$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa File: a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa (raw, json) Hash identifier: 5ZweB8NaUCoEwmVW3ofDeppB6aB4xWbzalV3IPIxdg4= Subject key identifier: B7:6F:B9:D0:39:88:4E:EB:06:5A:A8:B5:4E:07:95:C6:2D:C3:3B:88 Certificate issuer: /CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0 Certificate serial: 010D0C9F4328584D9A20171B517D1625F72E3C80 Authority key identifier: 8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 399599 IP address blocks: 2606:5940::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:17:1b:51:7d:16:25:f7:2e:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d59d93e7-5c7e-424e-960f-2edf15fa5db0 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=6ecf57d6-718e-4390-a1a9-e70d3311462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ea:42:fe:0d:cb:29:ba:22:c3:5e:dd:44:e8: 3b:cc:c5:1b:34:27:45:f1:96:c5:c2:77:21:87:6d: 55:fe:f5:0f:69:4f:9d:e7:d5:b8:6c:68:46:77:d3: 0e:c4:b0:a3:a4:95:d8:0a:10:3e:63:1f:85:8b:a3: fc:16:f1:9a:1b:b5:bf:b9:25:ac:fe:db:e0:a2:6a: 72:d9:ff:c5:c4:0a:f6:3f:c7:79:a7:93:9d:94:8a: 51:19:54:7e:c2:1e:38:e0:1f:ef:e2:85:5a:61:2a: b8:0c:d9:15:26:df:e6:f9:d3:db:c2:f3:48:bc:0f: 5f:47:86:4d:6c:4f:66:82:cd:01:42:59:1a:39:b6: 37:9d:1b:cd:70:76:29:a8:fa:38:e3:61:1f:5c:65: 36:7e:ee:29:55:82:3d:2d:3a:15:dd:45:42:df:9f: c5:c7:6e:bf:56:2e:35:cc:17:1c:91:12:7f:18:f0: 80:c4:6c:72:dc:83:09:62:20:88:f4:16:ef:62:81: 7d:aa:3c:8d:67:01:94:1c:c2:7b:b9:66:b1:54:47: 52:80:52:10:08:27:cc:39:c6:61:dc:61:21:1c:f2: 96:98:22:2e:01:ea:cc:ae:08:2e:2e:8b:95:15:7f: b9:4e:49:46:bf:25:ed:17:e5:1c:b2:65:45:89:61: 39:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:B9:D0:39:88:4E:EB:06:5A:A8:B5:4E:07:95:C6:2D:C3:3B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/a8d2529d-849a-3f85-b75b-3c96a760ef2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0/d59d93e7-5c7e-424e-960f-2edf15fa5db0.crl X509v3 Authority Key Identifier: keyid:8B:4B:FF:B3:1B:84:06:63:B6:F8:46:E4:98:54:04:B6:A3:F5:1B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d59d93e7-5c7e-424e-960f-2edf15fa5db0.cer sbgp-ipAddrBlock: critical IPv6: 2606:5940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:99:fb:14:75:7e:7d:5f:63:8d:4d:57:52:15:f3:35:28:ce: 31:dc:01:39:07:75:8a:c5:08:11:3b:35:bb:e3:27:e8:12:a8: 07:39:b5:ce:f0:84:1f:05:f5:ec:40:ec:32:ee:0c:e4:4a:47: c3:95:d0:0a:8e:1a:6b:7c:d0:51:09:de:40:96:f8:fd:3b:90: 38:b6:cb:ea:bf:2c:f3:40:9f:1d:ec:64:28:92:88:ea:f9:99: 6b:a8:70:f1:a7:61:b6:cc:4c:c4:01:ad:b1:d8:17:a4:37:df: 45:33:1e:02:be:a8:8a:45:8f:7e:2a:2b:17:6c:c2:73:5d:ee: ad:21:83:45:78:29:cd:43:2c:c2:05:18:96:08:2f:2d:cb:a9: 4f:bb:9c:f5:57:a8:2f:13:8c:86:fc:12:b0:71:f5:3b:64:30: d6:82:d8:a1:dd:e5:a7:3a:d9:11:de:0c:1f:7a:2b:ed:d7:d4: 8a:4a:8f:d4:ed:81:5f:3c:38:d8:ee:e5:ff:76:0b:a2:a8:9c: cc:f6:c8:01:10:bd:cc:df:ca:36:c7:64:7e:77:25:00:32:ee: 33:5b:2f:3c:36:89:ef:9a:51:32:82:eb:c2:a9:3e:94:31:df: 20:01:e5:a6:20:e1:9e:79:5b:21:71:25:63:b3:51:72:7b:c8: 22:eb:c8:0b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2aIBcbUX0WJfcuPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU5ZDkzZTctNWM3ZS00MjRlLTk2MGYtMmVkZjE1ZmE1 ZGIwMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NmVjZjU3ZDYtNzE4ZS00MzkwLWExYTktZTcwZDMzMTE0NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+pC/g3LKboiw17dROg7zMUbNCdF8ZbFwnch h21V/vUPaU+d59W4bGhGd9MOxLCjpJXYChA+Yx+Fi6P8FvGaG7W/uSWs/tvgompy 2f/FxAr2P8d5p5OdlIpRGVR+wh444B/v4oVaYSq4DNkVJt/m+dPbwvNIvA9fR4ZN bE9mgs0BQlkaObY3nRvNcHYpqPo442EfXGU2fu4pVYI9LToV3UVC35/Fx26/Vi41 zBcckRJ/GPCAxGxy3IMJYiCI9BbvYoF9qjyNZwGUHMJ7uWaxVEdSgFIQCCfMOcZh 3GEhHPKWmCIuAerMrgguLouVFX+5TklGvyXtF+UcsmVFiWE5YwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLdvudA5iE7rBlqotU4HlcYtwzuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlk OTNlNy01YzdlLTQyNGUtOTYwZi0yZWRmMTVmYTVkYjAvYThkMjUyOWQtODQ5YS0z Zjg1LWI3NWItM2M5NmE3NjBlZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDU5ZDkzZTctNWM3ZS00MjRlLTk2 MGYtMmVkZjE1ZmE1ZGIwL2Q1OWQ5M2U3LTVjN2UtNDI0ZS05NjBmLTJlZGYxNWZh NWRiMC5jcmwwHwYDVR0jBBgwFoAUi0v/sxuEBmO2+EbkmFQEtqP1G8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNTlkOTNlNy01YzdlLTQyNGUtOTYwZi0yZWRm MTVmYTVkYjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZmfsUdX59X2ONTVdSFfM1KM4x3AE5B3WKxQgROzW74yfoEqgHObXO 8IQfBfXsQOwy7gzkSkfDldAKjhprfNBRCd5Alvj9O5A4tsvqvyzzQJ8d7GQokojq +ZlrqHDxp2G2zEzEAa2x2BekN99FMx4CvqiKRY9+KisXbMJzXe6tIYNFeCnNQyzC BRiWCC8ty6lPu5z1V6gvE4yG/BKwcfU7ZDDWgtih3eWnOtkR3gwfeivt19SKSo/U 7YFfPDjY7uX/dguiqJzM9sgBEL3M38o2x2R+dyUAMu4zWy88NonvmlEyguvCqT6U Md8gAeWmIOGeeVshcSVjs1Fye8gi68gL -----END CERTIFICATE-----Generated at Wed May 13 05:20:23 2026 by rpki-client