$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa File: b3d957a8-a439-3375-807a-999a25d7e06c.roa (raw, json) Hash identifier: bdFpsqKSXSCr6YiL8AAmBfNw3XZFWQuPYw3ZkLAx0ZQ= Subject key identifier: B7:30:69:67:64:77:B6:C9:A0:CF:56:18:2E:0F:0A:D8:EE:D6:D6:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DFA70A53856511F588948E880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 13335 IP address blocks: 2606:4700:4028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a5:38:56:51:1f:58:89:48:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=e25cb5b9-a1bf-43d5-9864-1cf2cadcdf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fd:54:60:5f:27:c0:20:3a:7f:b2:64:b3:80: 96:c3:f3:8a:d6:97:9e:67:2d:90:0a:19:2b:f8:df: 6e:77:00:ca:2b:96:7e:e7:00:b6:46:97:9f:16:0b: 7b:19:07:eb:a0:a5:a5:34:92:12:94:83:90:22:98: b2:1e:b6:be:0e:3b:6a:51:59:65:1f:c1:93:43:80: 46:1b:ec:02:aa:90:a3:26:27:ff:e9:ea:25:49:02: 41:27:88:96:47:77:53:92:a1:22:2e:d1:a6:d7:5d: 2a:f1:05:38:9c:af:89:a7:d5:e4:b2:da:e2:0b:6e: c7:50:ef:fb:dc:d8:2f:33:d4:41:8b:24:e7:70:dd: 04:91:42:00:fd:6d:a0:50:e3:0b:35:a8:13:32:4c: 9a:c7:97:8c:43:10:7c:8f:d2:77:6a:cf:d6:51:5c: 18:2a:ef:40:49:62:04:78:e3:78:d5:90:1a:44:75: 11:d9:b3:b6:3d:74:e7:75:4b:39:7d:7d:f4:57:47: e9:ec:72:ce:c9:2a:78:86:e0:9f:fb:ae:0f:3e:24: 3d:57:35:a2:20:e3:fd:c1:42:c5:96:d8:6e:0c:13: 57:78:f8:65:ca:e6:62:1e:20:2b:af:8f:e6:ea:0d: 3c:32:5d:62:71:fd:35:4c:fa:9d:60:ab:5b:39:bd: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:30:69:67:64:77:B6:C9:A0:CF:56:18:2E:0F:0A:D8:EE:D6:D6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3d957a8-a439-3375-807a-999a25d7e06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4028::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a3:2e:a1:9f:09:1d:45:5e:04:52:ce:78:f5:0d:3c:c1:31: 49:78:07:12:a4:a3:52:91:1c:a2:f8:56:16:ec:31:1b:8a:9e: 9e:65:17:d4:5f:34:48:60:aa:96:7a:63:6c:1f:18:0a:5c:fb: 03:1c:c1:07:63:5a:21:ad:91:20:10:44:75:2b:e1:a4:bb:60: 6d:6f:9f:97:82:92:b9:64:16:8b:a5:52:4e:28:4e:f7:cc:62: ee:cb:11:88:a4:f1:93:2e:1e:49:8e:4e:60:c8:76:eb:b8:b9: 36:36:3b:cb:ff:dd:68:cf:18:98:6b:ab:1d:3d:51:83:41:bc: d4:5b:94:25:52:9c:30:da:f2:a7:74:eb:a1:03:3e:39:70:18: 85:1c:df:0c:0d:b3:67:22:08:77:3f:73:eb:c8:05:68:fb:a1: cb:ef:c3:d1:ae:ed:73:57:a9:ca:69:37:d3:42:f9:81:6e:f2: 4a:32:04:c7:77:0b:e2:3f:72:e8:e9:6e:b9:09:01:5c:f5:b9: 7c:b3:96:35:64:86:86:a4:65:8f:a9:10:ce:ad:26:fb:32:71: 45:f9:e0:04:9e:c5:21:43:1d:3c:be:d8:ae:53:0a:82:79:f9: 83:77:1f:c2:56:e5:4f:ab:c1:d1:7e:25:44:b6:68:61:bb:11: ef:61:56:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE36cKU4VlEfWIlI6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk ZTI1Y2I1YjktYTFiZi00M2Q1LTk4NjQtMWNmMmNhZGNkZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/1UYF8nwCA6f7Jks4CWw/OK1peeZy2QChkr +N9udwDKK5Z+5wC2RpefFgt7GQfroKWlNJISlIOQIpiyHra+DjtqUVllH8GTQ4BG G+wCqpCjJif/6eolSQJBJ4iWR3dTkqEiLtGm110q8QU4nK+Jp9XkstriC27HUO/7 3NgvM9RBiyTncN0EkUIA/W2gUOMLNagTMkyax5eMQxB8j9J3as/WUVwYKu9ASWIE eON41ZAaRHUR2bO2PXTndUs5fX30V0fp7HLOySp4huCf+64PPiQ9VzWiIOP9wULF lthuDBNXePhlyuZiHiArr4/m6g08Ml1icf01TPqdYKtbOb0s0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLcwaWdkd7bJoM9WGC4PCtju1tYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNkOTU3YTgtYTQzOS0z Mzc1LTgwN2EtOTk5YTI1ZDdlMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKjLqGfCR1FXgRSznj1DTzBMUl4BxKko1KRHKL4VhbsMRuKnp5l F9RfNEhgqpZ6Y2wfGApc+wMcwQdjWiGtkSAQRHUr4aS7YG1vn5eCkrlkFoulUk4o TvfMYu7LEYik8ZMuHkmOTmDIduu4uTY2O8v/3WjPGJhrqx09UYNBvNRblCVSnDDa 8qd066EDPjlwGIUc3wwNs2ciCHc/c+vIBWj7ocvvw9Gu7XNXqcppN9NC+YFu8koy BMd3C+I/cujpbrkJAVz1uXyzljVkhoakZY+pEM6tJvsycUX54ASexSFDHTy+2K5T CoJ5+YN3H8JW5U+rwdF+JUS2aGG7Ee9hVk4= -----END CERTIFICATE-----Generated at Tue Jun 2 21:53:07 2026 by rpki-client