$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa File: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json) Hash identifier: uJkO3jNRxCSoB+6BRWXJob8NBZRhTR0qu8vCuZFpWK0= Subject key identifier: 8C:87:19:39:20:44:2C:E2:D6:91:76:A3:A3:24:2E:98:17:2F:23:10 Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F4328584DC135C33537078BA56DB9B780 Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 3128 IP address blocks: 2600:1d00::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c3:35:37:07:8b:a5:6d:b9:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=03147c38-2010-4945-88f2-c76f26b5340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:49:a1:bc:00:28:94:16:98:fb:7f:6b:81:34: 43:f7:b1:8c:06:15:c9:ee:db:ff:69:b9:eb:4c:8a: 40:45:2c:4e:e8:a2:d7:9f:23:ef:a6:fe:5f:f6:fd: 4d:6f:41:77:c8:b7:b3:9c:c0:87:a9:47:4f:a5:68: e1:6c:ad:fe:aa:87:91:17:d7:ec:a3:4c:ee:18:f4: 6b:20:30:35:dd:be:9a:51:66:9a:57:36:a6:ab:cd: 09:01:cb:ea:f7:58:2a:96:ff:1e:40:9a:82:f3:66: 68:f3:0d:19:84:2d:fd:3e:aa:b8:d4:e1:4f:e2:62: cc:8c:96:a7:22:b0:7a:2c:85:0d:92:e2:7d:09:76: 49:95:df:11:b9:39:63:4b:4a:dc:f2:9e:f0:df:d6: 25:d3:21:d9:56:cd:a6:d5:3d:01:cf:33:a4:cd:d1: 02:bb:39:71:a3:57:0f:87:90:5a:07:6f:ca:14:2f: 30:87:46:b7:e5:7b:de:e1:9d:f8:60:fa:01:7d:e6: 3d:6d:8f:32:70:92:32:71:ef:01:81:eb:3f:80:77: df:72:51:86:91:7b:b1:41:41:94:b5:f6:9b:f3:03: f0:77:2b:ce:c0:08:f4:27:09:c8:21:aa:9a:b4:fc: cd:80:59:fb:62:dd:a7:af:19:f6:38:20:9a:a7:f6: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:87:19:39:20:44:2C:E2:D6:91:76:A3:A3:24:2E:98:17:2F:23:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv6: 2600:1d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:55:f4:69:dd:07:2f:86:0b:62:81:ba:4c:3a:2c:21:54:b3: 82:1b:13:cb:74:a7:bf:42:f5:67:76:d8:58:0d:b5:46:7c:6a: 33:d9:09:e9:3a:19:5a:71:48:76:84:fa:56:52:92:9d:a6:47: 38:a8:fc:b7:1a:17:43:f7:1d:50:89:4f:82:95:3a:ef:a8:aa: 91:c7:c3:02:4f:a7:92:84:c4:d1:57:43:e7:14:a8:e4:48:ca: 84:ae:f5:de:a0:5c:36:88:5c:1a:f0:f1:ef:e0:55:1c:3d:3c: a9:8d:57:10:85:e2:c6:51:09:e6:dd:6f:04:7b:52:66:f3:ea: af:44:5b:df:a6:12:d1:48:9c:fa:5d:d4:8c:b5:92:1b:58:cd: ac:37:8d:13:55:d2:27:8c:28:86:5e:8e:88:ca:46:50:0d:ac: fb:5a:d1:31:6a:c4:50:d0:20:a9:70:a4:0b:ca:e8:56:d9:a4: aa:71:36:e4:69:20:de:70:74:b0:c9:f6:85:33:23:28:11:5c: f8:49:f0:99:ce:d0:c8:46:c1:97:e7:39:38:fd:93:0c:74:e3: 6d:11:de:94:79:8c:08:24:43:4f:52:e3:8c:7f:b7:e5:bc:6b: 77:91:7e:39:5f:e8:68:1b:3e:1a:f1:a3:b9:12:33:ee:59:db: 70:9f:b8:7b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3BNcM1NweLpW25t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk MDMxNDdjMzgtMjAxMC00OTQ1LTg4ZjItYzc2ZjI2YjUzNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEmhvAAolBaY+39rgTRD97GMBhXJ7tv/abnr TIpARSxO6KLXnyPvpv5f9v1Nb0F3yLeznMCHqUdPpWjhbK3+qoeRF9fso0zuGPRr IDA13b6aUWaaVzamq80JAcvq91gqlv8eQJqC82Zo8w0ZhC39Pqq41OFP4mLMjJan IrB6LIUNkuJ9CXZJld8RuTljS0rc8p7w39Yl0yHZVs2m1T0BzzOkzdECuzlxo1cP h5BaB2/KFC8wh0a35Xve4Z34YPoBfeY9bY8ycJIyce8Bges/gHffclGGkXuxQUGU tfab8wPwdyvOwAj0JwnIIaqatPzNgFn7Yt2nrxn2OCCap/YXPwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIyHGTkgRCzi1pF2o6MkLpgXLyMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYjQ1ZjAxYjQtYTY2ZS0z NmM0LWJjMGEtNDNmZDMzOGRmMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAdADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVVfRp3QcvhgtigbpMOiwhVLOCGxPLdKe/QvVndthYDbVGfGoz2Qnp OhlacUh2hPpWUpKdpkc4qPy3GhdD9x1QiU+ClTrvqKqRx8MCT6eShMTRV0PnFKjk SMqErvXeoFw2iFwa8PHv4FUcPTypjVcQheLGUQnm3W8Ee1Jm8+qvRFvfphLRSJz6 XdSMtZIbWM2sN40TVdInjCiGXo6IykZQDaz7WtExasRQ0CCpcKQLyuhW2aSqcTbk aSDecHSwyfaFMyMoEVz4SfCZztDIRsGX5zk4/ZMMdONtEd6UeYwIJENPUuOMf7fl vGt3kX45X+hoGz4a8aO5EjPuWdtwn7h7 -----END CERTIFICATE-----Generated at Fri May 8 18:09:46 2026 by rpki-client