$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa File: db7a7e43-55f7-38b6-985d-80324c326aa9.roa (raw, json) Hash identifier: AlXZ7clzSIrGA2zdAfh6sjD27TFLAW4xBXktw0pvD4Y= Subject key identifier: 53:86:25:2F:E7:44:DE:6E:2F:ED:32:24:8B:A5:33:88:71:6A:F8:98 Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F4328584D978E8F007709198012704380 Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa Signing time: Wed 22 Apr 2026 14:55:52 +0000 ROA not before: Wed 22 Apr 2026 14:55:52 +0000 ROA not after: Tue 21 Jul 2026 14:55:52 +0000 asID: 204211 IP address blocks: 2602:f9f6:450::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:8e:8f:00:77:09:19:80:12:70:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Apr 22 14:55:52 2026 GMT Not After : Jul 21 14:55:52 2026 GMT Subject: CN=3a336082-e923-4c6d-bbe1-c7205740a1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:15:92:69:ab:ca:99:67:01:e0:64:b5:ef:10: 2f:df:9d:f8:7d:b9:35:e9:87:83:d4:16:2c:7c:ed: 1e:4f:b1:18:49:3c:dd:a9:50:c5:c4:05:26:81:96: bf:56:39:23:82:65:d2:a3:7f:40:2b:b1:92:47:86: 79:5d:eb:5e:2e:27:e4:e7:3c:c2:10:0b:ba:a8:ad: 4d:b2:fb:fd:11:40:67:74:2b:5b:10:f2:ad:e1:8c: e9:08:54:77:66:30:88:9f:67:78:56:41:c6:29:be: 71:28:ba:85:a0:ba:01:17:01:c3:73:b7:c1:57:be: 28:3a:bc:47:df:5b:ef:3c:91:26:e5:a7:a3:d9:f4: 4e:b8:35:52:be:f7:1f:d6:81:28:b0:5a:58:8a:a6: 7e:3a:2e:cd:f9:b7:37:94:24:e8:b8:fb:b5:9b:59: 43:b1:1e:ef:bf:14:88:91:7f:f7:de:7d:68:3c:1c: a8:e0:ca:0b:2f:cc:d5:c7:4d:e7:1c:ee:e0:a1:19: 15:38:15:c5:4c:78:c6:eb:85:6d:f0:ea:0a:d2:3b: 20:59:01:91:d3:2f:46:a5:ae:d4:5b:bb:5c:06:02: 39:63:02:e6:f5:c0:4c:b5:cb:b2:1e:64:0c:aa:fd: 47:f5:a7:b7:e7:11:6c:c8:57:b8:d5:82:c0:19:4a: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:86:25:2F:E7:44:DE:6E:2F:ED:32:24:8B:A5:33:88:71:6A:F8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/db7a7e43-55f7-38b6-985d-80324c326aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f6:450::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:db:fc:00:da:4c:40:e8:1a:cd:84:51:58:02:b9:77:9c:e8: c1:4f:91:c5:b0:5f:8b:83:09:9a:8f:86:5b:a6:5c:2b:a4:e1: 83:59:76:86:45:71:bf:72:fd:f5:1e:00:75:a8:1e:2c:20:cf: c8:57:e0:eb:24:b8:c2:72:b9:8f:50:4a:9d:2e:21:65:66:6c: 9b:ad:54:29:85:31:85:c8:10:a9:c9:f1:99:99:b0:1c:9e:b4: 64:57:4a:37:82:2a:0c:ad:55:4b:82:c1:0d:53:3b:0c:67:7e: d3:a1:ec:5e:10:4f:79:1d:4e:89:96:b4:5f:2f:57:f4:53:f7: 1f:42:90:e6:0f:93:ed:bd:b9:cd:91:75:9a:7d:2c:8b:94:4b: 43:79:fd:36:6f:ee:bc:a4:0f:24:26:a4:58:fd:5f:60:03:41: d7:98:7b:3c:a1:ec:20:5f:9d:1d:10:45:e5:29:b1:42:a1:f3: cf:c6:6e:62:8b:92:6b:68:a4:2c:e2:13:1b:36:ae:3d:4a:c3: 75:ee:bf:27:49:ee:d5:a2:f3:e2:2b:f1:77:57:3b:85:7b:54: 7a:fb:e6:a3:5d:ab:27:b4:58:25:92:70:53:b0:66:c2:0a:41: af:9c:0d:de:83:db:05:8b:78:97:ec:db:eb:0b:1f:cd:18:0a: 4e:ee:8c:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Xjo8AdwkZgBJwQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI2MDQyMjE0NTU1MloXDTI2MDcyMTE0NTU1MlowLzEtMCsGA1UEAxMk M2EzMzYwODItZTkyMy00YzZkLWJiZTEtYzcyMDU3NDBhMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRWSaavKmWcB4GS17xAv3534fbk16YeD1BYs fO0eT7EYSTzdqVDFxAUmgZa/VjkjgmXSo39AK7GSR4Z5XeteLifk5zzCEAu6qK1N svv9EUBndCtbEPKt4YzpCFR3ZjCIn2d4VkHGKb5xKLqFoLoBFwHDc7fBV74oOrxH 31vvPJEm5aej2fROuDVSvvcf1oEosFpYiqZ+Oi7N+bc3lCTouPu1m1lDsR7vvxSI kX/33n1oPByo4MoLL8zVx03nHO7goRkVOBXFTHjG64Vt8OoK0jsgWQGR0y9Gpa7U W7tcBgI5YwLm9cBMtcuyHmQMqv1H9ae35xFsyFe41YLAGUrQnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOGJS/nRN5uL+0yJIulM4hxaviYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvZGI3YTdlNDMtNTVmNy0z OGI2LTk4NWQtODAzMjRjMzI2YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gRQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETb/ADaTEDoGs2EUVgCuXec6MFPkcWwX4uDCZqPhlumXCuk4YNZ doZFcb9y/fUeAHWoHiwgz8hX4OskuMJyuY9QSp0uIWVmbJutVCmFMYXIEKnJ8ZmZ sByetGRXSjeCKgytVUuCwQ1TOwxnftOh7F4QT3kdTomWtF8vV/RT9x9CkOYPk+29 uc2RdZp9LIuUS0N5/TZv7rykDyQmpFj9X2ADQdeYezyh7CBfnR0QReUpsUKh88/G bmKLkmtopCziExs2rj1Kw3XuvydJ7tWi8+Ir8XdXO4V7VHr75qNdqye0WCWScFOw ZsIKQa+cDd6D2wWLeJfs2+sLH80YCk7ujKE= -----END CERTIFICATE-----Generated at Mon Apr 27 14:03:15 2026 by rpki-client