$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa File: 882d159c-de0a-3f49-8cc7-75226c1dc327.roa (raw, json) Hash identifier: RMTmN6fgWeOEfx40W2GE81PezRnEx5DHfbijvyqULaM= Subject key identifier: 70:46:5B:60:60:20:AD:FD:0D:90:C9:C9:E7:A3:EA:5A:A8:FF:D6:81 Certificate issuer: /CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Certificate serial: 010D0C9F4328584D9A20320A4BFC473BBA020A80 Authority key identifier: D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 399881 IP address blocks: 2606:4cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:32:0a:4b:fc:47:3b:ba:02:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5524759a-2f0a-478f-8eb1-41f1b86353f9 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=cf34e6c1-78de-46ad-8f29-6e1a8388850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:62:10:be:a4:59:7e:2e:27:37:ca:73:8e: dc:e0:0d:04:99:9b:4e:da:54:61:72:cf:06:7c:80: 5e:77:8b:bc:75:01:5a:37:62:ce:29:b3:62:8c:0f: 04:4d:95:26:a4:7c:77:41:5f:24:44:25:79:60:81: 3b:54:52:07:4f:50:32:be:c1:a2:6a:6a:56:64:a4: e2:21:27:af:10:4f:32:a4:f2:8e:d5:77:5c:35:1f: bb:98:82:34:ca:12:e9:86:34:d0:fa:db:03:6a:3e: d2:ce:65:b6:9f:97:4e:03:97:2c:54:49:45:ec:fc: bf:28:cd:2d:18:b2:bd:fb:9d:09:1d:94:89:3a:41: 39:bd:16:78:ff:3d:d7:5a:cb:31:d7:c4:a2:a4:7d: 5d:6b:df:a4:52:e8:00:60:61:46:d2:4c:fc:91:bc: 8a:68:3b:82:bc:ac:21:7d:fe:46:81:bb:aa:c3:de: 23:a9:59:a8:c4:07:9a:08:fe:2e:3b:68:bf:b3:ff: a4:41:b8:3b:8e:0e:e1:2d:b1:02:97:6c:58:45:c4: 02:19:3d:13:1b:dd:b2:d9:25:b0:19:97:7f:b5:55: e0:3a:54:e9:33:15:72:7e:01:34:87:d2:5a:4f:ac: 43:68:d4:68:7a:86:f4:44:ed:dc:71:8c:61:1b:cf: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:5B:60:60:20:AD:FD:0D:90:C9:C9:E7:A3:EA:5A:A8:FF:D6:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/882d159c-de0a-3f49-8cc7-75226c1dc327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9/5524759a-2f0a-478f-8eb1-41f1b86353f9.crl X509v3 Authority Key Identifier: keyid:D3:89:58:66:39:44:CC:1D:B3:FE:EF:3D:F6:9E:37:BC:76:45:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5524759a-2f0a-478f-8eb1-41f1b86353f9.cer sbgp-ipAddrBlock: critical IPv6: 2606:4cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a5:50:71:51:a4:aa:ff:4f:13:b8:f6:ef:60:ef:29:cc:13: d5:b4:44:a5:f4:91:b9:25:c4:9e:9f:ad:62:98:14:ad:70:6d: 8f:cb:b5:f9:72:9b:e0:c7:99:97:4e:3e:24:20:01:1c:51:fd: 45:66:30:19:78:f2:47:5f:b6:ef:c7:a9:42:1e:0d:79:c1:82: 82:28:d9:70:c9:e2:28:57:69:8d:95:c3:d9:1d:85:e8:b7:81: 98:28:49:cb:4f:1f:dd:a7:58:05:5b:ba:29:03:04:76:1f:f9: 34:19:7b:9b:10:00:17:52:46:ad:35:3c:34:68:d6:8d:cd:59: 02:41:21:a5:69:f6:aa:6e:71:fa:1a:55:87:a3:8e:50:71:34: 0c:f3:21:d1:71:e4:aa:ef:03:48:3d:c7:65:98:d7:2d:56:83: 06:5c:b7:d0:a6:24:15:84:75:5f:26:cc:a9:1f:c0:63:70:e8: c6:af:c4:81:db:01:2f:75:c3:24:2b:d4:f1:82:e4:03:48:1b: 0c:39:53:c0:00:d5:c0:63:8f:dd:64:4f:8c:1a:40:2c:3b:a4: b1:8f:d6:25:b4:c4:ab:fa:63:04:c1:f0:de:86:82:71:62:f4: cd:2d:88:19:10:9e:14:9c:bd:2b:52:58:b3:a0:4e:18:9d:70: 34:ce:d0:6b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2aIDIKS/xHO7oCCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyNDc1OWEtMmYwYS00NzhmLThlYjEtNDFmMWI4NjM1 M2Y5MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Y2YzNGU2YzEtNzhkZS00NmFkLThmMjktNmUxYTgzODg4NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iFiEL6kWX4uJzfKc47c4A0EmZtO2lRhcs8G fIBed4u8dQFaN2LOKbNijA8ETZUmpHx3QV8kRCV5YIE7VFIHT1AyvsGiampWZKTi ISevEE8ypPKO1XdcNR+7mII0yhLphjTQ+tsDaj7SzmW2n5dOA5csVElF7Py/KM0t GLK9+50JHZSJOkE5vRZ4/z3XWssx18SipH1da9+kUugAYGFG0kz8kbyKaDuCvKwh ff5Ggbuqw94jqVmoxAeaCP4uO2i/s/+kQbg7jg7hLbECl2xYRcQCGT0TG92y2SWw GZd/tVXgOlTpMxVyfgE0h9JaT6xDaNRoeob0RO3ccYxhG8+BywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHBGW2BgIK39DZDJyeej6lqo/9aBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0 NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYxYjg2MzUzZjkvODgyZDE1OWMtZGUwYS0z ZjQ5LThjYzctNzUyMjZjMWRjMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTUyNDc1OWEtMmYwYS00NzhmLThl YjEtNDFmMWI4NjM1M2Y5LzU1MjQ3NTlhLTJmMGEtNDc4Zi04ZWIxLTQxZjFiODYz NTNmOS5jcmwwHwYDVR0jBBgwFoAU04lYZjlEzB2z/u899p43vHZFsmgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTI0NzU5YS0yZjBhLTQ3OGYtOGViMS00MWYx Yjg2MzUzZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB/pVBxUaSq/08TuPbvYO8pzBPVtESl9JG5JcSen61imBStcG2Py7X5 cpvgx5mXTj4kIAEcUf1FZjAZePJHX7bvx6lCHg15wYKCKNlwyeIoV2mNlcPZHYXo t4GYKEnLTx/dp1gFW7opAwR2H/k0GXubEAAXUkatNTw0aNaNzVkCQSGlafaqbnH6 GlWHo45QcTQM8yHRceSq7wNIPcdlmNctVoMGXLfQpiQVhHVfJsypH8BjcOjGr8SB 2wEvdcMkK9TxguQDSBsMOVPAANXAY4/dZE+MGkAsO6Sxj9YltMSr+mMEwfDehoJx YvTNLYgZEJ4UnL0rUlizoE4YnXA0ztBr -----END CERTIFICATE-----Generated at Wed May 13 16:09:18 2026 by rpki-client