$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa File: 4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa (raw, json) Hash identifier: EPQtDhSXixUEpFc5hFjMpRaqpKUMbh6hggh86/CN24k= Subject key identifier: 0B:C1:2C:AB:AF:79:75:00:2A:BD:09:CD:AD:3B:13:28:DE:CA:BB:D4 Certificate issuer: /CN=823b3bd2-8946-4618-b2b5-7d04ccd697db Certificate serial: 010D0C9F4328584DA28013041A7283772CEE4300 Authority key identifier: 31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 19106 IP address blocks: 2620:0:2be0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:13:04:1a:72:83:77:2c:ee:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823b3bd2-8946-4618-b2b5-7d04ccd697db Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=f2b68b70-815a-4e38-a394-f42462798545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:fe:17:bb:a4:f8:1a:54:b9:2b:25:4e:67: 33:c8:b0:d1:86:4b:00:71:db:69:bc:a6:a8:3c:6f: 79:3a:e6:27:51:6f:7a:f0:50:d2:c6:e1:17:e1:ba: 10:ef:ff:e4:c0:8f:ed:79:ef:af:70:ce:1c:9d:52: 5a:b7:49:04:5e:94:85:97:db:61:9a:a5:6b:98:f8: 5e:75:19:aa:3a:5a:10:a3:e2:ec:73:89:d5:b6:03: 01:d1:97:ad:cb:90:c5:b6:7c:86:3a:a4:83:01:70: ba:dd:df:35:a4:62:b1:67:02:47:92:fd:6a:a2:ba: 3c:bd:7b:db:d5:4b:42:cf:b6:4a:66:84:9f:86:00: 3d:49:ea:54:08:e4:8e:10:fc:7e:c3:62:cc:7c:d0: a2:20:86:8e:31:7f:7d:7e:c6:6a:fc:be:c2:ac:a3: 16:af:ac:59:96:60:e9:4f:db:3f:a6:19:a4:b4:c8: fd:a5:19:ec:dc:ae:e9:e6:56:41:69:ec:22:e8:19: 0c:83:b7:be:6c:f4:c7:f9:4b:1b:33:dc:cc:75:5d: fa:13:bb:83:d3:5a:cb:66:70:8a:00:21:76:43:3d: e4:bb:28:bc:b8:23:3c:f6:09:a7:f0:03:e8:1a:30: 21:62:5a:3b:b4:5e:2b:a9:09:de:35:a2:8d:62:06: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C1:2C:AB:AF:79:75:00:2A:BD:09:CD:AD:3B:13:28:DE:CA:BB:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/4f1a7538-9da8-3559-a70b-3b0dcc0053a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db/823b3bd2-8946-4618-b2b5-7d04ccd697db.crl X509v3 Authority Key Identifier: keyid:31:E4:E5:CB:99:3D:5F:CD:D2:18:41:69:51:CC:D0:BA:EB:34:4F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/823b3bd2-8946-4618-b2b5-7d04ccd697db.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2be0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:97:10:74:e3:d8:7a:68:0c:7a:3f:f9:b2:47:7a:3d:1d:d3: 37:4d:28:8b:c3:c2:9b:79:31:f1:fd:d8:05:dc:7c:61:9f:7e: 6d:e4:08:80:aa:7b:25:7a:77:10:0a:ff:e6:df:8b:d4:e6:93: d0:0f:e9:99:78:65:20:a3:5d:67:ae:c2:1b:3d:45:fc:f5:40: cb:d4:1b:61:f0:09:c2:54:97:bb:5e:b6:2a:4c:58:85:f4:8b: ee:35:06:e8:28:c8:7a:52:7b:cf:f5:e6:16:09:2f:b5:b0:ca: 9c:c8:ff:01:76:29:56:56:ce:cb:fb:94:49:2d:11:c8:48:62: 2f:7c:83:c1:a4:2c:02:1c:31:09:5e:69:ae:5e:be:2c:82:5e: f1:30:64:b0:be:ca:df:f9:8c:ba:0f:66:ff:f1:ee:01:7c:33: 26:19:45:59:db:f2:38:80:09:bb:5f:66:84:ad:1f:39:4a:3f: cc:71:e1:4e:0c:52:93:8b:88:1f:70:50:fd:ce:33:ff:86:8d: 84:35:b2:2b:75:bb:63:4d:8d:9f:c5:bb:82:2e:6b:84:c0:f6: 15:a2:9e:39:33:dc:53:60:c4:a7:06:42:50:7a:6f:13:32:c8: eb:62:07:68:ca:16:21:95:bf:49:1f:21:bd:55:40:7a:41:b6: 4b:d9:11:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2igBMEGnKDdyzuQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzYjNiZDItODk0Ni00NjE4LWIyYjUtN2QwNGNjZDY5 N2RiMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk ZjJiNjhiNzAtODE1YS00ZTM4LWEzOTQtZjQyNDYyNzk4NTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5n+F7uk+BpUuSslTmczyLDRhksAcdtpvKao PG95OuYnUW968FDSxuEX4boQ7//kwI/tee+vcM4cnVJat0kEXpSFl9thmqVrmPhe dRmqOloQo+Lsc4nVtgMB0Zety5DFtnyGOqSDAXC63d81pGKxZwJHkv1qoro8vXvb 1UtCz7ZKZoSfhgA9SepUCOSOEPx+w2LMfNCiIIaOMX99fsZq/L7CrKMWr6xZlmDp T9s/phmktMj9pRns3K7p5lZBaewi6BkMg7e+bPTH+UsbM9zMdV36E7uD01rLZnCK ACF2Qz3kuyi8uCM89gmn8APoGjAhYlo7tF4rqQneNaKNYgYm7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAvBLKuveXUAKr0Jza07EyjeyrvUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84MjNi M2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0Y2NkNjk3ZGIvNGYxYTc1MzgtOWRhOC0z NTU5LWE3MGItM2IwZGNjMDA1M2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODIzYjNiZDItODk0Ni00NjE4LWIy YjUtN2QwNGNjZDY5N2RiLzgyM2IzYmQyLTg5NDYtNDYxOC1iMmI1LTdkMDRjY2Q2 OTdkYi5jcmwwHwYDVR0jBBgwFoAUMeTly5k9X83SGEFpUczQuus0T2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84MjNiM2JkMi04OTQ2LTQ2MTgtYjJiNS03ZDA0 Y2NkNjk3ZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAACvg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCXEHTj2HpoDHo/+bJHej0d0zdNKIvDwpt5MfH92AXcfGGffm3k CICqeyV6dxAK/+bfi9Tmk9AP6Zl4ZSCjXWeuwhs9Rfz1QMvUG2HwCcJUl7tetipM WIX0i+41BugoyHpSe8/15hYJL7WwypzI/wF2KVZWzsv7lEktEchIYi98g8GkLAIc MQleaa5eviyCXvEwZLC+yt/5jLoPZv/x7gF8MyYZRVnb8jiACbtfZoStHzlKP8xx 4U4MUpOLiB9wUP3OM/+GjYQ1sit1u2NNjZ/Fu4Iua4TA9hWinjkz3FNgxKcGQlB6 bxMyyOtiB2jKFiGVv0kfIb1VQHpBtkvZEV4= -----END CERTIFICATE-----Generated at Wed May 13 06:53:25 2026 by rpki-client