$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa File: a57d1fb2-58ee-328f-9a05-fa425b781022.roa (raw, json) Hash identifier: f26xk+SNxMr/BZIILYvXa2/LqtEilecVNIAVs5D9LeA= Subject key identifier: 20:AE:03:8F:95:0E:03:4D:E5:EB:EC:F2:75:17:70:53:6F:14:95:C0 Certificate issuer: /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Certificate serial: 010D0C9F4328584D7E4E056D22CE4F212827EC20 Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa Signing time: Mon 13 Apr 2026 13:50:38 +0000 ROA not before: Mon 13 Apr 2026 13:50:38 +0000 ROA not after: Sun 12 Jul 2026 13:50:38 +0000 asID: 398343 IP address blocks: 2605:e440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:4e:05:6d:22:ce:4f:21:28:27:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81 Validity Not Before: Apr 13 13:50:38 2026 GMT Not After : Jul 12 13:50:38 2026 GMT Subject: CN=b11f74ca-8663-46dc-87d7-717679711c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:ea:71:ab:ab:2a:ea:18:89:c0:77:91:b3: 4c:02:5b:c2:d5:e4:18:55:41:1a:3b:43:7b:ed:a5: ae:69:25:9a:2f:d6:7a:8e:a1:9c:21:6c:d5:01:cc: 30:c7:d4:e5:a2:9f:84:08:68:b4:7d:8c:65:40:b1: 42:f9:e0:1c:f9:8c:45:e3:30:fa:be:cd:4d:9a:30: a7:23:5d:28:c8:2e:5b:d5:59:9c:41:55:7f:50:09: 7f:44:ba:18:af:69:35:0c:6c:c6:ac:54:75:d4:3b: d9:d2:6b:11:70:88:d3:ab:01:a3:61:ff:cf:ca:3f: ef:a2:46:0b:25:f7:03:6e:ac:68:a0:a7:bc:0e:1c: 6a:0b:9a:b2:e0:96:ea:bb:87:fc:af:4f:88:c4:c9: 79:66:ba:b3:e9:d6:b3:a1:04:51:15:9f:3c:4d:5c: 17:6b:60:3c:bf:99:6e:e4:88:7c:96:a2:44:a1:9d: e9:a4:00:fa:18:65:69:d3:06:50:31:34:5f:57:eb: 3e:d0:14:d1:9f:7a:99:9b:a8:2d:31:e4:20:51:c4: 85:c1:fb:f1:4c:7c:dc:5a:4d:40:69:98:9b:1a:73: ad:f9:58:25:c7:eb:1c:04:3b:62:92:7e:b1:67:02: 71:9b:a8:73:7b:18:21:f9:10:b9:89:db:d0:6e:8d: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:03:8F:95:0E:03:4D:E5:EB:EC:F2:75:17:70:53:6F:14:95:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/a57d1fb2-58ee-328f-9a05-fa425b781022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl X509v3 Authority Key Identifier: keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer sbgp-ipAddrBlock: critical IPv6: 2605:e440::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6b:61:70:89:25:f3:2f:83:60:b2:c8:88:97:89:79:c4:5b: e4:60:62:83:02:dc:a0:f4:c3:55:24:62:f9:37:28:63:d0:b1: b0:2a:d5:2d:ca:44:fd:b8:9e:b2:9b:5c:7d:88:53:dd:25:aa: e5:44:bc:be:6e:0f:15:87:da:b1:d8:85:73:98:f7:0e:09:f7: e9:8c:e0:b6:d4:46:46:c5:34:b1:43:25:80:57:2b:29:51:73: bf:9b:c3:71:b9:0b:63:da:75:9a:36:8c:3b:4f:d0:60:6d:e0: 18:8d:25:bd:76:19:26:3e:af:46:07:53:0f:67:3c:dc:ee:65: 5d:2a:88:e4:51:27:3c:50:4c:75:24:25:51:65:7e:37:54:f1: 1c:bf:82:4b:fa:91:b0:3c:49:64:13:e9:56:5e:bd:49:ef:12: c7:4f:05:4e:6a:29:bd:02:15:d9:c0:81:e3:b4:28:46:d3:f5: 90:c9:e5:6f:9c:b4:0b:84:5c:16:89:8b:7a:5c:21:f6:df:a3: 49:87:75:37:e3:23:a5:ee:27:7d:fd:bb:e4:60:67:7a:04:1b: 90:55:6e:eb:63:05:dc:1a:17:e5:a6:20:7c:bc:a3:70:b1:16: 75:41:53:bb:1e:ba:71:e1:46:87:a4:a0:b7:8f:1c:b2:8e:8c: 90:65:62:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1+TgVtIs5PISgn7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4 ZjgxMB4XDTI2MDQxMzEzNTAzOFoXDTI2MDcxMjEzNTAzOFowLzEtMCsGA1UEAxMk YjExZjc0Y2EtODY2My00NmRjLTg3ZDctNzE3Njc5NzExYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVzqcaurKuoYicB3kbNMAlvC1eQYVUEaO0N7 7aWuaSWaL9Z6jqGcIWzVAcwwx9Tlop+ECGi0fYxlQLFC+eAc+YxF4zD6vs1NmjCn I10oyC5b1VmcQVV/UAl/RLoYr2k1DGzGrFR11DvZ0msRcIjTqwGjYf/Pyj/vokYL JfcDbqxooKe8DhxqC5qy4Jbqu4f8r0+IxMl5Zrqz6dazoQRRFZ88TVwXa2A8v5lu 5Ih8lqJEoZ3ppAD6GGVp0wZQMTRfV+s+0BTRn3qZm6gtMeQgUcSFwfvxTHzcWk1A aZibGnOt+Vglx+scBDtikn6xZwJxm6hzexgh+RC5idvQbo1AhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCuA4+VDgNN5evs8nUXcFNvFJXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvYTU3ZDFmYjItNThlZS0z MjhmLTlhMDUtZmE0MjViNzgxMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5 OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9rYXCJJfMvg2CyyIiXiXnEW+RgYoMC3KD0w1UkYvk3KGPQsbAq 1S3KRP24nrKbXH2IU90lquVEvL5uDxWH2rHYhXOY9w4J9+mM4LbURkbFNLFDJYBX KylRc7+bw3G5C2PadZo2jDtP0GBt4BiNJb12GSY+r0YHUw9nPNzuZV0qiORRJzxQ THUkJVFlfjdU8Ry/gkv6kbA8SWQT6VZevUnvEsdPBU5qKb0CFdnAgeO0KEbT9ZDJ 5W+ctAuEXBaJi3pcIfbfo0mHdTfjI6XuJ339u+RgZ3oEG5BVbutjBdwaF+WmIHy8 o3CxFnVBU7seunHhRoekoLePHLKOjJBlYlw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:28:27 2026 by rpki-client