$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70f21f24-065f-3aae-bf06-2c9f99343807.roa File: 70f21f24-065f-3aae-bf06-2c9f99343807.roa (raw, json) Hash identifier: aIYAC2wVNH/iS2yEXImZar+wJe4zfA5g3+DRcrWFOtY= Subject key identifier: 17:E1:24:F9:4D:E4:14:79:80:F5:B7:9A:43:F7:A7:35:77:F0:1A:27 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DA5A3499F16BD4E350CB60280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70f21f24-065f-3aae-bf06-2c9f99343807.roa Signing time: Mon 27 Apr 2026 15:58:57 +0000 ROA not before: Mon 27 Apr 2026 15:58:57 +0000 ROA not after: Sun 26 Jul 2026 15:58:57 +0000 asID: 13335 IP address blocks: 2606:54c2:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a5:a3:49:9f:16:bd:4e:35:0c:b6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 27 15:58:57 2026 GMT Not After : Jul 26 15:58:57 2026 GMT Subject: CN=e85a807e-a55a-4658-86cd-76a05b02a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7a:40:6f:41:90:9d:50:5f:3b:b4:05:35:4d: ce:ce:31:fe:0e:bd:a1:7b:99:92:41:fb:20:57:ec: 26:b2:70:77:f1:47:c4:55:80:69:e5:40:e8:c3:ca: b8:65:0c:9f:18:4d:b5:ee:d9:5c:33:f7:11:88:98: 11:0a:2c:2d:a7:56:24:1b:13:2e:4d:93:b6:26:f9: 2d:1f:6a:4f:9e:b3:66:fa:af:77:29:c4:07:02:2e: f5:17:6b:72:d6:77:35:dd:e7:fd:ad:d8:6d:d5:06: f6:a1:3d:09:93:e4:6d:06:43:de:ec:72:d9:ac:7c: 1b:b2:ce:1b:d2:f6:66:85:6d:cc:74:6d:94:f9:f5: 3e:39:08:27:c5:76:b3:b0:c7:0b:11:5f:18:07:b0: 16:31:6a:10:fa:0a:6a:f3:7a:05:86:56:3e:e9:b6: 11:29:df:22:98:0a:cd:dd:10:eb:fa:5f:73:6b:33: 29:2f:93:11:ac:25:75:3f:d0:ed:12:a9:cb:19:99: 68:03:53:ee:c1:70:1a:83:78:6d:bd:15:c2:52:87: e7:68:9b:e0:c1:38:0f:e6:e5:f6:86:59:b4:93:1b: 0b:5d:cd:ea:b1:a3:d4:23:65:97:33:75:d1:d7:5f: 37:ab:1d:c3:a8:58:e9:09:f3:04:01:54:24:41:6f: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:24:F9:4D:E4:14:79:80:F5:B7:9A:43:F7:A7:35:77:F0:1A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/70f21f24-065f-3aae-bf06-2c9f99343807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:54c2:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:89:f4:59:ae:50:4a:39:09:14:86:a7:ce:61:8f:2e:80:0a: c6:f1:65:4d:7b:0c:df:be:ba:77:51:da:63:c5:4c:99:b0:95: 20:8a:e1:e3:7c:1e:40:91:ce:bc:d3:78:51:1f:1d:a5:d8:f9: b6:69:c6:26:38:e2:2e:39:d8:10:b2:7b:fa:04:71:b5:b0:51: 92:80:bc:04:40:69:50:66:54:76:68:a1:92:0b:70:a6:95:0f: 27:c6:be:5a:0a:7e:4b:c7:79:97:0a:5c:96:b1:d5:e8:c3:ed: d8:52:4b:b5:39:14:95:55:cd:ee:26:1e:25:b2:3b:68:97:98: 55:43:23:76:41:3e:8c:eb:8f:50:f9:0b:52:65:3e:56:e7:91: 71:74:3b:ed:d1:70:7b:23:ee:79:c3:d9:11:9d:60:2f:9d:95: 06:66:f9:80:33:32:8d:d4:7e:0d:ba:cd:d5:94:26:25:1a:f2: 08:a9:7d:3c:c9:3c:1e:b6:e1:69:c4:a8:79:56:fa:c7:8c:4c: 35:cc:51:ad:cf:6e:ba:28:db:16:9f:04:c5:a7:f8:5c:b7:c9: d6:c0:7d:97:d7:dd:b2:61:bd:ff:ef:4d:0c:d4:11:1e:ee:6a: d2:5b:79:52:fa:96:63:37:21:55:df:0d:33:02:0a:5f:6c:e4: 72:87:dd:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2lo0mfFr1ONQy2AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyNzE1NTg1N1oXDTI2MDcyNjE1NTg1N1owLzEtMCsGA1UEAxMk ZTg1YTgwN2UtYTU1YS00NjU4LTg2Y2QtNzZhMDViMDJhNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinpAb0GQnVBfO7QFNU3OzjH+Dr2he5mSQfsg V+wmsnB38UfEVYBp5UDow8q4ZQyfGE217tlcM/cRiJgRCiwtp1YkGxMuTZO2Jvkt H2pPnrNm+q93KcQHAi71F2ty1nc13ef9rdht1Qb2oT0Jk+RtBkPe7HLZrHwbss4b 0vZmhW3MdG2U+fU+OQgnxXazsMcLEV8YB7AWMWoQ+gpq83oFhlY+6bYRKd8imArN 3RDr+l9zazMpL5MRrCV1P9DtEqnLGZloA1PuwXAag3htvRXCUofnaJvgwTgP5uX2 hlm0kxsLXc3qsaPUI2WXM3XR1183qx3DqFjpCfMEAVQkQW92AQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBfhJPlN5BR5gPW3mkP3pzV38BonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzBmMjFmMjQtMDY1Zi0z YWFlLWJmMDYtMmM5Zjk5MzQzODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwgAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI2J9FmuUEo5CRSGp85hjy6ACsbxZU17DN++undR2mPFTJmwlSCK 4eN8HkCRzrzTeFEfHaXY+bZpxiY44i452BCye/oEcbWwUZKAvARAaVBmVHZooZIL cKaVDyfGvloKfkvHeZcKXJax1ejD7dhSS7U5FJVVze4mHiWyO2iXmFVDI3ZBPozr j1D5C1JlPlbnkXF0O+3RcHsj7nnD2RGdYC+dlQZm+YAzMo3Ufg26zdWUJiUa8gip fTzJPB624WnEqHlW+seMTDXMUa3Pbroo2xafBMWn+Fy3ydbAfZfX3bJhvf/vTQzU ER7uatJbeVL6lmM3IVXfDTMCCl9s5HKH3Wg= -----END CERTIFICATE-----Generated at Sat May 9 08:09:43 2026 by rpki-client