$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa File: 20a714de-d4f4-352a-8724-b13f2c17da5a.roa (raw, json) Hash identifier: DfuRqYU414xx9TwVYsPSLTxpdmYjMLl0WUWfh/SWL7Y= Subject key identifier: 63:CD:CB:A9:47:FA:EE:4E:4B:76:39:5A:10:BF:39:3D:2A:1D:6F:23 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584DD4C07571558AD15A51280580 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 11055 IP address blocks: 2605:4a80:ef08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:75:71:55:8a:d1:5a:51:28:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=3c4ea79d-b842-4a7d-9d28-513a2640bada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:2e:07:5e:4b:8a:de:9b:be:a7:73:20:3a: 9e:4d:1d:84:75:73:db:e2:72:87:4f:fe:1f:d5:e7: 9a:1c:4c:be:37:05:be:b7:bf:99:d7:c4:5e:3a:0d: 4d:93:5b:21:96:ef:45:a4:a3:a7:c4:2f:5c:11:ad: f0:fd:bc:50:07:48:d4:85:04:d8:53:ae:66:b9:28: 6e:bd:8b:ab:2b:f1:77:c1:81:cb:8e:24:77:b7:32: ef:b6:84:9e:aa:69:28:9a:27:8a:3f:f8:b7:ad:fe: d9:28:2a:6c:23:d5:36:2c:95:70:87:b0:47:b9:43: 4c:32:dc:c5:ed:a5:8c:10:af:e9:a2:d9:25:3d:63: 7a:c5:e1:b1:ec:d5:e4:b3:e7:a3:37:23:32:00:ac: fc:56:c3:93:e7:e0:94:65:9d:c0:61:10:ae:a2:f1: 9c:6d:29:0b:db:05:ec:ca:3c:60:81:f6:2a:c9:af: b5:92:a6:49:94:6d:1a:3f:25:32:29:d3:93:06:f5: 36:a2:b0:8a:b5:2a:af:91:c7:b6:84:f7:d9:3e:3c: de:92:5a:ce:6e:d9:cd:31:0c:fb:a7:cd:33:dd:5f: 71:04:e2:74:ef:9b:40:3c:4f:57:5b:6a:c3:78:9e: 8d:1f:ac:5f:cd:b1:d5:1c:82:13:51:0b:25:e8:4f: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:CB:A9:47:FA:EE:4E:4B:76:39:5A:10:BF:39:3D:2A:1D:6F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/20a714de-d4f4-352a-8724-b13f2c17da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2605:4a80:ef08::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:74:9e:0f:2f:0b:e0:11:b1:91:43:79:f7:7d:23:37:70:7d: 2e:2d:93:50:54:2e:09:59:40:8d:5b:9f:b7:44:04:2e:e5:33: e4:f8:41:cc:d6:4d:d3:a7:69:0a:65:54:26:64:c4:e5:1d:d1: 35:ba:67:de:f2:4f:b4:14:fe:d3:9e:4d:a6:83:ce:fb:bb:3c: 7e:59:dd:0f:21:01:eb:fb:78:d8:8d:7e:94:cd:01:73:51:c0: 45:67:d0:63:f2:35:fe:6f:f7:6c:66:23:71:8a:49:9b:6a:91: d6:84:52:bd:53:e4:77:b0:41:cc:8f:e7:48:d1:a8:21:31:56: e2:32:25:fd:04:b1:2e:0a:0b:cf:5d:fa:8d:65:18:fd:c6:31: ac:0b:a9:99:79:ac:a4:7d:db:2f:84:7f:c5:22:e9:44:d6:41: 83:6b:a4:41:b9:ae:9b:c3:62:0e:1d:db:28:d8:2e:aa:c2:d3: 6b:4b:71:ed:6b:cc:7b:4f:3f:dd:f6:24:62:2c:8a:fa:a2:f6: eb:41:19:5c:02:a3:9b:bf:03:8f:57:bc:11:65:f2:bd:24:76: 86:71:6f:19:61:fd:b7:26:e6:82:78:d2:c3:52:09:f3:32:fb: 49:5f:23:e7:68:b4:a1:4e:35:91:5e:5f:c9:36:e5:ff:95:d2: b5:ef:21:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3UwHVxVYrRWlEoBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk M2M0ZWE3OWQtYjg0Mi00YTdkLTlkMjgtNTEzYTI2NDBiYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ysuB15Lit6bvqdzIDqeTR2EdXPb4nKHT/4f 1eeaHEy+NwW+t7+Z18ReOg1Nk1shlu9FpKOnxC9cEa3w/bxQB0jUhQTYU65muShu vYurK/F3wYHLjiR3tzLvtoSeqmkomieKP/i3rf7ZKCpsI9U2LJVwh7BHuUNMMtzF 7aWMEK/potklPWN6xeGx7NXks+ejNyMyAKz8VsOT5+CUZZ3AYRCuovGcbSkL2wXs yjxggfYqya+1kqZJlG0aPyUyKdOTBvU2orCKtSqvkce2hPfZPjzeklrObtnNMQz7 p80z3V9xBOJ075tAPE9XW2rDeJ6NH6xfzbHVHIITUQsl6E83cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPNy6lH+u5OS3Y5WhC/OT0qHW8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMjBhNzE0ZGUtZDRmNC0z NTJhLTg3MjQtYjEzZjJjMTdkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVKgO8I MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI50ng8vC+ARsZFDefd9IzdwfS4tk1BULglZQI1bn7dEBC7lM+T4 QczWTdOnaQplVCZkxOUd0TW6Z97yT7QU/tOeTaaDzvu7PH5Z3Q8hAev7eNiNfpTN AXNRwEVn0GPyNf5v92xmI3GKSZtqkdaEUr1T5HewQcyP50jRqCExVuIyJf0EsS4K C89d+o1lGP3GMawLqZl5rKR92y+Ef8Ui6UTWQYNrpEG5rpvDYg4d2yjYLqrC02tL ce1rzHtPP932JGIsivqi9utBGVwCo5u/A49XvBFl8r0kdoZxbxlh/bcm5oJ40sNS CfMy+0lfI+dotKFONZFeX8k25f+V0rXvIRs= -----END CERTIFICATE-----Generated at Fri May 29 17:49:53 2026 by rpki-client