$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa File: c733dc09-d02d-3a61-84c0-81f6e8142032.roa (raw, json) Hash identifier: pDTil68aSqxTpo30PF/rhf40OiNV8F6SRGTyhxyl70s= Subject key identifier: 5C:D1:82:88:86:5E:F6:DB:DD:ED:9E:24:27:D8:3A:FE:8C:F3:E8:46 Certificate issuer: /CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Certificate serial: 010D0C9F4328584DA6B01D4B8F42F2E22AE80500 Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2602:277:3ee::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1d:4b:8f:42:f2:e2:2a:e8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=e5f861d8-bf9d-46a2-b4f3-dd78cb1acdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:02:d7:87:44:9e:69:51:c5:78:36:9d:26: 28:dd:0a:19:78:5b:4c:3a:48:a8:c5:cd:6d:4f:e6: 55:76:36:6b:20:09:15:e3:7a:c5:3f:19:00:a0:24: 4f:ef:c4:af:76:c3:f1:31:91:9c:38:93:55:79:6c: 4d:1e:c6:e1:60:92:25:13:41:a3:3d:bb:51:c4:8d: 4b:61:6e:7a:b3:65:28:e0:14:ec:e2:3a:57:3f:b7: 43:bb:12:84:59:2f:16:52:5e:e7:8d:4d:ca:ef:71: 19:4b:8b:56:29:06:6a:1b:fd:37:66:63:65:c5:50: 57:85:a9:47:1e:09:73:f4:fa:2f:14:6d:a8:e7:5c: 77:7c:14:43:15:68:22:b6:81:09:81:11:a6:23:10: 39:5d:25:b1:9d:52:5a:01:75:d0:f0:db:dd:a3:c2: f6:d9:75:0b:a4:6e:a0:42:c0:29:05:36:92:73:db: a0:09:ef:7b:b5:27:57:11:23:cf:51:f8:57:6a:9e: 21:ba:5a:ad:99:98:d3:a3:0f:cb:4f:01:d7:22:56: db:ed:42:f1:7f:1d:a9:47:0f:f9:d3:ac:be:1a:0a: 33:0b:93:51:44:a6:ec:80:c5:67:99:8d:f0:7c:cb: 6d:82:db:71:98:81:6c:0e:5c:31:9f:91:08:b6:f1: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D1:82:88:86:5E:F6:DB:DD:ED:9E:24:27:D8:3A:FE:8C:F3:E8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/c733dc09-d02d-3a61-84c0-81f6e8142032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl X509v3 Authority Key Identifier: keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer sbgp-ipAddrBlock: critical IPv6: 2602:277:3ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:54:db:0d:4e:36:55:25:14:88:58:7d:3e:d7:c3:37:86:6d: 55:01:17:07:e1:21:11:93:e7:93:e3:bf:a0:2f:51:7c:d7:29: 74:fe:50:82:e5:6b:93:88:71:7f:a2:8c:c8:e7:81:a7:62:98: 73:3b:6d:ae:18:a2:7e:f1:43:0e:32:99:d6:f0:2f:8b:50:3e: e6:94:03:83:b4:68:7e:0b:b2:7f:61:24:f6:4a:19:11:19:81: 9d:c7:a9:e3:9b:65:83:cc:d2:e8:71:c9:89:b0:ce:68:81:e6: a4:b2:b7:a1:17:07:00:52:2e:b0:5b:cf:ec:fe:14:bb:bc:31: 8c:e4:12:33:48:4a:1b:fd:b7:cb:d7:45:22:f7:48:6f:1a:a9: 1a:89:fe:da:84:12:c9:11:d3:31:dd:96:b0:5a:e9:ac:78:41: 84:cb:f2:4d:b2:8a:eb:22:83:e3:d9:3d:10:00:2c:50:e1:47: 0d:ec:b1:03:bd:8b:4a:56:5f:bc:c8:af:cd:b2:3d:0d:d7:21: ef:ae:fb:8f:31:dd:77:27:4b:97:a4:07:1f:cf:55:36:0f:fe: 60:06:82:e4:1a:79:b3:9b:fe:4b:80:41:43:16:14:fa:7f:6f: 40:ee:a9:5c:01:0a:95:ea:e6:f5:22:a7:df:6c:f2:a4:27:55: af:ab:7b:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msB1Lj0Ly4iroBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2 ZGUzMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTVmODYxZDgtYmY5ZC00NmEyLWI0ZjMtZGQ3OGNiMWFjZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKAC14dEnmlRxXg2nSYo3QoZeFtMOkioxc1t T+ZVdjZrIAkV43rFPxkAoCRP78SvdsPxMZGcOJNVeWxNHsbhYJIlE0GjPbtRxI1L YW56s2Uo4BTs4jpXP7dDuxKEWS8WUl7njU3K73EZS4tWKQZqG/03ZmNlxVBXhalH Hglz9PovFG2o51x3fBRDFWgitoEJgRGmIxA5XSWxnVJaAXXQ8Nvdo8L22XULpG6g QsApBTaSc9ugCe97tSdXESPPUfhXap4hulqtmZjTow/LTwHXIlbb7ULxfx2pRw/5 06y+GgozC5NRRKbsgMVnmY3wfMttgttxmIFsDlwxn5EItvEDlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFzRgoiGXvbb3e2eJCfYOv6M8+hGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvYzczM2RjMDktZDAyZC0z YTYxLTg0YzAtODFmNmU4MTQyMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwPu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtU2w1ONlUlFIhYfT7XwzeGbVUBFwfhIRGT55Pjv6AvUXzXKXT+ UILla5OIcX+ijMjngadimHM7ba4Yon7xQw4ymdbwL4tQPuaUA4O0aH4Lsn9hJPZK GREZgZ3HqeObZYPM0uhxyYmwzmiB5qSyt6EXBwBSLrBbz+z+FLu8MYzkEjNIShv9 t8vXRSL3SG8aqRqJ/tqEEskR0zHdlrBa6ax4QYTL8k2yiusig+PZPRAALFDhRw3s sQO9i0pWX7zIr82yPQ3XIe+u+48x3XcnS5ekBx/PVTYP/mAGguQaebOb/kuAQUMW FPp/b0DuqVwBCpXq5vUip99s8qQnVa+reyc= -----END CERTIFICATE-----Generated at Sun May 3 16:16:43 2026 by rpki-client