$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa File: 577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (raw, json) Hash identifier: 4JDS2hvWK6wGsenB2pCxCM2wGZ+1XkyrItx1iaFEp7U= Subject key identifier: E3:8C:2F:6D:14:4A:40:B5:9B:3A:B3:55:7E:18:05:94:D8:10:8E:03 Certificate issuer: /CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Certificate serial: 010D0C9F4328584DD35B0EE1A124DA5E4C282180 Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 11703 IP address blocks: 2602:f609::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0e:e1:a1:24:da:5e:4c:28:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=70be9288-8a69-4021-924d-5fcf00c06796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fc:6b:e2:af:b7:df:1f:49:b2:00:c0:d8:52: 84:4d:f3:00:a2:15:ba:0c:e4:27:6b:a1:2f:91:38: eb:b9:7d:24:3f:0f:7b:e9:34:12:3c:10:8f:34:2d: 99:ee:92:8b:63:42:0b:79:06:e8:5f:5d:2a:e7:ea: 7b:69:ac:a8:2c:25:d0:0a:67:60:64:7d:da:6c:13: bf:26:89:d3:1d:b2:bb:10:de:55:95:23:8a:06:0d: 0f:28:dc:99:5d:90:f5:79:48:47:2d:a7:f0:7e:02: ee:68:49:f1:99:56:18:a3:fe:52:2c:8b:46:34:f0: a3:2b:59:b7:35:d7:c0:94:63:98:29:51:c6:d9:db: b7:ff:74:f2:9e:fb:c0:21:ce:98:60:cf:87:fd:4e: 60:66:48:a3:4c:01:48:1b:c7:7d:e1:76:11:4f:8a: 89:24:65:a2:da:67:0d:d0:5d:3c:45:a6:5a:79:45: 7d:a1:f2:f4:86:d1:00:0a:84:9d:0c:1f:be:84:d9: a9:00:73:45:9d:65:ce:2a:d4:96:d5:2c:a9:18:ff: 51:30:07:a5:23:15:dc:2a:66:36:8b:15:81:bb:69: 9c:54:f0:69:87:8e:86:03:36:7a:6f:ad:98:01:b7: 17:5b:8c:79:08:fe:94:cc:85:3b:d7:8d:5f:9f:33: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8C:2F:6D:14:4A:40:B5:9B:3A:B3:55:7E:18:05:94:D8:10:8E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl X509v3 Authority Key Identifier: keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f609::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:15:a0:df:1f:f7:8a:1a:f8:13:90:99:d6:93:5d:98:cb:a9: c5:51:e9:cc:0f:c1:b3:ae:47:06:21:0c:2d:50:13:60:82:34: 10:83:14:71:d1:66:7b:4c:84:b8:f0:a2:0e:f9:0b:fe:8a:22: 33:67:8d:3a:26:d4:f4:2a:ad:3f:51:db:3b:98:16:d3:7d:49: 9c:c0:09:28:5f:7b:aa:da:f2:43:9b:7c:1b:cb:50:e1:a5:b4: 54:d6:ee:2b:c7:fc:c5:f1:8b:50:2b:12:33:8c:7e:d8:1f:45: b6:7a:63:d9:70:af:32:6e:49:2b:81:ce:4e:36:25:f1:19:65: 6e:ac:d5:71:a1:79:ef:02:3b:61:91:94:d1:ff:fe:06:bb:c5: 05:84:59:a9:d7:02:13:0e:11:6e:ae:c5:56:aa:95:85:26:f7: 3c:94:72:75:cf:80:81:3f:f7:18:bd:6c:5c:c5:d6:54:17:32: fb:9a:9b:a6:3a:b7:3d:0c:1d:aa:86:a3:08:7e:5d:5b:e9:7b: 3f:5a:0c:7c:b1:d5:77:47:15:9e:ca:3b:09:3d:df:17:40:35: 63:2f:23:49:ee:3f:c3:2e:07:41:77:e2:22:d7:bc:2b:57:94: 8e:f7:ad:73:ec:77:e8:d3:38:d6:3c:fe:5e:e2:e2:40:7f:fa: 7a:d0:2b:52 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3TWw7hoSTaXkwoIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBh OGQwMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk NzBiZTkyODgtOGE2OS00MDIxLTkyNGQtNWZjZjAwYzA2Nzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/xr4q+33x9JsgDA2FKETfMAohW6DOQna6Ev kTjruX0kPw976TQSPBCPNC2Z7pKLY0ILeQboX10q5+p7aayoLCXQCmdgZH3abBO/ JonTHbK7EN5VlSOKBg0PKNyZXZD1eUhHLafwfgLuaEnxmVYYo/5SLItGNPCjK1m3 NdfAlGOYKVHG2du3/3TynvvAIc6YYM+H/U5gZkijTAFIG8d94XYRT4qJJGWi2mcN 0F08RaZaeUV9ofL0htEACoSdDB++hNmpAHNFnWXOKtSW1SypGP9RMAelIxXcKmY2 ixWBu2mcVPBph46GAzZ6b62YAbcXW4x5CP6UzIU7141fnzNxDQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOOML20USkC1mzqzVX4YBZTYEI4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIy Mzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvNTc3Y2Q1MWUtNmU4My0z YTUwLTg2NzktYzE0NTM2ZmUwYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmYyMjM5OTgtMzgxOS00YjcyLWFk ZTEtZWVjMjkyYjBhOGQwL2ZmMjIzOTk4LTM4MTktNGI3Mi1hZGUxLWVlYzI5MmIw YThkMC5jcmwwHwYDVR0jBBgwFoAUNGQkd97ZJoy7rpXVZEf0qDPdknkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMy OTJiMGE4ZDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL2CQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhBWg3x/3ihr4E5CZ1pNdmMupxVHpzA/Bs65HBiEMLVATYII0EIMU cdFme0yEuPCiDvkL/ooiM2eNOibU9CqtP1HbO5gW031JnMAJKF97qtryQ5t8G8tQ 4aW0VNbuK8f8xfGLUCsSM4x+2B9Ftnpj2XCvMm5JK4HOTjYl8RllbqzVcaF57wI7 YZGU0f/+BrvFBYRZqdcCEw4Rbq7FVqqVhSb3PJRydc+AgT/3GL1sXMXWVBcy+5qb pjq3PQwdqoajCH5dW+l7P1oMfLHVd0cVnso7CT3fF0A1Yy8jSe4/wy4HQXfiIte8 K1eUjvetc+x36NM41jz+XuLiQH/6etArUg== -----END CERTIFICATE-----Generated at Sat Jun 13 01:04:36 2026 by rpki-client