$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa File: 3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (raw, json) Hash identifier: R4O5x/iuznM3jMR9vY7FOU+gc70xLRVrOY/xyEiNN5I= Subject key identifier: ED:48:B3:17:B7:FF:2B:BE:78:D0:72:84:88:57:0B:D7:7C:7C:D4:99 Certificate issuer: /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Certificate serial: 010D0C9F4328584DA6B01DBD64ED64754BB9ED80 Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 63178 IP address blocks: 2607:6840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1d:bd:64:ed:64:75:4b:b9:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=53e620b8-269c-4b05-a266-84b81d5dd8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:41:00:97:8d:8d:b4:32:c1:cc:77:20:cf: 74:13:3c:9d:56:7d:4e:cc:9d:3c:fb:d3:c0:e3:dc: 99:13:15:7c:77:81:10:32:60:df:ef:c4:9f:ac:b8: 59:7d:e6:9e:ca:b7:2c:3c:67:44:6c:ff:5f:1d:3a: 48:7b:a1:da:d3:9e:b1:3f:b4:36:b4:c1:cf:02:41: ea:93:4a:05:73:59:97:40:3f:40:81:c4:2d:60:cc: 88:ae:8a:0c:32:6b:bc:77:81:4a:48:a5:3b:d9:d7: 76:ac:89:4e:99:40:a4:74:d2:2b:d5:db:ba:9b:2b: d1:03:b3:aa:e4:29:b1:aa:ad:98:27:37:ec:de:0a: b6:c0:71:a0:4a:a1:e1:ae:10:7c:bb:7f:24:92:d9: b5:92:b8:e6:ad:4d:6e:bf:46:9f:23:f5:7d:c8:f4: 8a:48:f6:b1:55:03:93:d4:e5:c6:a5:9a:0e:77:0a: d5:79:82:3a:de:6e:5a:53:3e:95:b5:b8:85:ea:1c: ab:6b:99:c5:b3:c5:8c:f0:af:11:61:61:ce:27:fe: fe:4a:c2:fe:20:04:f2:6e:e2:f1:e2:16:fb:db:85: 59:24:f6:5f:58:5c:7a:16:a7:3d:38:01:0d:5f:50: ec:f9:bd:31:dc:5c:a0:62:01:46:7a:ce:29:d1:0e: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:48:B3:17:B7:FF:2B:BE:78:D0:72:84:88:57:0B:D7:7C:7C:D4:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl X509v3 Authority Key Identifier: keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer sbgp-ipAddrBlock: critical IPv6: 2607:6840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:dd:76:93:3c:12:58:f0:32:43:00:84:62:4c:a9:1c:5a: 40:37:4a:ed:29:3d:9e:78:6e:15:f7:ce:01:fc:70:bb:ce:16: 6c:07:6c:77:85:0c:8b:76:46:59:2b:1b:2f:77:ba:77:de:ca: 7f:cf:98:b6:45:54:33:65:f5:b5:37:68:ec:07:32:78:7d:22: 0d:fd:11:ea:88:93:6e:f8:e3:de:a3:29:87:f5:f0:ad:8d:83: c8:9a:cb:7a:2a:a4:19:bd:f5:eb:aa:cb:1b:8a:34:fb:c1:46: a3:d7:75:00:6f:d9:72:c0:40:5b:48:45:84:38:08:e8:a3:74: 25:ee:6a:f5:d7:b0:72:ed:1c:7d:e7:4f:e9:58:2c:b9:4b:da: d8:c5:f0:c5:69:62:5b:92:51:36:3a:e6:0c:06:5c:59:d9:62: bb:3d:3d:cb:6c:54:10:a2:da:1d:65:a3:f1:10:a7:d5:aa:72: b3:83:9f:44:6c:d4:41:8d:10:1e:d1:95:0b:f2:00:c6:74:8c: 1e:e4:b5:99:ed:e0:66:ba:ab:30:c8:b0:04:50:91:31:f7:8c: 10:28:da:f0:f7:d4:ff:e2:de:a7:3f:6a:61:2f:dc:07:e1:7a: 10:ea:5e:a0:dd:46:30:af:ef:43:fd:0c:18:fc:29:89:eb:15: cc:fc:33:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msB29ZO1kdUu57YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzZTY2NDYtN2M5OS00OWMwLTljYjAtNTRiOGU0NTc4 OGI4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTNlNjIwYjgtMjY5Yy00YjA1LWEyNjYtODRiODFkNWRkOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqehBAJeNjbQywcx3IM90EzydVn1OzJ08+9PA 49yZExV8d4EQMmDf78SfrLhZfeaeyrcsPGdEbP9fHTpIe6Ha056xP7Q2tMHPAkHq k0oFc1mXQD9AgcQtYMyIrooMMmu8d4FKSKU72dd2rIlOmUCkdNIr1du6myvRA7Oq 5Cmxqq2YJzfs3gq2wHGgSqHhrhB8u38kktm1krjmrU1uv0afI/V9yPSKSPaxVQOT 1OXGpZoOdwrVeYI63m5aUz6VtbiF6hyra5nFs8WM8K8RYWHOJ/7+SsL+IATybuLx 4hb724VZJPZfWFx6Fqc9OAENX1Ds+b0x3FygYgFGes4p0Q483wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO1Isxe3/yu+eNByhIhXC9d8fNSZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNl NjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4ZTQ1Nzg4YjgvM2IzYWY3ZTItMTFjMy0z ZTEzLTkyY2QtMTljMmQyOTFiNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmUzZTY2NDYtN2M5OS00OWMwLTlj YjAtNTRiOGU0NTc4OGI4LzJlM2U2NjQ2LTdjOTktNDljMC05Y2IwLTU0YjhlNDU3 ODhiOC5jcmwwHwYDVR0jBBgwFoAUDMaPYFMxrylXqe3x1gkGXUdmhO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZTNlNjY0Ni03Yzk5LTQ5YzAtOWNiMC01NGI4 ZTQ1Nzg4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdoQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOF912kzwSWPAyQwCEYkypHFpAN0rtKT2eeG4V984B/HC7zhZsB2x3 hQyLdkZZKxsvd7p33sp/z5i2RVQzZfW1N2jsBzJ4fSIN/RHqiJNu+OPeoymH9fCt jYPImst6KqQZvfXrqssbijT7wUaj13UAb9lywEBbSEWEOAjoo3Ql7mr117By7Rx9 50/pWCy5S9rYxfDFaWJbklE2OuYMBlxZ2WK7PT3LbFQQotodZaPxEKfVqnKzg59E bNRBjRAe0ZUL8gDGdIwe5LWZ7eBmuqswyLAEUJEx94wQKNrw99T/4t6nP2phL9wH 4XoQ6l6g3UYwr+9D/QwY/CmJ6xXM/DPk -----END CERTIFICATE-----Generated at Fri May 1 17:00:35 2026 by rpki-client