$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa File: 97a70c16-3543-3f7c-8c2a-42f698a941c5.roa (raw, json) Hash identifier: SntVD9lkauSe8d0wYYJVK/R1wga5D4xE/EqJDJ4wOSc= Subject key identifier: E9:D9:C5:54:9C:C4:E8:E8:35:32:90:75:8F:CE:8A:26:AD:A7:2F:55 Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e Certificate serial: 010D0C9F4328584D80FFE34D76559E67B77CBC00 Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 2602:fd3a:228::/45 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e3:4d:76:55:9e:67:b7:7c:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=281c2719-4e7c-4a82-a5f0-8664840ec47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cd:8e:4d:e0:71:49:bb:ea:9f:14:56:53:53: 32:9f:c7:39:93:90:91:9c:b2:68:46:98:d0:be:c0: d7:b5:c9:3c:ea:0c:4a:6d:2b:58:24:ae:c7:06:2d: 57:08:6b:44:43:35:d3:f4:4f:a1:e8:54:77:2c:b3: 1b:21:ea:46:d5:49:86:65:2d:68:f3:f7:0b:08:49: 4c:f6:82:46:e4:66:1e:4a:3f:40:c6:5e:06:ef:cf: b9:d7:22:2d:30:8d:9d:88:3b:ea:78:76:b5:6e:20: ca:88:d1:50:55:e7:56:41:76:6e:fa:d5:cf:7d:67: d1:2f:85:48:54:97:34:c0:ac:07:42:e1:4e:96:fd: 05:d2:04:fc:72:19:53:c4:81:1a:4e:fd:53:16:e4: 8b:6c:ed:da:dd:91:e3:1c:00:df:16:75:68:72:33: 2a:76:c7:bc:9f:7e:ed:0b:e9:6f:da:fb:5b:db:04: 1b:dd:a4:87:79:bd:91:44:25:68:4c:d3:af:ff:4a: 3b:bd:9c:78:01:c6:43:1d:d9:d5:ad:b7:2d:57:d2: ad:69:f3:06:a9:38:a0:96:1b:22:a1:d7:87:3a:01: 3f:dc:9a:0c:1e:00:fc:5f:a6:64:73:67:4d:f2:d7: be:66:c3:4d:85:7f:dd:ec:f2:2e:2f:4a:c3:e0:44: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D9:C5:54:9C:C4:E8:E8:35:32:90:75:8F:CE:8A:26:AD:A7:2F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/97a70c16-3543-3f7c-8c2a-42f698a941c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl X509v3 Authority Key Identifier: keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd3a:228::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:54:54:cd:45:62:ec:72:4e:7d:5f:69:ab:da:bf:d1:13:55: d4:41:dc:0d:6d:32:f4:70:b7:12:fa:50:98:3f:50:c2:d3:e9: 1b:f8:49:69:58:93:c1:3a:0a:24:70:7d:f4:04:46:f5:67:e0: 33:a1:f4:52:ab:aa:64:c3:8c:46:cd:4e:25:ae:b1:ae:7b:0a: 96:04:07:a7:34:46:f6:66:a9:4c:85:8a:d5:a8:0c:c6:a0:9a: 40:39:c2:05:ac:77:4e:62:ae:c5:41:c2:9c:be:e3:6e:f6:c9: c6:ef:4d:a8:38:64:38:c6:8c:a3:49:5a:ec:d6:35:99:e0:78: 41:0e:38:f2:4a:6b:83:68:ad:4c:38:cf:ef:c6:97:31:6a:21: eb:30:34:19:44:ca:99:99:5f:e3:00:f5:1e:dc:d0:6f:92:56: 64:0b:50:16:64:85:61:dc:b3:38:3c:7f:5a:ae:fb:6f:18:c5: cd:01:72:65:78:92:7c:72:88:03:ba:fb:fa:ad:56:d1:09:ee: ef:07:e8:7f:e5:e3:15:76:95:05:4b:39:d5:2a:fb:e8:f5:8c: c7:60:ce:c7:c5:97:54:8a:d2:93:3d:a9:50:1c:77:54:02:ba: 49:84:bb:dd:ed:72:cb:00:00:1f:7f:b8:05:77:c8:f3:63:45: 18:2d:18:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/+NNdlWeZ7d8vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy MjdlMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MjgxYzI3MTktNGU3Yy00YTgyLWE1ZjAtODY2NDg0MGVjNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis2OTeBxSbvqnxRWU1Myn8c5k5CRnLJoRpjQ vsDXtck86gxKbStYJK7HBi1XCGtEQzXT9E+h6FR3LLMbIepG1UmGZS1o8/cLCElM 9oJG5GYeSj9Axl4G78+51yItMI2diDvqeHa1biDKiNFQVedWQXZu+tXPfWfRL4VI VJc0wKwHQuFOlv0F0gT8chlTxIEaTv1TFuSLbO3a3ZHjHADfFnVocjMqdse8n37t C+lv2vtb2wQb3aSHeb2RRCVoTNOv/0o7vZx4AcZDHdnVrbctV9KtafMGqTiglhsi odeHOgE/3JoMHgD8X6Zkc2dN8te+ZsNNhX/d7PIuL0rD4ERoiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnZxVScxOjoNTKQdY/Oiiatpy9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvOTdhNzBjMTYtMzU0My0z ZjdjLThjMmEtNDJmNjk4YTk0MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1 MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1 MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9UVM1FYuxyTn1faavav9ETVdRB3A1tMvRwtxL6UJg/UMLT6Rv4 SWlYk8E6CiRwffQERvVn4DOh9FKrqmTDjEbNTiWusa57CpYEB6c0RvZmqUyFitWo DMagmkA5wgWsd05irsVBwpy+4272ycbvTag4ZDjGjKNJWuzWNZngeEEOOPJKa4No rUw4z+/GlzFqIeswNBlEypmZX+MA9R7c0G+SVmQLUBZkhWHcszg8f1qu+28Yxc0B cmV4knxyiAO6+/qtVtEJ7u8H6H/l4xV2lQVLOdUq++j1jMdgzsfFl1SK0pM9qVAc d1QCukmEu93tcssAAB9/uAV3yPNjRRgtGDQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:37 2026 by rpki-client