$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cda5630e-a04c-3ceb-8408-88505b98eea2.roa File: cda5630e-a04c-3ceb-8408-88505b98eea2.roa (raw, json) Hash identifier: +UlyKbmDHgykqIBhlR46moNkvSFAwRzsO3XGr+qipMA= Subject key identifier: 32:D7:F9:1A:06:6E:51:39:01:AF:11:D1:51:89:D2:F6:70:D2:F8:84 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DA6B028CB211C2838310E2CC0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cda5630e-a04c-3ceb-8408-88505b98eea2.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 2607:f380:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:28:cb:21:1c:28:38:31:0e:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=6b5dc6c5-2a7b-4bed-950d-7ca6594f49f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:eb:17:77:57:e4:2a:8d:b7:ce:47:9c:0a: c9:ca:e3:c2:32:5f:a5:3d:3a:ef:28:e8:f5:01:20: 25:5b:61:31:7b:9d:40:a6:6b:e1:93:ef:f4:4b:30: 84:1c:b9:77:5c:09:f0:c5:b1:45:67:02:b6:20:59: fd:d2:d7:e8:6f:47:d0:1d:89:62:c5:14:52:9e:77: f7:7b:4a:85:b8:56:23:db:ef:a8:97:46:c3:f6:2e: 86:67:9f:e5:e3:ac:23:a7:86:3f:3e:66:67:ad:a1: 38:aa:7d:12:62:70:17:ef:b4:f0:9c:0b:20:c1:15: 22:5d:6d:db:6b:59:30:2d:00:7a:8d:26:3f:44:da: f5:a6:44:8c:7c:76:28:40:30:05:23:6a:ec:ae:1c: fa:c1:44:b8:5b:e9:ac:d2:91:70:2b:74:47:ac:81: 35:c7:1f:95:48:b7:50:fa:a4:af:4a:8c:07:e0:82: 46:5d:55:5c:b1:7d:66:0b:65:e6:e7:ee:a8:2c:c2: da:4a:cd:fc:51:32:ec:84:09:7f:10:8c:be:e9:d7: a5:7c:e3:f6:a2:7a:1c:1b:49:53:dd:ca:9d:5f:f0: 65:6f:fc:52:21:22:a0:00:98:f5:1c:67:94:b6:b3: 8c:7f:f2:27:7f:26:60:d3:1d:9e:77:a5:95:64:83: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:F9:1A:06:6E:51:39:01:AF:11:D1:51:89:D2:F6:70:D2:F8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cda5630e-a04c-3ceb-8408-88505b98eea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7e:0c:fc:05:c9:d7:a0:64:67:96:88:66:d0:a7:59:9f:ca: 32:ab:79:52:68:58:66:96:59:58:0d:68:09:21:b6:e6:91:54: 2b:dd:89:8b:be:8f:bc:98:10:e1:d1:02:28:7e:1d:ba:86:3e: 9d:1a:b9:a9:96:09:da:75:b2:67:6c:94:d8:96:81:bd:2a:2c: 54:1c:a4:4d:d6:f2:2e:fc:9d:5a:c6:ae:dd:8c:fc:f1:74:c2: 82:f5:19:0e:80:d7:86:5a:f6:9a:92:85:75:c2:3c:18:58:99: 36:2c:98:cd:60:b4:83:f6:f5:94:08:59:e6:c7:2c:41:61:a9: de:a7:bb:6d:d4:cf:66:db:f0:55:68:93:bc:1f:d0:71:22:55: 98:2e:f6:a8:a8:29:c9:ae:5a:20:16:0d:21:04:2b:e1:ee:f7: 62:43:27:58:ee:aa:f1:d7:d9:8f:06:bf:c7:0b:12:1e:b0:f0: 3d:19:3f:f6:d0:3e:99:9b:e3:3b:25:2f:0e:57:81:d3:f7:d5: 34:9a:2a:34:62:c9:72:20:dc:2d:c3:ed:46:3a:b7:37:ba:95: 09:dd:85:3d:95:cd:a7:87:17:a8:00:33:62:6d:82:18:cb:5c: 6d:95:ce:de:57:e2:45:c1:9c:d4:ab:ff:64:69:20:8d:45:f6: 9d:fd:67:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCjLIRwoODEOLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NmI1ZGM2YzUtMmE3Yi00YmVkLTk1MGQtN2NhNjU5NGY0OWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9LrF3dX5CqNt85HnArJyuPCMl+lPTrvKOj1 ASAlW2Exe51Apmvhk+/0SzCEHLl3XAnwxbFFZwK2IFn90tfob0fQHYlixRRSnnf3 e0qFuFYj2++ol0bD9i6GZ5/l46wjp4Y/PmZnraE4qn0SYnAX77TwnAsgwRUiXW3b a1kwLQB6jSY/RNr1pkSMfHYoQDAFI2rsrhz6wUS4W+ms0pFwK3RHrIE1xx+VSLdQ +qSvSowH4IJGXVVcsX1mC2Xm5+6oLMLaSs38UTLshAl/EIy+6delfOP2onocG0lT 3cqdX/Blb/xSISKgAJj1HGeUtrOMf/InfyZg0x2ed6WVZIN1JwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLX+RoGblE5Aa8R0VGJ0vZw0viEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvY2RhNTYzMGUtYTA0Yy0z Y2ViLTg0MDgtODg1MDViOThlZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHl+DPwFydegZGeWiGbQp1mfyjKreVJoWGaWWVgNaAkhtuaRVCvd iYu+j7yYEOHRAih+HbqGPp0auamWCdp1smdslNiWgb0qLFQcpE3W8i78nVrGrt2M /PF0woL1GQ6A14Za9pqShXXCPBhYmTYsmM1gtIP29ZQIWebHLEFhqd6nu23Uz2bb 8FVok7wf0HEiVZgu9qioKcmuWiAWDSEEK+Hu92JDJ1juqvHX2Y8Gv8cLEh6w8D0Z P/bQPpmb4zslLw5XgdP31TSaKjRiyXIg3C3D7UY6tze6lQndhT2VzaeHF6gAM2Jt ghjLXG2Vzt5X4kXBnNSr/2RpII1F9p39Z1A= -----END CERTIFICATE-----Generated at Wed May 13 11:43:44 2026 by rpki-client