$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/dda42ce8-1992-37e6-894c-0d293b96f066.roa File: dda42ce8-1992-37e6-894c-0d293b96f066.roa (raw, json) Hash identifier: 7+It6yjbbxuRWIcPsnNsZMxepeVjljIaxZ4pizEMjqc= Subject key identifier: 21:53:F2:B7:C0:C6:2C:C1:EE:89:11:0A:49:81:8C:61:BC:12:88:F4 Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9 Certificate serial: 010D0C9F4328584DEB9D141FE1EF59D101090380 Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/dda42ce8-1992-37e6-894c-0d293b96f066.roa Signing time: Fri 22 May 2026 17:33:02 +0000 ROA not before: Fri 22 May 2026 17:33:02 +0000 ROA not after: Thu 20 Aug 2026 17:33:02 +0000 asID: 401671 IP address blocks: 2604:c20:400c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:9d:14:1f:e1:ef:59:d1:01:09:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9 Validity Not Before: May 22 17:33:02 2026 GMT Not After : Aug 20 17:33:02 2026 GMT Subject: CN=5d55a45d-8b5f-4731-8a27-b9fa0f1e63f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:01:01:ba:02:63:2e:0c:26:82:02:99:ad:d9: f3:1e:ae:51:d9:12:05:84:19:5f:c6:f5:27:87:a5: 30:63:db:ad:11:b3:ca:37:1d:db:dc:2a:60:cd:cb: 3b:8b:9b:0c:7f:d4:67:9b:f5:65:05:0d:18:ca:29: 2b:c4:7e:e3:77:89:0c:ed:db:9f:bd:07:2d:15:bc: b2:52:b5:52:52:73:95:10:4c:03:91:13:dc:5e:9c: dc:b8:bb:fc:b3:0e:10:d6:19:1d:40:b5:d0:58:a3: ab:71:94:c2:38:f6:29:3c:09:8d:45:7a:a0:5a:06: 49:76:2f:61:1c:d8:0c:76:84:73:e5:18:83:ef:73: 3e:75:9f:16:7f:33:18:05:79:63:b1:d8:4b:39:b2: b9:a4:af:dc:5b:ff:df:c4:81:81:87:77:70:e2:fe: 9f:e2:a7:4b:53:66:6d:22:0c:9f:61:dd:be:cd:22: 85:10:c1:95:74:e1:34:40:e6:b7:cd:94:ff:6f:a3: 2d:b3:1c:60:20:43:af:bc:07:9e:b4:04:5e:32:18: 6f:af:bb:36:1b:46:55:93:a4:e9:1f:17:e4:1b:b1: ac:49:2f:4f:59:88:b1:a8:d3:bf:0c:84:cd:e4:75: 01:77:9a:90:13:e7:bf:bc:7b:19:40:35:3c:b6:ad: 1d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:53:F2:B7:C0:C6:2C:C1:EE:89:11:0A:49:81:8C:61:BC:12:88:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/dda42ce8-1992-37e6-894c-0d293b96f066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl X509v3 Authority Key Identifier: keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer sbgp-ipAddrBlock: critical IPv6: 2604:c20:400c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c7:3b:84:22:42:be:f6:ab:c1:b0:73:38:b6:0b:8d:43:ad: a3:1f:48:0d:ed:30:c9:00:3c:e0:c6:90:bf:bc:8f:65:1d:a2: 2c:27:75:c2:78:fe:6c:ac:db:36:2c:fe:45:e0:76:ef:c0:bd: 9f:c6:08:9e:a7:8f:1c:6a:72:3c:1d:05:f8:28:c6:83:a1:84: 94:c3:61:57:ae:58:97:60:d0:b8:7b:f0:c7:08:71:bd:7e:f2: 66:19:3c:8c:e7:0e:c9:81:fe:c8:f5:5a:1b:2a:e7:4c:7b:08: 29:82:7d:89:4d:0a:4d:45:eb:e4:e5:5d:f0:0d:cf:ba:0e:79: 3a:27:a2:57:b7:94:3a:ab:fb:c7:1b:56:95:d1:b4:fd:06:87: d4:5f:d2:18:7c:4a:59:84:9a:fb:79:02:26:30:e2:2b:4b:9f: a6:80:7f:95:85:f1:ca:e8:c6:92:ee:44:2b:7d:49:f8:45:cf: 12:43:04:77:7f:d0:7b:e5:ee:a9:b3:00:86:73:a4:00:b1:eb: 86:e3:7a:74:49:ae:91:a6:91:7e:d1:60:15:97:e1:f3:c9:6b: 72:55:f9:b4:a3:e1:9b:92:d5:bb:3c:92:eb:4b:93:0c:b8:f2: 6d:e6:78:2a:25:15:20:52:c9:52:ab:74:c8:1c:ea:56:41:83: 49:44:f4:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3rnRQf4e9Z0QEJA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2 YmQ5MB4XDTI2MDUyMjE3MzMwMloXDTI2MDgyMDE3MzMwMlowLzEtMCsGA1UEAxMk NWQ1NWE0NWQtOGI1Zi00NzMxLThhMjctYjlmYTBmMWU2M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAEBugJjLgwmggKZrdnzHq5R2RIFhBlfxvUn h6UwY9utEbPKNx3b3Cpgzcs7i5sMf9Rnm/VlBQ0YyikrxH7jd4kM7dufvQctFbyy UrVSUnOVEEwDkRPcXpzcuLv8sw4Q1hkdQLXQWKOrcZTCOPYpPAmNRXqgWgZJdi9h HNgMdoRz5RiD73M+dZ8WfzMYBXljsdhLObK5pK/cW//fxIGBh3dw4v6f4qdLU2Zt IgyfYd2+zSKFEMGVdOE0QOa3zZT/b6MtsxxgIEOvvAeetAReMhhvr7s2G0ZVk6Tp HxfkG7GsSS9PWYixqNO/DITN5HUBd5qQE+e/vHsZQDU8tq0d/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCFT8rfAxizB7okRCkmBjGG8Eoj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvZGRhNDJjZTgtMTk5Mi0z N2U2LTg5NGMtMGQyOTNiOTZmMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1 NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrHO4QiQr72q8Gwczi2C41DraMfSA3tMMkAPODGkL+8j2Udoiwn dcJ4/mys2zYs/kXgdu/AvZ/GCJ6njxxqcjwdBfgoxoOhhJTDYVeuWJdg0Lh78McI cb1+8mYZPIznDsmB/sj1Whsq50x7CCmCfYlNCk1F6+TlXfANz7oOeTonole3lDqr +8cbVpXRtP0Gh9Rf0hh8SlmEmvt5AiYw4itLn6aAf5WF8croxpLuRCt9SfhFzxJD BHd/0Hvl7qmzAIZzpACx64bjenRJrpGmkX7RYBWX4fPJa3JV+bSj4ZuS1bs8kutL kwy48m3meColFSBSyVKrdMgc6lZBg0lE9L0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:51:46 2026 by rpki-client