$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/559e237f-a2ed-38be-9775-8eb7d13e72b4.roa File: 559e237f-a2ed-38be-9775-8eb7d13e72b4.roa (raw, json) Hash identifier: eiGePuagARKXtTQrdRHOIos6EposhxCCCH8JrT7Kyvc= Subject key identifier: 32:E6:82:80:B9:AD:BD:2D:4D:6D:03:74:BD:0A:5D:60:96:3D:98:08 Certificate issuer: /CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7 Certificate serial: 010D0C9F4328584D98BAB3B8B97152B0343973E0 Authority key identifier: 60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/559e237f-a2ed-38be-9775-8eb7d13e72b4.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2604:12e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b3:b8:b9:71:52:b0:34:39:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb0c6bb6-abf6-474d-8547-2975efaf35e7 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=b0b45b0e-ce66-4ae0-a5e8-2f85388eb0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:46:08:6b:8f:47:b9:5d:e5:52:d6:ca:b8:d8: 0e:90:06:41:ad:6f:d7:c6:dd:b4:eb:2f:16:bf:ca: e1:9f:d6:a7:57:bf:bb:eb:85:49:61:9a:b3:f5:a5: f8:a0:b1:99:7c:1b:e2:ba:8a:49:c4:f5:ec:b4:24: bf:94:2a:32:8b:a1:99:97:ae:49:f0:b1:e6:94:c9: 38:4c:d9:d4:03:3b:f7:78:73:62:95:a7:df:c4:a5: 5b:e7:2f:49:a1:39:3d:6c:b9:25:09:f9:60:10:7b: f2:72:49:86:f6:2c:e0:23:bf:f4:72:f9:79:0f:6b: c6:89:ed:dc:95:64:57:64:f5:45:dc:a6:77:19:ee: bc:bf:ec:26:97:ae:a2:14:29:d1:89:97:1f:51:ca: 8a:56:18:1a:0f:98:c4:c1:bf:65:4d:85:e0:02:26: ca:ca:2a:d2:10:67:6c:e4:51:8a:b5:e4:8b:4d:c8: 90:c2:42:b2:4c:b1:e9:fb:cd:0e:55:d0:d7:ba:89: 86:7a:bb:c2:6d:5c:73:ed:8d:68:5c:cc:6c:b7:e8: 42:44:06:2d:f2:3c:74:e0:cb:21:e7:60:36:93:dc: 1f:15:bd:64:e5:d1:71:35:d2:45:10:f8:e6:10:db: 15:8d:e0:82:aa:eb:36:7c:62:ff:c0:20:ab:aa:e5: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:82:80:B9:AD:BD:2D:4D:6D:03:74:BD:0A:5D:60:96:3D:98:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/559e237f-a2ed-38be-9775-8eb7d13e72b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7/fb0c6bb6-abf6-474d-8547-2975efaf35e7.crl X509v3 Authority Key Identifier: keyid:60:50:24:B0:BD:17:09:65:AD:37:4D:D2:A1:91:1A:BB:4A:7C:63:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fb0c6bb6-abf6-474d-8547-2975efaf35e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:12e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:70:da:58:cf:02:82:2e:c0:d2:ed:24:e9:0a:64:83:0f:59: 2b:1b:dc:55:71:22:e3:4e:5d:ca:e1:a5:e1:db:0f:d9:b9:e6: bd:7a:57:af:97:9e:5d:1f:92:02:71:64:a4:f4:8f:9c:f8:ce: f0:79:7d:f3:d1:f0:c2:9c:89:a3:65:73:0d:73:8e:32:18:61: 84:16:87:1b:ec:da:f4:0d:94:26:29:d9:0b:42:7c:d7:d1:a1: 7b:28:8c:6a:11:ef:77:be:6a:c0:a1:e1:e2:06:a6:c4:7d:5b: 77:2a:cf:6b:8a:e2:1a:50:ae:e2:09:7e:a3:30:06:32:5f:ca: 36:07:d9:c2:d5:d7:9c:be:75:67:d0:7d:d4:04:e3:7b:33:f0: 4c:30:c0:5d:f6:38:ed:7c:c7:2f:44:d5:1d:0b:d5:53:18:48: 67:3b:41:6f:cf:06:4d:43:16:93:e3:ca:dc:f5:de:31:72:6f: aa:e7:24:4d:f7:3c:be:ee:dc:08:6d:fa:05:82:aa:b9:54:9c: ad:18:73:ce:dc:d6:98:54:5c:07:3d:84:e3:1e:a5:90:80:bc: b3:7f:7b:93:f1:e0:3c:ed:1a:41:88:71:f1:6f:38:38:a6:5d: 8a:b4:fa:57:5c:42:a9:d0:9f:5e:09:97:98:ae:4f:da:9b:ab: ff:6a:7e:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2YurO4uXFSsDQ5c+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmIwYzZiYjYtYWJmNi00NzRkLTg1NDctMjk3NWVmYWYz NWU3MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YjBiNDViMGUtY2U2Ni00YWUwLWE1ZTgtMmY4NTM4OGViMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUYIa49HuV3lUtbKuNgOkAZBrW/Xxt206y8W v8rhn9anV7+764VJYZqz9aX4oLGZfBviuopJxPXstCS/lCoyi6GZl65J8LHmlMk4 TNnUAzv3eHNilaffxKVb5y9JoTk9bLklCflgEHvyckmG9izgI7/0cvl5D2vGie3c lWRXZPVF3KZ3Ge68v+wml66iFCnRiZcfUcqKVhgaD5jEwb9lTYXgAibKyirSEGds 5FGKteSLTciQwkKyTLHp+80OVdDXuomGervCbVxz7Y1oXMxst+hCRAYt8jx04Msh 52A2k9wfFb1k5dFxNdJFEPjmENsVjeCCqus2fGL/wCCrquUoRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDLmgoC5rb0tTW0DdL0KXWCWPZgIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mYjBj NmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1ZWZhZjM1ZTcvNTU5ZTIzN2YtYTJlZC0z OGJlLTk3NzUtOGViN2QxM2U3MmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmIwYzZiYjYtYWJmNi00NzRkLTg1 NDctMjk3NWVmYWYzNWU3L2ZiMGM2YmI2LWFiZjYtNDc0ZC04NTQ3LTI5NzVlZmFm MzVlNy5jcmwwHwYDVR0jBBgwFoAUYFAksL0XCWWtN03SoZEau0p8Y4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mYjBjNmJiNi1hYmY2LTQ3NGQtODU0Ny0yOTc1 ZWZhZjM1ZTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQS4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfcNpYzwKCLsDS7STpCmSDD1krG9xVcSLjTl3K4aXh2w/Zuea9elev l55dH5ICcWSk9I+c+M7weX3z0fDCnImjZXMNc44yGGGEFocb7Nr0DZQmKdkLQnzX 0aF7KIxqEe93vmrAoeHiBqbEfVt3Ks9riuIaUK7iCX6jMAYyX8o2B9nC1decvnVn 0H3UBON7M/BMMMBd9jjtfMcvRNUdC9VTGEhnO0FvzwZNQxaT48rc9d4xcm+q5yRN 9zy+7twIbfoFgqq5VJytGHPO3NaYVFwHPYTjHqWQgLyzf3uT8eA87RpBiHHxbzg4 pl2KtPpXXEKp0J9eCZeYrk/am6v/an6E -----END CERTIFICATE-----Generated at Sun May 3 16:16:32 2026 by rpki-client