$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa File: 9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa (raw, json) Hash identifier: mMOjY1i7MVX5WESSIJdoHsUpQRflJlNZorc8jtrkflg= Subject key identifier: 3B:7B:9B:AD:AB:22:E9:D8:69:15:86:72:59:AA:65:A0:73:D6:07:42 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DA6B028A41DD6FD7E61EDA300 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2607:f380:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:28:a4:1d:d6:fd:7e:61:ed:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=854c7c2d-9faf-48ad-9afb-3892ab1a66fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:f0:40:0a:74:e9:20:03:a4:ad:17:d8:c8: 9a:df:7d:41:b3:3a:c2:83:38:78:62:a7:69:0d:2c: ce:92:78:a0:74:bd:2a:6c:ed:77:ed:25:50:52:f7: 02:83:0c:cc:f9:24:08:79:dd:0e:c9:2e:d1:03:3e: 54:79:3b:a1:d1:5e:fc:bc:f2:3a:f1:56:68:fd:e3: 39:0b:e4:f2:64:0e:90:09:53:35:e2:a0:29:ae:9e: 5a:6f:f6:f3:05:54:9c:8e:8c:5b:61:e2:47:05:67: c4:eb:6b:57:b7:42:3e:23:4c:a0:62:4b:5f:30:ac: bd:5d:58:16:14:bc:b5:4d:85:73:82:85:51:9b:f8: 57:b1:dd:52:68:84:ac:76:10:83:9b:b3:ef:cf:d8: c3:7c:a8:9c:b0:92:ca:0e:ad:b4:dd:79:78:9b:91: fe:39:54:11:95:a1:99:28:5b:39:bb:93:d5:1c:64: 11:28:7e:2f:c9:19:36:83:46:72:67:51:aa:41:7c: ee:10:cb:84:95:c1:44:43:fe:fe:94:a2:b5:9e:bf: c9:1a:78:00:32:e4:fa:9c:7d:4a:20:86:e5:b6:89: 2e:54:de:69:e3:d6:73:90:fa:e6:ea:26:25:dd:a6: 00:bf:2c:a7:9a:fa:f5:66:b9:9a:4d:20:40:18:93: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7B:9B:AD:AB:22:E9:D8:69:15:86:72:59:AA:65:A0:73:D6:07:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/9ce4138c-d3af-3bd5-8394-4887dfeb03d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:40:74:73:df:b9:5c:39:b5:1e:af:73:0c:c7:2d:ed:44:ff: 3d:73:aa:bc:ee:b1:ea:64:18:39:0d:e4:05:f9:54:28:3a:f6: 81:f1:10:a6:7a:9d:f4:4b:0b:b6:cc:67:9b:00:50:7b:35:65: 3b:94:0e:7c:a6:34:17:4b:0b:67:54:20:85:15:5f:2c:16:7c: c0:d5:3b:7d:a9:5a:b8:08:19:c9:50:f1:e6:38:0e:cd:6b:dd: 6b:7b:dd:85:02:27:b8:8f:ab:85:18:3a:8f:ec:a1:d4:4c:86: cc:1c:e5:0a:53:5d:e6:9e:67:7d:0e:60:73:7a:ae:cf:76:74: 79:eb:60:bf:1a:7e:6c:b0:d8:b2:90:b7:56:76:63:29:84:11: 19:25:ce:d9:82:9f:9e:bf:1b:31:6a:a2:f5:66:42:aa:5b:96: 29:dd:c9:cb:e5:f0:66:21:dc:37:36:8d:75:c9:40:3b:ff:fc: 70:d1:61:b6:2a:6e:4a:67:7c:18:5c:ed:f7:c6:99:23:1c:fe: 82:3c:4d:13:57:b5:76:80:63:72:59:71:e2:2d:91:93:bb:85: 7d:83:6c:5d:90:dd:cb:0c:9b:d0:fc:f6:21:ed:de:81:45:9a: 3f:df:52:b2:be:e3:c7:10:bc:a8:98:56:f1:ce:81:82:9e:19: 5c:9a:6a:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCikHdb9fmHtowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODU0YzdjMmQtOWZhZi00OGFkLTlhZmItMzg5MmFiMWE2NmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9TwQAp06SADpK0X2Mia331BszrCgzh4Yqdp DSzOknigdL0qbO137SVQUvcCgwzM+SQIed0OyS7RAz5UeTuh0V78vPI68VZo/eM5 C+TyZA6QCVM14qAprp5ab/bzBVScjoxbYeJHBWfE62tXt0I+I0ygYktfMKy9XVgW FLy1TYVzgoVRm/hXsd1SaISsdhCDm7Pvz9jDfKicsJLKDq203Xl4m5H+OVQRlaGZ KFs5u5PVHGQRKH4vyRk2g0ZyZ1GqQXzuEMuElcFEQ/7+lKK1nr/JGngAMuT6nH1K IIbltokuVN5p49ZzkPrm6iYl3aYAvyynmvr1ZrmaTSBAGJMgbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDt7m62rIunYaRWGclmqZaBz1gdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvOWNlNDEzOGMtZDNhZi0z YmQ1LTgzOTQtNDg4N2RmZWIwM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABdAdHPfuVw5tR6vcwzHLe1E/z1zqrzusepkGDkN5AX5VCg69oHx EKZ6nfRLC7bMZ5sAUHs1ZTuUDnymNBdLC2dUIIUVXywWfMDVO32pWrgIGclQ8eY4 Ds1r3Wt73YUCJ7iPq4UYOo/sodRMhswc5QpTXeaeZ30OYHN6rs92dHnrYL8afmyw 2LKQt1Z2YymEERklztmCn56/GzFqovVmQqpblindycvl8GYh3Dc2jXXJQDv//HDR YbYqbkpnfBhc7ffGmSMc/oI8TRNXtXaAY3JZceItkZO7hX2DbF2Q3csMm9D89iHt 3oFFmj/fUrK+48cQvKiYVvHOgYKeGVyaajg= -----END CERTIFICATE-----Generated at Wed May 13 13:13:34 2026 by rpki-client