$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa File: 170476b8-4860-35be-ac73-ad6f764c5d01.roa (raw, json) Hash identifier: iyPudX99Gpy2vEIeWmsLFunNg75g9ECBjWylSLvFscA= Subject key identifier: 14:BE:CD:12:5B:A6:5D:DC:72:49:90:EA:E0:9D:37:88:50:9F:CA:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE871A9F502614F7C18D5D08 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 22909 IP address blocks: 2603:3009:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:1a:9f:50:26:14:f7:c1:8d:5d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=aad07818-b800-4b36-be4e-85fb60c18d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:08:43:ee:57:26:03:a7:78:00:1a:93:bd: 88:47:92:ca:23:a5:bc:78:c4:5f:5f:5d:17:f7:59: ea:d5:ae:fb:66:40:b7:0e:7d:0e:db:44:81:5b:d6: 76:d7:e6:29:d9:cf:9e:63:76:0d:76:d3:30:e3:d0: 42:f2:5e:4a:75:0f:4c:8d:84:6e:be:43:a5:01:cd: db:62:96:ca:8c:2e:12:5e:17:4a:1c:57:44:9a:f5: fb:a1:56:28:f4:83:b9:1b:41:4c:3d:7e:73:9e:cc: 18:c9:5c:78:2a:fe:8f:e9:c9:9e:41:b9:25:d9:50: 34:8c:69:d2:47:6d:4b:6e:81:0d:05:ab:e5:37:63: 0f:fa:0d:4d:13:bf:b1:71:a3:f0:f0:7b:47:5f:63: 2d:dd:73:d5:7b:53:2b:3c:0e:ee:71:a8:ca:94:4f: e7:6f:27:58:70:6e:dc:7b:ab:39:80:fe:51:aa:53: 7e:06:c7:8b:19:42:3f:10:0f:04:fe:a8:83:d4:3f: 6d:4a:84:a9:e5:e7:52:f6:54:82:a6:18:d9:a8:43: da:86:ba:ff:d8:0e:77:2c:d3:86:70:c9:b6:bf:01: 3f:63:f0:2f:0a:d8:8f:0c:1d:7d:ae:49:fc:6e:3f: 96:01:b9:97:3e:d9:db:16:2d:5c:c0:c5:ff:d0:dd: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BE:CD:12:5B:A6:5D:DC:72:49:90:EA:E0:9D:37:88:50:9F:CA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3009:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:32:11:10:96:52:59:69:3c:96:a3:bb:6c:c6:1e:0a:46:43: 16:be:f5:78:5e:19:44:da:29:3e:65:17:18:aa:0c:86:b8:ec: d2:13:09:ba:ed:cc:65:37:47:51:61:43:35:b9:c6:c7:1b:d3: 21:e5:8e:b0:c9:0e:fc:b2:93:ac:76:3d:72:19:77:0c:d8:5c: fa:9f:ea:27:54:6b:65:bc:10:16:5e:c7:d7:15:aa:1c:de:5a: 4e:4f:53:b6:cf:ab:8e:a1:8f:fc:54:bc:f2:dc:07:ec:07:0e: 2f:e3:89:ee:8d:75:42:6b:c8:30:86:43:65:03:c0:55:b4:16: 7d:85:c5:bb:13:b6:e7:5b:35:53:76:b5:d0:39:a9:21:49:34: ef:30:c5:32:dc:fc:b7:27:f7:99:94:f8:7e:64:50:bd:34:95: bf:ba:2b:99:d7:db:ab:bd:d5:82:a1:e7:ba:3c:47:e5:10:df: 74:ec:c0:7e:fb:de:b5:ba:2b:01:d9:48:97:6b:02:82:c2:53: 7b:20:60:da:7a:7e:2e:f0:40:41:e4:53:9f:e8:4f:14:cc:27: f7:03:c4:8e:7f:40:8f:4c:9e:8e:d1:b7:1f:2f:f1:b8:57:77: a9:3a:76:f7:b8:eb:d2:e1:ce:42:86:b8:87:65:22:26:e0:3d: a7:b3:9a:a5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3ehxqfUCYU98GNXQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YWFkMDc4MTgtYjgwMC00YjM2LWJlNGUtODVmYjYwYzE4ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlisIQ+5XJgOneAAak72IR5LKI6W8eMRfX10X 91nq1a77ZkC3Dn0O20SBW9Z21+Yp2c+eY3YNdtMw49BC8l5KdQ9MjYRuvkOlAc3b YpbKjC4SXhdKHFdEmvX7oVYo9IO5G0FMPX5znswYyVx4Kv6P6cmeQbkl2VA0jGnS R21LboENBavlN2MP+g1NE7+xcaPw8HtHX2Mt3XPVe1MrPA7ucajKlE/nbydYcG7c e6s5gP5RqlN+BseLGUI/EA8E/qiD1D9tSoSp5edS9lSCphjZqEPahrr/2A53LNOG cMm2vwE/Y/AvCtiPDB19rkn8bj+WAbmXPtnbFi1cwMX/0N0qXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBS+zRJbpl3cckmQ6uCdN4hQn8pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcwNDc2YjgtNDg2MC0z NWJlLWFjNzMtYWQ2Zjc2NGM1ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCQUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANzIREJZSWWk8lqO7bMYeCkZDFr71eF4ZRNopPmUXGKoMhrjs0hMJ uu3MZTdHUWFDNbnGxxvTIeWOsMkO/LKTrHY9chl3DNhc+p/qJ1RrZbwQFl7H1xWq HN5aTk9Tts+rjqGP/FS88twH7AcOL+OJ7o11QmvIMIZDZQPAVbQWfYXFuxO251s1 U3a10DmpIUk07zDFMtz8tyf3mZT4fmRQvTSVv7ormdfbq73VgqHnujxH5RDfdOzA fvvetborAdlIl2sCgsJTeyBg2np+LvBAQeRTn+hPFMwn9wPEjn9Aj0yejtG3Hy/x uFd3qTp297jr0uHOQoa4h2UiJuA9p7OapQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:59:39 2026 by rpki-client