$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa File: 851a5dbb-1503-38ae-9cf5-4922079a2740.roa (raw, json) Hash identifier: kzMA7MK3cSE/wprxmNSVrbYsvk29lTWw3scleHztsLQ= Subject key identifier: 8E:FA:A7:0A:55:62:1F:6E:EA:3D:90:96:2E:1F:5A:F7:25:70:DF:80 Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8 Certificate serial: 010D0C9F4328584D91BFF7D701A4E3CEDEF138B0 Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36610 IP address blocks: 2607:fd08::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:f7:d7:01:a4:e3:ce:de:f1:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=5240b231-98d9-4f62-96cd-6323701ed950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:c7:6e:8a:48:5b:b3:ad:1a:11:55:2e:fc: 8f:47:56:56:0c:5e:ab:f2:3b:f0:15:60:8b:63:67: 6a:1d:a4:b5:a2:f1:1b:e9:4a:5e:26:90:30:28:38: d9:53:94:e4:ca:31:6e:82:1a:72:a4:27:a1:fc:78: 18:9c:da:7b:79:79:de:62:e2:c0:0f:cc:bd:8b:21: cc:27:00:bc:ad:e6:d7:64:66:cb:c1:a2:0a:13:65: c8:ff:42:73:db:0f:86:bd:03:b6:24:30:73:bd:d2: 55:cb:8f:94:e8:91:fb:ef:5d:9f:93:9d:f5:a6:59: 45:d7:0a:b9:c8:d0:dd:f2:ea:1d:7b:31:19:b9:48: 20:e5:1b:1e:32:64:93:4f:10:00:be:78:0e:e5:cd: ad:70:d4:22:55:5a:13:8c:dc:27:82:b6:b5:31:1a: db:49:18:06:4b:dd:dc:fe:67:cd:66:07:a8:bb:61: d6:8d:9f:fe:a2:2d:df:3e:3a:68:df:0c:fc:28:28: 3f:3a:d1:81:f7:c2:7a:8d:26:64:cd:59:86:76:b5: dc:10:01:95:c5:81:75:c6:db:68:ab:cc:3c:0e:66: f6:4c:2d:0f:32:c5:ce:98:d8:1d:ee:b6:c9:29:4d: 7a:5e:1e:84:7e:d3:54:9a:a7:e5:d3:92:3d:ef:57: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FA:A7:0A:55:62:1F:6E:EA:3D:90:96:2E:1F:5A:F7:25:70:DF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/851a5dbb-1503-38ae-9cf5-4922079a2740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl X509v3 Authority Key Identifier: keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd08::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:05:8c:74:f7:72:31:00:67:3d:c3:c8:66:4c:29:e6:ca:47: b5:88:9b:aa:a4:3a:53:f5:dd:b1:39:14:84:64:68:6b:9b:c6: a5:4f:ae:c6:49:43:c6:e8:b6:47:c6:36:97:d2:b0:dc:28:08: ab:e1:ed:ef:2b:49:23:ac:39:75:68:3e:a5:3f:7c:e0:b4:ee: 30:81:d4:3a:db:24:f1:47:16:a2:0d:c2:2a:29:42:63:44:51: 99:8a:74:8b:8c:e3:16:d1:71:1f:0a:f3:0c:54:66:2f:b3:6d: f0:7f:ab:ef:c5:27:f6:1f:1a:87:0f:c0:1a:21:de:f7:64:a3: 15:d8:7f:2d:ca:09:7f:be:7d:f3:86:e7:6b:de:f0:71:3c:75: a5:fd:8d:75:90:24:c1:7f:18:75:b5:ef:30:04:11:36:75:5c: b1:d0:cc:4c:82:73:90:fe:2a:02:19:b9:9d:52:dd:b5:c1:00: e8:34:e5:b0:da:81:5e:a4:42:14:17:a0:4b:b0:c3:01:f3:aa: f6:6b:85:78:3a:87:87:31:37:2b:5b:2d:a1:b2:62:86:94:36: 52:32:d9:ca:46:59:c5:89:7c:43:3e:cb:53:b2:b9:a0:8d:1f: 7a:56:02:55:b1:70:7d:66:ee:dd:34:3f:66:04:89:33:a7:8f: 4f:c0:f2:2b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Rv/fXAaTjzt7xOLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3 OWI4MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NTI0MGIyMzEtOThkOS00ZjYyLTk2Y2QtNjMyMzcwMWVkOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv7HbopIW7OtGhFVLvyPR1ZWDF6r8jvwFWCL Y2dqHaS1ovEb6UpeJpAwKDjZU5TkyjFughpypCeh/HgYnNp7eXneYuLAD8y9iyHM JwC8rebXZGbLwaIKE2XI/0Jz2w+GvQO2JDBzvdJVy4+U6JH7712fk531pllF1wq5 yNDd8uodezEZuUgg5RseMmSTTxAAvngO5c2tcNQiVVoTjNwngra1MRrbSRgGS93c /mfNZgeou2HWjZ/+oi3fPjpo3wz8KCg/OtGB98J6jSZkzVmGdrXcEAGVxYF1xtto q8w8Dmb2TC0PMsXOmNgd7rbJKU16Xh6EftNUmqfl05I971cSJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI76pwpVYh9u6j2Qli4fWvclcN+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvODUxYTVkYmItMTUwMy0z OGFlLTljZjUtNDkyMjA3OWEyNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk OGU2MTc5YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9CDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+BYx093IxAGc9w8hmTCnmyke1iJuqpDpT9d2xORSEZGhrm8alT67G SUPG6LZHxjaX0rDcKAir4e3vK0kjrDl1aD6lP3zgtO4wgdQ62yTxRxaiDcIqKUJj RFGZinSLjOMW0XEfCvMMVGYvs23wf6vvxSf2HxqHD8AaId73ZKMV2H8tygl/vn3z hudr3vBxPHWl/Y11kCTBfxh1te8wBBE2dVyx0MxMgnOQ/ioCGbmdUt21wQDoNOWw 2oFepEIUF6BLsMMB86r2a4V4OoeHMTcrWy2hsmKGlDZSMtnKRlnFiXxDPstTsrmg jR96VgJVsXB9Zu7dND9mBIkzp49PwPIr -----END CERTIFICATE-----Generated at Thu May 7 03:17:08 2026 by rpki-client