:28:FB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv6: 2604:4200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ac:43:c7:6d:12:85:ba:7a:d6:4d:6a:28:1a:4d:ba:43:12: fb:3c:d5:a3:e7:ce:11:79:00:5f:22:5b:ee:a8:37:ee:01:57: 57:c2:ce:af:42:ac:f9:7a:fb:a7:35:47:1b:cd:0d:b6:d0:7f: dc:97:a4:ca:d5:37:b6:c9:a4:34:47:2c:69:da:9b:3a:22:26: f8:ee:77:03:4c:68:00:93:60:6d:5b:10:ef:bf:08:24:3d:82: 54:34:5a:66:f3:fa:f8:0b:4a:a6:05:81:0f:82:c7:ef:e2:0b: 5e:c6:56:bd:de:c7:a0:a7:f2:ed:32:04:3d:98:13:71:51:ed: 87:10:ea:17:fa:43:6f:1d:f8:d1:5d:5b:fe:56:80:ad:a5:6c: 58:53:6c:9e:4d:e2:37:10:94:03:59:8a:a8:52:f0:40:bd:4c: 34:43:f6:bf:c4:a0:78:2c:b3:a5:f7:a9:44:89:7b:31:3d:6f: 5b:81:df:00:36:62:3b:ac:b5:5e:b6:9b:05:09:c0:db:76:bb: 5a:36:c4:b7:b4:cb:d0:dd:78:a9:b2:32:31:8e:d1:d1:0d:5f: 4c:49:fe:01:d5:5c:aa:88:29:0c:d4:cd:2a:94:a8:5f:88:d5: 5a:76:48:1c:63:9d:65:33:b8:4c:a8:40:a6:96:f3:60:0f:8d: fd:71:9e:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3FZZAyk8N/DrQJCnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk MGE4OWI4MjctNGEyMy00YTRiLWJiZTUtMGZhZDVkYmVjNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4PB8AGxvP5EnBwW8mJIWOgBSvR5a9G1r//L vGTfatz7lFm1u5qknJzOJnXaqTV1yZaGV4YyCARNLzi/5ymmBaDyWcsKajYz/kLd GhPaNuAbpRCzYpw47VeJJ4dBaJ+ckKQxtjvMmPt5pkMYUIVECDTWFr7vtnEm1Mzf +Bf7fKzLHLyrinHPbfVUVe7xJVAjS5VuLMcfeLX7RYmNgBQLeYZQQiq07iztYtnd fhV9fgxTDgghuU64/UJFaVFV/mSUUVPB7C8/nDUDx+HFoNessY+yg+NlEG0mYNLE n/MsuZYtB2S3PabzxkpBP2IVA6ls8/IWQ6uXp/CyjaFuRBV/5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGe7lSthqglnWVjhPEPa3dbKPuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvMmUyNWQ4N2YtMDUxZC0z ZDZlLWE3NTUtYzAzYjZmYjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsrEPHbRKFunrWTWooGk26QxL7PNWj584ReQBfIlvuqDfuAVdXws6v Qqz5evunNUcbzQ220H/cl6TK1Te2yaQ0Ryxp2ps6Iib47ncDTGgAk2BtWxDvvwgk PYJUNFpm8/r4C0qmBYEPgsfv4gtexla93segp/LtMgQ9mBNxUe2HEOoX+kNvHfjR XVv+VoCtpWxYU2yeTeI3EJQDWYqoUvBAvUw0Q/a/xKB4LLOl96lEiXsxPW9bgd8A NmI7rLVetpsFCcDbdrtaNsS3tMvQ3XipsjIxjtHRDV9MSf4B1VyqiCkM1M0qlKhf iNVadkgcY51lM7hMqECmlvNgD439cZ4E -----END CERTIFICATE-----Generated at Wed May 13 07:43:28 2026 by rpki-client