$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json) Hash identifier: Y3oN1phaVuD1pLELvgNBVgoO9Cer2K1/ULWYrUUpaFQ= Subject key identifier: FB:3F:33:5E:80:B7:8F:AC:66:FC:FB:AA:2A:52:E8:B4:7D:81:B9:D5 Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F4328584DEDE0A0475C9E65807201F790 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 399844 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:a0:47:5c:9e:65:80:72:01:f7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=40ed90f3-8c25-46b7-8e0c-6ff6f20ad8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:8f:e8:f6:2f:30:b5:3d:61:d7:ea:b8:85: a3:b4:55:c7:70:da:18:66:53:c9:d5:76:a1:4b:22: c3:56:1c:47:a9:a9:f8:db:51:28:92:e4:d1:ae:d6: f5:49:b3:63:46:30:63:38:95:88:12:9b:03:84:15: 1e:50:a9:58:a8:8e:79:7e:ea:b6:03:46:d7:8b:49: 5c:e0:d3:1f:6b:68:43:1a:0e:b1:26:09:4c:4c:c4: bb:dc:5e:56:af:11:22:28:82:ec:05:a2:ea:fa:b1: 89:a4:97:15:25:1b:4b:67:e1:a7:44:05:b8:c8:cc: 5c:d5:cc:65:6c:5f:d2:9a:06:c1:69:34:e6:18:4a: c3:60:97:66:1f:de:2f:75:ad:bf:57:44:a1:42:4e: 56:27:52:0f:ba:9f:52:d7:ee:8a:1a:66:cf:5c:f2: 4b:c3:ff:f2:c1:09:93:5d:09:f8:a2:d5:10:d5:2b: fe:ce:8e:0c:e6:bd:98:ff:13:75:d6:b9:dc:f0:33: 50:19:25:a8:be:0b:42:85:54:eb:51:94:67:0d:d9: 61:6b:91:fe:79:c2:02:c0:8c:fa:b8:3a:3b:d0:bc: 7b:f3:65:77:c5:c6:24:ef:af:ef:be:a6:85:42:96: 86:f2:99:ac:9d:46:30:59:ac:78:31:17:aa:01:e8: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:33:5E:80:B7:8F:AC:66:FC:FB:AA:2A:52:E8:B4:7D:81:B9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:16:ed:39:f3:38:37:70:25:a9:74:00:74:9a:df:51:01:17: 1f:b3:99:bd:3e:2a:8b:43:31:30:42:27:a9:63:21:99:63:1d: 64:13:63:44:bb:c3:cf:29:d4:f4:65:d1:b2:89:6d:8f:1f:3a: 9e:9d:aa:ce:d7:54:87:03:cc:31:38:66:a1:59:d0:b2:42:5d: c9:07:c1:a3:78:23:9a:a9:bf:8d:67:10:64:2b:55:00:a4:1e: f6:11:c3:3e:56:62:5d:b0:0c:b7:d4:dd:c1:f3:c0:6c:f4:44: f4:30:2f:ba:07:67:57:63:27:b9:dc:0a:9c:08:66:dc:9a:73: 00:8f:f2:e1:43:be:70:d7:ce:f4:09:95:55:cc:f3:4c:e8:00: a4:40:3c:49:5e:68:2c:cb:51:ad:a9:b5:a5:34:8e:0d:76:7b: de:fe:21:f7:c1:4a:3a:30:11:5c:ac:a0:60:ac:94:ba:04:07: 9f:f5:41:61:1f:3e:8b:8a:f1:e8:41:74:ea:69:71:87:dc:e7: e3:c1:23:91:2a:1e:a9:43:4c:0b:4a:98:5d:3b:78:c1:04:cf: e4:45:ed:ac:5f:52:28:27:eb:ee:28:8c:eb:06:c4:5a:d3:06: a9:1b:8d:a6:27:07:44:fe:60:21:ea:ac:bb:db:5b:95:cf:d6: 49:55:39:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4KBHXJ5lgHIB95AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NDBlZDkwZjMtOGMyNS00NmI3LThlMGMtNmZmNmYyMGFkOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheWP6PYvMLU9YdfquIWjtFXHcNoYZlPJ1Xah SyLDVhxHqan421EokuTRrtb1SbNjRjBjOJWIEpsDhBUeUKlYqI55fuq2A0bXi0lc 4NMfa2hDGg6xJglMTMS73F5WrxEiKILsBaLq+rGJpJcVJRtLZ+GnRAW4yMxc1cxl bF/SmgbBaTTmGErDYJdmH94vda2/V0ShQk5WJ1IPup9S1+6KGmbPXPJLw//ywQmT XQn4otUQ1Sv+zo4M5r2Y/xN11rnc8DNQGSWovgtChVTrUZRnDdlha5H+ecICwIz6 uDo70Lx782V3xcYk76/vvqaFQpaG8pmsnUYwWax4MReqAeh7qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPs/M16At4+sZvz7qipS6LR9gbnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkW7TnzODdwJal0AHSa31EBFx+zmb0+KotDMTBCJ6ljIZljHWQT Y0S7w88p1PRl0bKJbY8fOp6dqs7XVIcDzDE4ZqFZ0LJCXckHwaN4I5qpv41nEGQr VQCkHvYRwz5WYl2wDLfU3cHzwGz0RPQwL7oHZ1djJ7ncCpwIZtyacwCP8uFDvnDX zvQJlVXM80zoAKRAPEleaCzLUa2ptaU0jg12e97+IffBSjowEVysoGCslLoEB5/1 QWEfPouK8ehBdOppcYfc5+PBI5EqHqlDTAtKmF07eMEEz+RF7axfUign6+4ojOsG xFrTBqkbjaYnB0T+YCHqrLvbW5XP1klVOQs= -----END CERTIFICATE-----Generated at Sun May 24 06:44:17 2026 by rpki-client