$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa File: 558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa (raw, json) Hash identifier: trl5c0utD8E+Ehs9MZ3SmPdBgiA/rYxFUguEicgLQRc= Subject key identifier: 66:63:7F:04:8F:E6:50:2C:E2:96:91:D8:FF:7B:B0:38:87:93:E8:6E Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584D703FE3964FFA73EC93C0E8C0 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 2602:816:5001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e3:96:4f:fa:73:ec:93:c0:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=3ff1ddb5-481a-40bc-bba4-6c8ba35d9b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:21:b7:4d:19:b2:72:9c:09:3d:c4:ce:b7: 75:4c:72:5b:db:14:32:fe:1c:21:3a:16:18:c1:4b: ea:69:05:4b:cf:20:98:5e:4c:7b:aa:0b:96:64:52: ee:a0:9c:60:d1:5f:52:29:6e:7c:bb:1c:36:33:1b: 77:85:65:ba:2e:3f:e0:97:bf:47:ed:6e:0e:64:ee: 5a:26:d2:b3:d0:e4:f1:91:b7:20:81:42:27:1f:ec: 0f:3e:91:7f:4c:35:76:ed:3a:d5:14:58:16:44:68: 38:74:da:20:b4:a4:24:d9:15:87:a7:18:43:c3:2c: 61:8f:e5:56:a8:53:f6:dc:c6:64:52:27:90:b0:19: 4a:54:31:08:af:e5:9a:33:06:8b:86:35:20:0a:bd: 88:35:7f:15:df:be:5d:ab:4e:df:c9:9b:7b:e3:a8: f8:db:b6:98:97:66:7a:09:5c:30:1f:c8:56:d2:55: e3:6c:fa:af:46:11:8e:d6:11:31:c9:b6:25:ed:3d: 10:fb:fb:a5:09:56:18:60:a5:af:6d:f4:a2:a8:95: 37:2c:e4:15:1f:90:0c:0e:7c:dd:f8:b8:fc:80:e6: 1d:77:5b:5c:64:0e:23:9e:f4:9d:4f:79:58:ed:f5: c3:dc:a6:ac:a4:33:c4:4c:83:31:09:92:56:2c:ab: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:7F:04:8F:E6:50:2C:E2:96:91:D8:FF:7B:B0:38:87:93:E8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/558a2e62-ec32-3eed-ac35-b54b8f0fc27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:5001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1c:01:00:2a:52:04:f2:f2:68:7e:0e:72:3f:76:27:54:07: 38:13:7f:2f:a5:96:9e:91:4f:70:dc:c5:57:35:98:88:43:b9: 55:5d:bc:d5:86:19:97:1b:41:60:51:3f:eb:ba:e4:de:d7:ff: 08:82:76:32:1a:54:50:79:3f:88:50:6d:de:8f:3f:03:75:08: fa:6f:20:38:23:8d:11:dc:32:8c:b2:12:4c:46:f5:af:4c:0e: da:1e:53:ae:de:00:be:50:63:52:c5:94:cd:57:5d:33:c2:47: d8:16:c7:50:52:1a:be:d8:97:0f:48:65:42:85:e4:68:2d:7a: 41:ec:00:93:df:f3:ab:24:d6:75:03:fc:8c:16:b2:60:38:d2: 7a:f0:a8:e9:f3:d1:08:f9:24:95:61:b3:15:c7:f5:32:4b:ee: 29:b0:c3:0a:4c:5c:cf:02:15:1f:73:a8:4a:3d:0e:16:e8:d9: 2b:16:78:87:5c:4a:66:ff:76:1c:f8:ea:96:fb:50:c8:fc:d6: c5:8d:ec:5b:41:d7:56:8b:9a:c7:63:0e:ee:a7:e6:79:2f:9e: db:c5:43:e8:73:1c:20:b9:71:8d:d5:09:2a:a5:f7:b5:60:3e: 89:33:db:ca:f6:44:ee:42:ca:ef:38:ed:f7:62:f2:f8:11:de: 0d:46:b6:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1wP+OWT/pz7JPA6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk M2ZmMWRkYjUtNDgxYS00MGJjLWJiYTQtNmM4YmEzNWQ5YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Iht00ZsnKcCT3Ezrd1THJb2xQy/hwhOhYY wUvqaQVLzyCYXkx7qguWZFLuoJxg0V9SKW58uxw2Mxt3hWW6Lj/gl79H7W4OZO5a JtKz0OTxkbcggUInH+wPPpF/TDV27TrVFFgWRGg4dNogtKQk2RWHpxhDwyxhj+VW qFP23MZkUieQsBlKVDEIr+WaMwaLhjUgCr2INX8V375dq07fyZt746j427aYl2Z6 CVwwH8hW0lXjbPqvRhGO1hExybYl7T0Q+/ulCVYYYKWvbfSiqJU3LOQVH5AMDnzd +Lj8gOYdd1tcZA4jnvSdT3lY7fXD3KaspDPETIMxCZJWLKuBrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGZjfwSP5lAs4paR2P97sDiHk+huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNTU4YTJlNjItZWMzMi0z ZWVkLWFjMzUtYjU0YjhmMGZjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFlAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHAcAQAqUgTy8mh+DnI/didUBzgTfy+llp6RT3DcxVc1mIhDuVVd vNWGGZcbQWBRP+u65N7X/wiCdjIaVFB5P4hQbd6PPwN1CPpvIDgjjRHcMoyyEkxG 9a9MDtoeU67eAL5QY1LFlM1XXTPCR9gWx1BSGr7Ylw9IZUKF5GgtekHsAJPf86sk 1nUD/IwWsmA40nrwqOnz0Qj5JJVhsxXH9TJL7imwwwpMXM8CFR9zqEo9Dhbo2SsW eIdcSmb/dhz46pb7UMj81sWN7FtB11aLmsdjDu6n5nkvntvFQ+hzHCC5cY3VCSql 97VgPokz28r2RO5Cyu847fdi8vgR3g1Gtl0= -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:13 2026 by rpki-client