$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa File: b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa (raw, json) Hash identifier: C8DBrI5E1EZeZhZBPxYtV/OWJ+WuaL9cU4FKObHTZSM= Subject key identifier: 45:17:56:40:9C:3E:60:F1:AC:38:EF:00:25:0D:9C:A0:FE:9E:01:30 Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Certificate serial: 010D0C9F4328584D8EF564F7B253E1D0C71301B8 Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 395214 IP address blocks: 2602:ff3d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:64:f7:b2:53:e1:d0:c7:13:01:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=91845409-3c24-41cf-a8a9-62ac2606d509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:fa:80:aa:22:b7:33:10:70:69:fe:cb:7e: c1:c5:d9:d4:8e:2d:ba:ab:12:26:3b:d0:94:73:fc: 7b:5e:60:ee:d4:68:a2:7c:76:8e:c9:4e:f9:14:8c: f7:6e:5b:e6:dc:43:c9:77:48:c8:b7:74:94:ca:4f: 75:95:6f:d7:20:8d:ca:e3:85:59:4c:24:55:4c:04: 67:c2:8d:af:f0:15:52:2c:fa:3f:46:a4:7e:0c:34: 22:9d:b9:71:3c:e5:5a:15:e6:08:94:fe:cf:d0:9f: 60:4c:01:b3:bd:82:7a:48:42:34:25:28:4b:10:69: 6d:20:51:1e:04:cb:5e:92:bb:d0:72:5c:c8:69:a4: 9c:a1:6e:1a:6a:9f:5f:c6:5f:fc:35:65:5c:d0:cc: c9:53:c5:93:a4:2b:31:b8:9a:de:c2:13:f6:ff:84: 9c:a2:8e:1e:07:ab:ac:87:25:38:ac:83:e3:bb:72: b5:ac:dd:9a:4b:91:82:57:04:16:e8:0b:78:95:dc: d8:0a:61:6f:3a:a6:a9:21:51:cd:d8:1a:74:db:90: d0:37:0f:27:0f:28:64:d4:44:a6:54:2e:49:64:c6: e3:c4:50:3f:d8:1d:07:40:d7:e7:08:6f:dc:d8:d5: 46:73:08:ec:08:54:83:1d:92:d0:8d:b7:12:49:be: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:56:40:9C:3E:60:F1:AC:38:EF:00:25:0D:9C:A0:FE:9E:01:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl X509v3 Authority Key Identifier: keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer sbgp-ipAddrBlock: critical IPv6: 2602:ff3d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:84:31:8b:2d:8a:7c:df:b8:78:14:36:29:e2:b1:4b:35:e1: 95:d1:c7:10:cc:a3:fe:e1:e7:a9:d3:40:3d:02:6b:cb:2a:b6: 48:73:fc:6d:d9:19:87:2d:de:62:2c:de:e9:a1:40:92:9e:a3: e8:0b:c9:0a:1a:c7:4b:51:c2:b0:77:0b:5c:57:ec:26:eb:c1: 61:4f:4f:a5:57:4e:a5:4d:1a:d2:43:1b:9a:49:2a:fd:43:1b: 8a:41:fc:2a:db:a5:25:42:25:1c:5c:c5:c0:d2:56:f9:5e:3d: fd:53:6c:79:05:fc:1d:13:05:7a:eb:b1:93:5e:70:17:a9:dd: 5f:2c:56:a7:d6:72:78:7b:c2:91:ab:6f:07:e3:f5:e3:fb:53: 62:f5:b5:32:52:ad:64:af:ba:aa:91:e3:40:74:77:cf:d3:a1: f7:52:39:22:6e:9e:d3:6b:0a:79:4e:1d:73:42:c3:60:6c:ad: 8b:ff:35:88:46:8b:f1:c1:db:11:95:e3:20:38:e4:62:e0:58: f0:4c:05:c5:f4:dd:12:48:25:b7:41:81:e2:ba:0a:51:d4:17: c4:85:88:1e:32:e5:db:61:e8:58:ce:ed:17:ce:85:94:3f:94: e7:58:12:15:ea:85:20:4e:f0:5e:98:dc:95:6f:92:80:88:5d: f1:8a:49:61 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9WT3slPh0McTAbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4 NTU3MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTE4NDU0MDktM2MyNC00MWNmLWE4YTktNjJhYzI2MDZkNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRP6gKoitzMQcGn+y37BxdnUji26qxImO9CU c/x7XmDu1GiifHaOyU75FIz3blvm3EPJd0jIt3SUyk91lW/XII3K44VZTCRVTARn wo2v8BVSLPo/RqR+DDQinblxPOVaFeYIlP7P0J9gTAGzvYJ6SEI0JShLEGltIFEe BMtekrvQclzIaaScoW4aap9fxl/8NWVc0MzJU8WTpCsxuJrewhP2/4Scoo4eB6us hyU4rIPju3K1rN2aS5GCVwQW6At4ldzYCmFvOqapIVHN2Bp025DQNw8nDyhk1ESm VC5JZMbjxFA/2B0HQNfnCG/c2NVGcwjsCFSDHZLQjbcSSb7vtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEUXVkCcPmDxrDjvACUNnKD+ngEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvYjFkN2EzOGUtMWM5MC0z ZjgzLTkxYzgtYWU3NzdhNzk1ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4 ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx MTBmODg1NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/PQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcoQxiy2KfN+4eBQ2KeKxSzXhldHHEMyj/uHnqdNAPQJryyq2SHP8 bdkZhy3eYize6aFAkp6j6AvJChrHS1HCsHcLXFfsJuvBYU9PpVdOpU0a0kMbmkkq /UMbikH8KtulJUIlHFzFwNJW+V49/VNseQX8HRMFeuuxk15wF6ndXyxWp9ZyeHvC katvB+P14/tTYvW1MlKtZK+6qpHjQHR3z9Oh91I5Im6e02sKeU4dc0LDYGyti/81 iEaL8cHbEZXjIDjkYuBY8EwFxfTdEkglt0GB4roKUdQXxIWIHjLl22HoWM7tF86F lD+U51gSFeqFIE7wXpjclW+SgIhd8YpJYQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:58 2026 by rpki-client