$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa File: 1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa (raw, json) Hash identifier: 9PxpfXBG+W+tuAifnPx3TokjaItwdXtUlgL8H0wLlKI= Subject key identifier: 1A:A8:AE:1B:42:14:FF:96:49:17:4B:83:81:A3:06:33:07:7D:05:D1 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584DB1DAC6200FA2C0C03E0B5A00 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 2620:116:800c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:c6:20:0f:a2:c0:c0:3e:0b:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=3e04abd7-18c3-444d-aea6-47238e4b2d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:d4:cb:a7:b3:09:e4:ab:ca:66:9b:67:b0: ec:21:88:8b:9f:65:33:70:82:20:4a:7d:9a:fb:e8: f0:2f:f9:a3:c0:ef:4d:17:1c:f3:59:b4:c9:2a:dc: e4:d9:90:9e:f0:0f:25:7a:a9:87:3f:ab:39:3e:e4: 1f:75:dd:33:26:2f:e8:a6:2d:38:22:7b:19:86:d1: fa:50:94:5b:cf:72:6c:9e:cd:cf:7b:5f:3c:1c:be: 4d:d7:b2:b2:b4:1c:7c:3a:11:b0:14:ce:aa:d2:40: 5d:42:67:ca:16:ba:9b:26:19:68:a4:ec:9a:cf:06: 40:45:e3:86:b4:24:78:ea:24:d0:d4:8d:e2:65:44: 59:e5:34:cc:6f:5f:c3:96:55:dd:24:8d:54:9c:a3: d9:6b:46:9e:57:49:62:95:d8:dd:57:cd:68:ff:b0: 05:13:6d:7e:e9:e8:9b:9f:05:bc:b7:09:d2:4b:16: 50:7b:00:bf:8f:90:ef:c7:22:62:d9:33:e7:fa:2e: 90:c0:c4:ce:ef:d1:04:9e:b6:40:ea:0e:5e:2a:a6: 37:1e:30:03:13:f3:f1:d9:4e:02:c1:30:29:0b:db: 4d:a6:a4:28:6d:f8:a2:f6:43:27:32:0b:cc:a5:e3: a4:3a:f5:77:a5:db:1b:98:8d:e8:e2:f6:52:08:2f: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:AE:1B:42:14:FF:96:49:17:4B:83:81:A3:06:33:07:7D:05:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/1e8c7c27-4087-3cf3-8f5f-f4a69d3b4b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a3:20:7b:f0:59:c0:17:31:2c:20:39:ef:f2:de:16:74:f3: 8c:71:07:a9:ad:29:27:d3:c5:64:6b:32:fb:4d:98:5c:0d:39: e1:91:7e:cc:6f:b1:51:fe:5b:b0:c2:77:29:90:85:30:b7:9a: 14:41:f2:d2:4a:c7:42:bc:0d:e1:50:83:22:68:ec:55:8a:b1: 21:7a:5a:d1:2d:b2:4c:60:e9:bb:9f:d6:a8:28:f4:85:fd:d4: fa:10:fe:b6:93:db:7d:8e:6d:85:53:22:43:52:ce:d3:9b:28: 10:dc:3f:42:56:37:14:17:c2:8c:8d:4d:e5:d3:9c:b9:de:0c: b8:9a:cf:57:7a:21:c8:6e:de:c0:64:65:53:27:86:02:d2:94: f0:58:48:e2:74:27:8b:eb:b5:d0:05:0b:6e:a6:ff:0a:9f:f7: f0:57:cf:a0:f3:2d:24:02:4f:c7:bc:c5:df:c2:3d:fe:33:f0: 9c:f8:b3:6e:0e:f8:57:e4:a0:4e:e7:00:bd:51:05:36:fe:1f: cc:f1:6e:e8:ff:35:1d:3b:7a:dd:17:16:a3:59:f0:ac:2c:c9: b6:93:18:3e:3f:79:b4:ea:22:c8:25:e8:e3:06:32:69:3e:9e: 54:88:59:63:a5:8e:30:47:58:ac:bb:a9:d6:a0:63:22:75:d7: ea:ed:4d:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2x2sYgD6LAwD4LWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk M2UwNGFiZDctMThjMy00NDRkLWFlYTYtNDcyMzhlNGIyZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKnUy6ezCeSrymabZ7DsIYiLn2UzcIIgSn2a ++jwL/mjwO9NFxzzWbTJKtzk2ZCe8A8leqmHP6s5PuQfdd0zJi/opi04InsZhtH6 UJRbz3Jsns3Pe188HL5N17KytBx8OhGwFM6q0kBdQmfKFrqbJhlopOyazwZAReOG tCR46iTQ1I3iZURZ5TTMb1/DllXdJI1UnKPZa0aeV0lildjdV81o/7AFE21+6eib nwW8twnSSxZQewC/j5DvxyJi2TPn+i6QwMTO79EEnrZA6g5eKqY3HjADE/Px2U4C wTApC9tNpqQobfii9kMnMgvMpeOkOvV3pdsbmI3o4vZSCC/qbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBqorhtCFP+WSRdLg4GjBjMHfQXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMWU4YzdjMjctNDA4Ny0z Y2YzLThmNWYtZjRhNjlkM2I0YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKjIHvwWcAXMSwgOe/y3hZ084xxB6mtKSfTxWRrMvtNmFwNOeGR fsxvsVH+W7DCdymQhTC3mhRB8tJKx0K8DeFQgyJo7FWKsSF6WtEtskxg6buf1qgo 9IX91PoQ/raT232ObYVTIkNSztObKBDcP0JWNxQXwoyNTeXTnLneDLiaz1d6Ichu 3sBkZVMnhgLSlPBYSOJ0J4vrtdAFC26m/wqf9/BXz6DzLSQCT8e8xd/CPf4z8Jz4 s24O+FfkoE7nAL1RBTb+H8zxbuj/NR07et0XFqNZ8KwsybaTGD4/ebTqIsgl6OMG Mmk+nlSIWWOljjBHWKy7qdagYyJ11+rtTSc= -----END CERTIFICATE-----Generated at Sun May 3 16:16:12 2026 by rpki-client