$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa File: a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa (raw, json) Hash identifier: bvEJVyo4OXJihwiKmRao7CYZ7Y58v02OjUbR5OJ+BRc= Subject key identifier: 11:CC:A5:17:37:44:2B:7C:B2:48:BC:8A:4A:AD:96:40:93:6E:B3:80 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584D9E502E200352831046C9FD00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 30103 IP address blocks: 2620:123:20a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2e:20:03:52:83:10:46:c9:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=5b86075a-c0d5-40b6-9101-6cd7f98fa37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:3a:0f:26:e5:f8:be:f1:1b:c6:16:63:6a: 1d:f6:70:04:85:a9:a2:c7:7d:aa:3e:1f:b7:07:f3: 9f:00:db:ac:03:11:32:58:c6:23:52:45:13:2f:88: 48:3c:57:c7:7d:eb:0e:09:cc:92:41:b1:25:b3:0b: 90:a6:1b:7e:7a:fe:0e:74:a5:48:4c:6e:2f:61:de: 43:4a:33:f4:05:4a:4d:5b:17:84:45:94:e2:f7:b7: bb:61:33:2b:33:f6:9d:c4:15:69:66:b5:c5:41:38: 68:ed:26:be:b0:f9:db:21:d0:e0:a9:9a:65:80:23: fd:e9:1a:6c:50:66:97:18:6d:d0:8f:4e:42:2c:20: 2c:21:7b:76:49:97:2e:7d:8e:03:9a:66:12:89:64: ac:44:03:82:9f:c3:90:34:55:28:b5:d3:4a:2c:88: 4d:31:5f:19:23:49:af:09:27:d6:b9:b5:2e:b6:63: 34:74:23:96:4d:9e:92:c1:af:2f:55:0f:f7:50:1c: 3a:86:18:a5:f4:df:a8:8e:0b:d3:6c:d9:c2:21:a7: 60:f6:d7:c7:36:b1:d3:49:56:a7:c6:e3:f2:d8:44: 66:be:c5:46:5b:4a:a2:b9:e2:6c:59:18:66:93:81: 96:0d:73:15:e0:6b:b1:33:24:29:cb:92:46:e9:e1: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:A5:17:37:44:2B:7C:B2:48:BC:8A:4A:AD:96:40:93:6E:B3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:20a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a9:64:be:24:92:c1:ec:9d:12:58:97:a5:ab:0e:b8:5e:fe: 83:f2:08:d5:21:fc:9d:aa:d5:5c:a3:82:b5:87:80:a8:9f:b9: 74:cd:69:63:25:1a:4f:94:2a:82:a8:f1:a0:cd:f6:92:91:ee: 96:0b:f7:59:3e:7e:66:2c:75:e8:1a:17:b0:43:ae:de:5b:cd: 24:98:18:57:f9:73:78:3f:2f:35:be:3e:1a:10:15:d4:a0:27: 6b:35:f0:9d:fb:b1:c7:db:e8:7a:d7:e0:c1:ac:77:7c:aa:c5: 45:1c:78:bb:df:1e:33:e7:39:d9:38:8a:bf:6e:96:d6:40:e5: c3:f7:bf:62:65:16:82:2c:e2:19:dc:2f:cf:13:16:3c:5d:7e: 30:0b:ec:dc:cb:cb:c4:9a:15:40:12:68:b1:6d:6a:44:8c:97: bd:66:ab:29:90:74:a1:ba:1e:0e:81:5d:10:3d:dc:92:cd:49: 21:61:e8:5b:1c:7f:7d:f3:e5:df:69:cb:b6:8d:fb:ee:f0:91: ac:f2:b2:18:10:bc:ae:e6:56:5a:f1:af:d4:a7:44:28:c3:3f: 0a:b0:a3:3d:39:e0:03:b6:58:36:f6:d5:22:1c:6b:52:67:ca: e2:8a:89:fc:99:57:5a:97:80:17:a1:99:e6:36:64:04:d8:3c: 4e:5f:24:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eUC4gA1KDEEbJ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWI4NjA3NWEtYzBkNS00MGI2LTkxMDEtNmNkN2Y5OGZhMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/06Dybl+L7xG8YWY2od9nAEhamix32qPh+3 B/OfANusAxEyWMYjUkUTL4hIPFfHfesOCcySQbElswuQpht+ev4OdKVITG4vYd5D SjP0BUpNWxeERZTi97e7YTMrM/adxBVpZrXFQTho7Sa+sPnbIdDgqZplgCP96Rps UGaXGG3Qj05CLCAsIXt2SZcufY4DmmYSiWSsRAOCn8OQNFUotdNKLIhNMV8ZI0mv CSfWubUutmM0dCOWTZ6Swa8vVQ/3UBw6hhil9N+ojgvTbNnCIadg9tfHNrHTSVan xuPy2ERmvsVGW0qiueJsWRhmk4GWDXMV4GuxMyQpy5JG6eFAnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBHMpRc3RCt8ski8ikqtlkCTbrOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTNmNTZmMTMtZTFlOC0z M2NmLTk0ODAtN2QzNjFhNGRkNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2pZL4kksHsnRJYl6WrDrhe/oPyCNUh/J2q1VyjgrWHgKifuXTN aWMlGk+UKoKo8aDN9pKR7pYL91k+fmYsdegaF7BDrt5bzSSYGFf5c3g/LzW+PhoQ FdSgJ2s18J37scfb6HrX4MGsd3yqxUUceLvfHjPnOdk4ir9ultZA5cP3v2JlFoIs 4hncL88TFjxdfjAL7NzLy8SaFUASaLFtakSMl71mqymQdKG6Hg6BXRA93JLNSSFh 6Fscf33z5d9py7aN++7wkazyshgQvK7mVlrxr9SnRCjDPwqwoz054AO2WDb21SIc a1JnyuKKifyZV1qXgBehmeY2ZATYPE5fJGQ= -----END CERTIFICATE-----Generated at Wed May 13 12:36:58 2026 by rpki-client