$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/20909af6-f524-353a-ae89-110fe7c9385d.roa File: 20909af6-f524-353a-ae89-110fe7c9385d.roa (raw, json) Hash identifier: 1tyjNvWty7ozHPqY+l+IrmDLM4TaMCDR3dNttFft3Y8= Subject key identifier: 49:7B:8A:7F:B0:FC:77:B3:E5:4B:1F:02:0A:6C:D0:BB:33:EB:92:FD Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5944ABF09B23B5076E000 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/20909af6-f524-353a-ae89-110fe7c9385d.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 2620:11a:c018::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:94:4a:bf:09:b2:3b:50:76:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=6b3d5c9b-7a85-43a7-bae2-8f90cb2afe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:88:30:03:8f:b0:72:26:43:31:1d:cb:ba: a8:bd:32:a1:f1:44:08:a0:27:a1:99:10:08:49:c1: 71:4b:d5:7c:df:eb:e4:c4:d0:45:e4:de:c6:96:37: 3f:82:f2:15:14:f8:83:b8:8e:03:57:24:ff:ce:9a: c5:95:f8:66:0b:02:0a:30:7b:bf:d3:c8:25:5b:32: ca:07:af:3e:75:72:3a:12:9f:e3:83:74:a0:1f:28: e5:51:6b:ed:a0:b2:8d:98:f0:c0:d0:d2:7f:5a:81: db:bf:5b:aa:bd:a9:69:9a:62:c2:94:b9:f4:26:86: e2:17:33:78:83:74:07:ef:d1:54:cb:0d:61:99:18: d4:ae:65:da:b8:cc:3a:57:c0:c1:66:99:e6:81:b7: 5e:87:19:f7:f9:87:ab:ba:2e:15:f5:0f:d3:6e:5f: 2e:33:96:87:54:a6:c9:51:2f:0c:4a:99:68:9d:2d: 29:c6:28:5f:81:5a:1e:bb:e0:05:f8:8d:8b:eb:17: 7c:a7:20:fd:5b:37:9e:f7:55:c0:81:fb:41:5b:43: 53:37:f7:ae:b1:34:9b:e6:b2:71:d4:61:e9:c5:ea: 17:b7:a4:7a:2b:85:b1:65:a0:e7:ab:78:68:eb:4b: d3:5b:a4:78:f5:f4:08:5e:eb:f9:26:40:a1:f9:f8: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:8A:7F:B0:FC:77:B3:E5:4B:1F:02:0A:6C:D0:BB:33:EB:92:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/20909af6-f524-353a-ae89-110fe7c9385d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c018::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:14:09:7f:a8:4e:b9:4b:a5:df:4d:2e:88:a1:7b:f9:ef:8c: 92:d9:1f:12:ef:1f:ff:07:84:b8:31:ab:14:0c:6c:4d:64:50: b5:29:db:ac:ef:99:f5:ce:58:8f:30:38:38:9e:39:94:f4:13: 81:70:cb:86:77:2c:ca:f4:58:12:47:45:d9:9e:07:65:81:c9: 3b:e1:72:bb:3e:d7:1d:0b:9c:81:47:8e:a1:61:e0:36:0c:5b: 60:23:79:52:62:d8:f5:3f:f3:9a:a4:ff:8c:b2:12:67:e7:11: c2:51:6b:92:13:a5:51:f2:39:f2:bd:ca:40:83:8d:33:62:38: 6e:62:ee:99:6b:13:b0:1b:5e:4e:e6:66:9c:dc:a3:a7:52:74: e8:bf:a1:15:04:cd:07:bc:57:19:8b:a6:cd:33:7b:37:fc:99: cb:ae:40:79:23:a3:9c:f0:4a:b3:5d:36:a8:4e:92:f1:ba:b1: ce:4c:23:5c:a3:09:6b:de:f6:4e:52:3a:f1:57:44:f6:3d:b4: 6c:b1:57:b7:3c:12:90:91:6c:1b:a9:f8:7b:40:87:9a:9d:2c: 00:01:85:20:52:72:25:aa:5c:26:cb:d7:fb:b6:77:32:8a:94: 0a:36:b4:ee:d8:df:45:1b:b4:c9:a2:2e:7d:d2:f0:c8:81:30: 96:15:86:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE20pZRKvwmyO1B24AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NmIzZDVjOWItN2E4NS00M2E3LWJhZTItOGY5MGNiMmFmZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDSIMAOPsHImQzEdy7qovTKh8UQIoCehmRAI ScFxS9V83+vkxNBF5N7Gljc/gvIVFPiDuI4DVyT/zprFlfhmCwIKMHu/08glWzLK B68+dXI6Ep/jg3SgHyjlUWvtoLKNmPDA0NJ/WoHbv1uqvalpmmLClLn0JobiFzN4 g3QH79FUyw1hmRjUrmXauMw6V8DBZpnmgbdehxn3+Yerui4V9Q/Tbl8uM5aHVKbJ US8MSplonS0pxihfgVoeu+AF+I2L6xd8pyD9Wzee91XAgftBW0NTN/eusTSb5rJx 1GHpxeoXt6R6K4WxZaDnq3ho60vTW6R49fQIXuv5JkCh+fhl5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEl7in+w/Hez5UsfAgps0Lsz65L9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjA5MDlhZjYtZjUyNC0z NTNhLWFlODktMTEwZmU3YzkzODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0UCX+oTrlLpd9NLoihe/nvjJLZHxLvH/8HhLgxqxQMbE1kULUp 26zvmfXOWI8wODieOZT0E4Fwy4Z3LMr0WBJHRdmeB2WByTvhcrs+1x0LnIFHjqFh 4DYMW2AjeVJi2PU/85qk/4yyEmfnEcJRa5ITpVHyOfK9ykCDjTNiOG5i7plrE7Ab Xk7mZpzco6dSdOi/oRUEzQe8VxmLps0zezf8mcuuQHkjo5zwSrNdNqhOkvG6sc5M I1yjCWve9k5SOvFXRPY9tGyxV7c8EpCRbBup+HtAh5qdLAABhSBSciWqXCbL1/u2 dzKKlAo2tO7Y30UbtMmiLn3S8MiBMJYVhhI= -----END CERTIFICATE-----Generated at Sun May 3 17:56:20 2026 by rpki-client