$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/99f33a63-94ff-3938-870c-e85542261111.roa File: 99f33a63-94ff-3938-870c-e85542261111.roa (raw, json) Hash identifier: 9ARyLG0+WkniJ3573MawJ9Z1I16m/juu05W3HTr8FK4= Subject key identifier: 5E:EB:E0:60:2C:90:01:0A:98:C6:46:B6:C6:40:75:2C:96:7D:34:66 Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584DC995A395A0377B67426C7E00 Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/99f33a63-94ff-3938-870c-e85542261111.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 15830 IP address blocks: 2620:b7:2001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:a3:95:a0:37:7b:67:42:6c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=4c5336e6-47ea-4610-a584-fa22f37c393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:3d:a3:6c:c8:6d:d6:86:d9:46:d8:d8:ef: 58:48:42:5c:e6:da:da:0d:d8:e0:0e:c2:df:4f:28: ca:fd:25:59:12:a2:2e:06:72:ce:fa:9d:52:11:9c: 4a:82:14:a8:ca:ff:fe:e8:72:9d:06:6c:d3:25:bd: 9c:c4:76:30:7b:4d:53:6d:57:29:c1:96:06:47:21: a4:2e:bb:c2:ff:5a:58:b9:ec:e9:ab:76:96:b4:d5: 46:44:4a:9b:97:31:b6:81:a9:ca:e4:fb:f8:f7:77: 64:5f:73:51:a2:2f:be:32:42:98:3b:c8:77:24:ef: 75:b0:56:91:fa:5a:eb:04:62:dc:d7:ee:30:e1:6b: 2e:27:a0:d9:03:a1:5d:73:f2:4f:36:55:da:69:25: a3:a2:80:ea:64:9b:fc:6d:1b:d5:11:b3:f2:d6:67: cf:54:9e:14:74:ec:c2:ac:1c:48:db:2b:19:05:af: d1:32:b6:4a:42:3a:b4:c3:74:0a:41:f8:fc:8d:e0: f2:09:67:b3:9f:83:2c:f3:39:45:72:3b:1a:39:25: 99:5a:af:46:7c:81:dc:56:bc:e0:22:cf:dc:51:d7: 32:10:11:44:56:33:ff:03:91:80:f8:bd:46:c0:3f: bb:a6:74:37:86:8e:fa:92:ff:02:42:34:2a:02:f7: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:E0:60:2C:90:01:0A:98:C6:46:B6:C6:40:75:2C:96:7D:34:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/99f33a63-94ff-3938-870c-e85542261111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv6: 2620:b7:2001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:16:bd:04:13:43:fb:d7:ef:05:94:44:ec:56:95:39:df:1c: dc:27:fc:9a:1c:68:50:97:9a:61:c7:ec:c2:1f:dc:c8:93:af: b5:26:40:71:f9:5e:50:2c:fb:92:b5:29:f9:80:a3:b4:93:ed: 9c:ad:4f:70:3c:42:e8:d3:3f:b0:3f:bb:e6:46:7c:1d:cd:a3: 2f:12:e9:c1:29:51:f5:bd:ff:07:aa:c9:9a:7d:62:11:cd:7e: d0:ed:1b:72:64:62:05:c2:af:9f:f9:ec:0f:f8:77:f8:87:d9: 28:cd:87:b5:2c:09:e5:2f:c3:c7:3c:56:63:53:6f:78:4c:71: c0:10:cd:84:1c:ae:99:27:13:fc:36:04:98:2b:4b:d2:e0:7c: ee:9a:de:a6:e0:95:46:ac:07:6a:89:9b:44:18:ff:08:fd:58: bf:31:f2:1a:bb:c4:e5:38:53:72:17:30:74:18:8f:79:7e:89: 54:78:f6:a3:42:0e:ec:8b:2e:d9:5d:b5:87:de:37:df:3c:74: 3f:1f:30:1d:13:fc:8f:c0:04:64:bd:74:56:08:02:e4:f2:63: c1:f9:be:43:e4:10:69:45:dc:ff:76:9d:9f:e8:8b:f0:2a:ce: b3:ee:5e:0c:9c:3b:f7:b6:44:bf:76:ab:76:10:4b:3b:36:ab: d5:a9:3e:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3JlaOVoDd7Z0JsfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk NGM1MzM2ZTYtNDdlYS00NjEwLWE1ODQtZmEyMmYzN2MzOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscs9o2zIbdaG2UbY2O9YSEJc5traDdjgDsLf TyjK/SVZEqIuBnLO+p1SEZxKghSoyv/+6HKdBmzTJb2cxHYwe01TbVcpwZYGRyGk LrvC/1pYuezpq3aWtNVGREqblzG2ganK5Pv493dkX3NRoi++MkKYO8h3JO91sFaR +lrrBGLc1+4w4WsuJ6DZA6Fdc/JPNlXaaSWjooDqZJv8bRvVEbPy1mfPVJ4UdOzC rBxI2ysZBa/RMrZKQjq0w3QKQfj8jeDyCWezn4Ms8zlFcjsaOSWZWq9GfIHcVrzg Is/cUdcyEBFEVjP/A5GA+L1GwD+7pnQ3ho76kv8CQjQqAvdnPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7r4GAskAEKmMZGtsZAdSyWfTRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvOTlmMzNhNjMtOTRmZi0z OTM4LTg3MGMtZTg1NTQyMjYxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAtyAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG0WvQQTQ/vX7wWUROxWlTnfHNwn/JocaFCXmmHH7MIf3MiTr7Um QHH5XlAs+5K1KfmAo7ST7ZytT3A8QujTP7A/u+ZGfB3Noy8S6cEpUfW9/weqyZp9 YhHNftDtG3JkYgXCr5/57A/4d/iH2SjNh7UsCeUvw8c8VmNTb3hMccAQzYQcrpkn E/w2BJgrS9LgfO6a3qbglUasB2qJm0QY/wj9WL8x8hq7xOU4U3IXMHQYj3l+iVR4 9qNCDuyLLtldtYfeN988dD8fMB0T/I/ABGS9dFYIAuTyY8H5vkPkEGlF3P92nZ/o i/AqzrPuXgycO/e2RL92q3YQSzs2q9WpPv0= -----END CERTIFICATE-----Generated at Wed May 13 04:59:25 2026 by rpki-client