$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa File: aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa (raw, json) Hash identifier: s1zT6TMtlTRaeANvVGpn9IJBYXtsdEDgj6BRDgWs5l0= Subject key identifier: 09:1B:04:F4:4C:04:C6:B3:94:0F:39:AC:97:EE:3E:76:D9:0B:BB:DA Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A594D2C891A2BE49A403C0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 2620:11a:c04d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:94:d2:c8:91:a2:be:49:a4:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=d7e0e3b0-75fe-4666-856d-be84e58fb2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:dc:7b:63:17:a6:e3:5a:ec:f6:cd:c1:06: b3:e9:55:e2:52:2b:cd:06:80:5d:f6:15:a1:d5:7a: d2:f1:9d:a9:bc:8e:78:f9:45:bb:06:d7:59:7f:ec: 61:57:ff:be:c4:dd:be:d5:01:87:59:f0:dc:b6:25: 83:ee:68:db:7d:aa:ce:49:c5:ce:5b:d6:76:27:25: 90:72:82:c3:22:5d:46:6c:5c:67:fc:04:5f:87:5f: e0:2b:06:52:9d:39:07:56:a9:e3:58:45:50:07:4a: c2:11:47:af:d0:a5:a8:4e:b9:c6:4e:3e:f5:92:5b: 8a:c8:6d:11:bf:c7:52:87:1c:49:d0:23:64:2a:c9: bd:05:bf:6d:ef:1c:a2:10:c6:fb:1c:01:c2:1d:e2: 7e:91:b6:09:46:a1:4b:de:7c:ea:70:49:d4:2b:4e: 5d:d9:09:04:c2:d5:63:5d:05:5f:64:10:40:0d:63: 2a:1d:b9:b6:0e:b9:4e:e0:d0:24:5d:27:d6:9a:14: 97:86:c8:14:3a:cb:09:e7:a9:0a:56:e6:b6:dd:02: 37:13:cc:2e:3a:0e:8e:1e:b7:4f:b3:5d:62:8f:29: 1d:c4:e7:5b:f8:21:24:66:68:cc:84:cf:a8:3e:1d: 60:65:f1:32:79:e8:c1:10:13:70:81:25:68:50:36: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:04:F4:4C:04:C6:B3:94:0F:39:AC:97:EE:3E:76:D9:0B:BB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/aa3bb250-78c5-3609-bbbc-4b0d5c034827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c04d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:90:3c:dc:32:5c:d3:a3:d3:3d:77:50:16:3b:77:0a:97:c0: a4:e4:d1:51:f4:b9:87:50:70:4c:e2:95:e3:82:34:60:70:05: 1a:aa:ac:d8:5c:ed:cd:b6:e5:14:ea:12:bb:74:d9:0a:31:06: 6d:29:fc:1b:34:46:10:fc:91:f9:ec:16:73:d9:cc:19:6e:f4: d5:64:94:df:96:df:6d:5a:90:d1:fa:c5:56:b5:e3:ca:ba:62: 5f:c9:bb:27:db:5a:15:4e:40:cb:54:00:96:39:26:ca:10:38: 28:bc:06:a2:87:6a:68:05:15:7b:26:a4:f8:c5:7c:78:ea:e2: 34:ab:d0:41:c6:c8:7e:61:bf:8d:11:26:8b:02:63:a9:b9:b3: 5f:89:16:1b:3d:4d:0d:ec:b0:59:75:b7:29:d3:56:ca:64:73: 53:28:95:e2:cb:b8:ee:bf:92:11:b1:ae:64:7a:ca:7e:dd:24: e7:de:39:f0:0d:0e:54:ae:6e:0d:e2:36:a9:b5:22:eb:6a:33: c0:72:0b:c8:39:74:00:fd:e5:e2:b5:a9:17:dc:0d:5a:9c:df: d1:da:e3:cd:d8:01:96:2f:5d:82:0b:e5:62:d3:81:72:d7:c0: d0:f1:7f:b8:9a:f6:c7:f0:48:8b:08:1f:7d:f0:f8:e0:77:b4: 0e:f1:5f:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE20pZTSyJGivkmkA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDdlMGUzYjAtNzVmZS00NjY2LTg1NmQtYmU4NGU1OGZiMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzzce2MXpuNa7PbNwQaz6VXiUivNBoBd9hWh 1XrS8Z2pvI54+UW7BtdZf+xhV/++xN2+1QGHWfDctiWD7mjbfarOScXOW9Z2JyWQ coLDIl1GbFxn/ARfh1/gKwZSnTkHVqnjWEVQB0rCEUev0KWoTrnGTj71kluKyG0R v8dShxxJ0CNkKsm9Bb9t7xyiEMb7HAHCHeJ+kbYJRqFL3nzqcEnUK05d2QkEwtVj XQVfZBBADWMqHbm2DrlO4NAkXSfWmhSXhsgUOssJ56kKVua23QI3E8wuOg6OHrdP s11ijykdxOdb+CEkZmjMhM+oPh1gZfEyeejBEBNwgSVoUDZokwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAkbBPRMBMazlA85rJfuPnbZC7vaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWEzYmIyNTAtNzhjNS0z NjA5LWJiYmMtNGIwZDVjMDM0ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsBN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6QPNwyXNOj0z13UBY7dwqXwKTk0VH0uYdQcEzileOCNGBwBRqq rNhc7c225RTqErt02QoxBm0p/Bs0RhD8kfnsFnPZzBlu9NVklN+W321akNH6xVa1 48q6Yl/JuyfbWhVOQMtUAJY5JsoQOCi8BqKHamgFFXsmpPjFfHjq4jSr0EHGyH5h v40RJosCY6m5s1+JFhs9TQ3ssFl1tynTVspkc1MoleLLuO6/khGxrmR6yn7dJOfe OfANDlSubg3iNqm1IutqM8ByC8g5dAD95eK1qRfcDVqc39Ha483YAZYvXYIL5WLT gXLXwNDxf7ia9sfwSIsIH33w+OB3tA7xX/s= -----END CERTIFICATE-----Generated at Sun May 3 17:55:40 2026 by rpki-client