$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89f236d0-84bf-345e-a213-0415ff9c48eb.roa File: 89f236d0-84bf-345e-a213-0415ff9c48eb.roa (raw, json) Hash identifier: xSpO97EiQjV46y+mcnNQoVFTnJA7YsnpMFw8uDLlYuw= Subject key identifier: AE:F9:6F:46:42:09:3E:80:3A:44:F1:57:64:1F:97:CB:3D:56:FF:0B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DE1509AB8AD70E06F5CA77020 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89f236d0-84bf-345e-a213-0415ff9c48eb.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 13335 IP address blocks: 2606:4700:402e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:9a:b8:ad:70:e0:6f:5c:a7:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=b5eb273f-d709-4d49-b1db-9df2d24f35da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f3:a9:01:c6:40:e2:f7:56:bc:63:54:fe:49: 2c:16:12:01:82:00:23:03:d6:77:45:e7:18:14:2b: 7e:76:4b:b9:f2:bd:8a:7a:8a:70:d2:b9:87:c2:f3: bf:98:52:af:d8:4a:7d:91:f0:5f:e1:23:2f:fc:69: 71:41:c1:39:07:43:a3:a5:4b:bc:77:0a:d4:21:1c: 65:13:93:6f:87:d3:0c:f5:f8:57:b3:a0:f2:80:76: cf:56:bb:57:c4:05:3d:e6:99:22:0d:8a:9c:81:46: 55:96:81:97:2a:3c:df:4a:f4:60:66:da:f7:aa:e5: 01:3f:c7:ea:9b:f3:65:af:2f:23:25:74:85:43:25: d7:52:67:20:59:f9:2f:a0:1d:80:ff:af:a3:eb:20: c2:5b:a2:1c:96:0c:54:d7:27:0c:b4:74:6c:94:1d: df:41:36:ef:ea:9b:62:71:89:b5:bc:63:2e:20:98: a0:71:73:4c:8d:88:1a:ee:f2:5c:bd:b7:31:58:ff: 58:0c:c1:38:3b:ba:82:2e:b2:f8:5e:35:77:93:ea: b0:42:06:d2:50:3e:96:a5:5b:4f:f9:01:31:17:9e: bd:cd:94:43:e1:75:8d:48:9d:c1:72:81:84:39:14: 0e:88:fb:61:c3:02:87:3e:ed:f5:00:5b:24:df:d3: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F9:6F:46:42:09:3E:80:3A:44:F1:57:64:1F:97:CB:3D:56:FF:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/89f236d0-84bf-345e-a213-0415ff9c48eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:402e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ba:f6:06:a5:d1:59:04:d5:73:b3:38:c9:f7:14:d3:ac:7e: fd:1a:a2:99:45:74:75:48:c6:f5:11:17:d5:4a:a9:1c:df:63: b2:93:5c:2c:12:ec:fe:2a:73:fb:ee:36:6d:c6:4c:01:77:0a: 5b:a9:de:ed:f7:40:05:db:9b:94:c8:a5:36:fa:6c:b5:55:ee: 23:90:05:d5:a8:9f:4e:3f:1f:91:f7:69:bc:3e:c4:56:89:ff: e2:9f:90:74:75:f2:6c:95:ad:25:0c:1f:84:15:0d:7b:a7:db: fc:26:16:c7:9a:5f:2b:74:8f:9e:36:2c:f8:17:c1:a7:25:dc: c6:d7:05:a1:19:ee:e9:0f:23:f7:81:0c:3e:a8:d1:bc:ea:03: fc:9b:75:9e:7e:3f:3d:a1:27:d8:56:c9:42:da:9e:94:e4:0a: 77:10:ed:a5:d6:0d:e6:96:e9:c5:c3:c3:50:e0:03:3b:e2:71: c6:2d:c0:9b:f6:d7:3a:81:e9:fc:ed:67:4a:e7:e3:05:75:a1: ba:df:14:56:18:1e:83:f3:a6:96:75:95:bd:16:97:da:3f:98: 91:fd:3f:16:27:5f:5c:4c:a3:d6:a9:85:f6:d3:34:9e:a2:08: 2b:ba:ca:24:1a:89:c0:a5:7b:5e:91:cc:37:52:74:db:e4:52: aa:82:f3:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUJq4rXDgb1yncCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk YjVlYjI3M2YtZDcwOS00ZDQ5LWIxZGItOWRmMmQyNGYzNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vOpAcZA4vdWvGNU/kksFhIBggAjA9Z3RecY FCt+dku58r2Keopw0rmHwvO/mFKv2Ep9kfBf4SMv/GlxQcE5B0OjpUu8dwrUIRxl E5Nvh9MM9fhXs6DygHbPVrtXxAU95pkiDYqcgUZVloGXKjzfSvRgZtr3quUBP8fq m/Nlry8jJXSFQyXXUmcgWfkvoB2A/6+j6yDCW6IclgxU1ycMtHRslB3fQTbv6pti cYm1vGMuIJigcXNMjYga7vJcvbcxWP9YDME4O7qCLrL4XjV3k+qwQgbSUD6WpVtP +QExF569zZRD4XWNSJ3BcoGEORQOiPthwwKHPu31AFsk39O/LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK75b0ZCCT6AOkTxV2Qfl8s9Vv8LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODlmMjM2ZDAtODRiZi0z NDVlLWEyMTMtMDQxNWZmOWM0OGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEy69gal0VkE1XOzOMn3FNOsfv0aoplFdHVIxvURF9VKqRzfY7KT XCwS7P4qc/vuNm3GTAF3Clup3u33QAXbm5TIpTb6bLVV7iOQBdWon04/H5H3abw+ xFaJ/+KfkHR18myVrSUMH4QVDXun2/wmFseaXyt0j542LPgXwacl3MbXBaEZ7ukP I/eBDD6o0bzqA/ybdZ5+Pz2hJ9hWyULanpTkCncQ7aXWDeaW6cXDw1DgAzviccYt wJv21zqB6fztZ0rn4wV1obrfFFYYHoPzppZ1lb0Wl9o/mJH9PxYnX1xMo9aphfbT NJ6iCCu6yiQaicCle16RzDdSdNvkUqqC81A= -----END CERTIFICATE-----Generated at Tue Jun 2 21:52:56 2026 by rpki-client