$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8f78a9fb-b6ee-3429-8fa4-cff9e9bbf418.roa File: 8f78a9fb-b6ee-3429-8fa4-cff9e9bbf418.roa (raw, json) Hash identifier: nyQ70PSNmX6aRdiM0xTfvW4JwL+MxVtQ2jm4qUn6Yq4= Subject key identifier: 25:38:8C:7F:27:F5:28:02:10:A0:65:B9:97:F9:81:D2:98:02:BF:69 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584DA3E5627752690B019172E940 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8f78a9fb-b6ee-3429-8fa4-cff9e9bbf418.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 400624 IP address blocks: 2602:fca3:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:62:77:52:69:0b:01:91:72:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=2240e128-00b4-41c6-b43e-477f6bb1c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:af:4d:0f:0c:5d:9c:39:70:53:ef:42:5e: 61:19:3f:f2:ce:5d:d6:2f:8b:73:b8:b6:20:fb:0a: f9:93:92:01:50:d8:bc:da:07:df:36:2d:e4:72:7c: 3d:bc:be:ad:40:95:b4:fe:a0:53:2e:6d:3e:22:05: 96:69:28:03:46:ec:6a:2f:d7:07:61:55:65:d6:2e: f2:71:00:f6:05:dc:3d:c3:05:c9:fc:7f:99:be:e8: fc:28:04:59:19:f0:f6:c1:bb:c5:cc:84:ad:27:3c: 9a:b6:fb:50:60:13:59:2d:76:5e:cf:b7:a5:83:2d: 61:0d:37:e8:45:6e:a5:c3:03:80:73:d0:10:34:c4: 5c:02:c1:28:4b:74:f9:84:ab:e1:66:40:6b:3b:09: 3d:39:d2:7a:00:7f:63:85:16:ce:18:a9:d2:c6:6a: 58:02:f1:84:29:40:24:6c:05:b6:63:1e:a3:e2:63: 16:96:41:b0:29:13:f0:8d:41:c9:1d:1b:de:c2:28: ff:83:34:aa:b4:31:57:f3:1a:02:b3:3a:b7:e3:91: 74:16:00:24:ea:58:07:82:02:7c:61:60:4e:4b:48: 4a:93:1a:a2:ca:25:17:fa:96:14:97:ca:9d:4f:be: 1b:f3:2e:0d:4c:b3:6e:42:7b:4f:fd:a5:b4:73:17: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:38:8C:7F:27:F5:28:02:10:A0:65:B9:97:F9:81:D2:98:02:BF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/8f78a9fb-b6ee-3429-8fa4-cff9e9bbf418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv6: 2602:fca3:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9f:42:f8:a1:66:f6:54:07:52:80:5b:9c:5b:ec:ad:80:0c: 24:e9:ae:4a:c3:88:10:f3:89:99:d3:2c:f1:61:79:b8:77:c7: c2:4f:79:32:50:35:b2:97:aa:1d:7e:e6:18:33:ec:69:d8:dc: c5:14:8a:c5:88:f6:05:92:45:4f:a0:43:81:6b:50:44:78:df: bb:06:d8:95:7f:d4:77:68:c4:4d:c5:08:25:a7:76:b0:7d:aa: b7:a4:29:fe:d0:1a:19:e2:f7:23:11:88:64:18:9e:1c:b5:8a: bd:03:9b:d1:73:76:6c:bc:af:cc:56:b5:93:4c:b2:ca:00:d4: 49:3e:6f:74:ca:ea:5b:43:0e:e1:10:0d:54:57:c5:fe:6f:9f: 6a:ea:f1:44:fa:51:bc:3d:e5:10:b4:d6:46:8d:aa:84:8d:58: 73:18:8f:41:8e:a1:a0:e8:8d:64:7d:88:b8:9d:34:46:8e:33: 38:d9:69:19:04:fd:2c:ef:f1:85:b9:bc:20:7e:00:f0:a0:1c: f8:45:91:a4:8e:09:0d:73:6b:25:94:03:e5:23:53:ea:55:60: 1e:bc:b3:1e:e8:44:d5:72:da:72:21:b2:04:77:37:16:a7:07: 26:c5:be:03:4e:0b:9d:2c:9d:ef:68:d7:db:b4:91:fd:25:3a: bb:8a:26:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2j5WJ3UmkLAZFy6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk MjI0MGUxMjgtMDBiNC00MWM2LWI0M2UtNDc3ZjZiYjFjODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6vTQ8MXZw5cFPvQl5hGT/yzl3WL4tzuLYg +wr5k5IBUNi82gffNi3kcnw9vL6tQJW0/qBTLm0+IgWWaSgDRuxqL9cHYVVl1i7y cQD2Bdw9wwXJ/H+Zvuj8KARZGfD2wbvFzIStJzyatvtQYBNZLXZez7elgy1hDTfo RW6lwwOAc9AQNMRcAsEoS3T5hKvhZkBrOwk9OdJ6AH9jhRbOGKnSxmpYAvGEKUAk bAW2Yx6j4mMWlkGwKRPwjUHJHRvewij/gzSqtDFX8xoCszq345F0FgAk6lgHggJ8 YWBOS0hKkxqiyiUX+pYUl8qdT74b8y4NTLNuQntP/aW0cxcPawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCU4jH8n9SgCEKBluZf5gdKYAr9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOGY3OGE5ZmItYjZlZS0z NDI5LThmYTQtY2ZmOWU5YmJmNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8owAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHafQvihZvZUB1KAW5xb7K2ADCTprkrDiBDziZnTLPFhebh3x8JP eTJQNbKXqh1+5hgz7GnY3MUUisWI9gWSRU+gQ4FrUER437sG2JV/1HdoxE3FCCWn drB9qrekKf7QGhni9yMRiGQYnhy1ir0Dm9Fzdmy8r8xWtZNMssoA1Ek+b3TK6ltD DuEQDVRXxf5vn2rq8UT6Ubw95RC01kaNqoSNWHMYj0GOoaDojWR9iLidNEaOMzjZ aRkE/Szv8YW5vCB+APCgHPhFkaSOCQ1zayWUA+UjU+pVYB68sx7oRNVy2nIhsgR3 NxanBybFvgNOC50sne9o19u0kf0lOruKJgs= -----END CERTIFICATE-----Generated at Wed Apr 29 18:34:08 2026 by rpki-client