$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa File: 3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa (raw, json) Hash identifier: Ee2TwbeVQfDrakuUdSbsB3nGrsivkIGJEmDy5njwG2U= Subject key identifier: 49:A5:76:30:BB:53:D2:06:07:ED:7D:15:C1:EF:33:BE:55:64:81:B8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C55EAFC12B1316A241600 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 2001:4860:4831::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:55:ea:fc:12:b1:31:6a:24:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=3e584f4f-ec55-4abc-b7bd-e681619add4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:b9:f0:7b:ac:09:87:04:d9:31:84:87:c3: e8:fa:e3:31:49:6b:50:4f:48:e2:32:95:db:4c:fa: cc:8c:88:2a:38:df:90:5b:85:30:05:66:b5:72:d7: d5:73:00:dd:c0:f1:79:b7:8e:70:20:a8:b1:11:e6: 2d:9c:c1:bf:4e:cf:79:9f:d2:a3:47:ba:0e:79:e0: 9a:50:a3:4c:a6:ef:ea:94:7c:59:1d:ad:01:7a:aa: 8f:c0:44:b9:3b:9e:cb:7f:93:d7:a2:25:04:3a:9f: f9:6b:b3:82:f3:66:6b:ff:1b:cb:4e:f9:4d:2e:40: 5c:30:83:e1:b6:b6:1b:03:59:f2:f6:9e:6a:af:ea: 96:2a:9b:1f:45:a7:9d:fa:41:5e:b7:2d:a1:d9:36: 1c:3a:56:b3:b9:aa:7f:a7:97:91:7d:6b:67:a9:e4: 3e:21:4d:40:1a:53:db:f8:03:a9:bd:28:7e:c1:e6: d1:4d:75:21:96:cc:44:74:4d:e9:87:cf:23:6b:24: a0:39:73:08:48:57:f7:c6:02:e8:58:6a:f1:f2:80: c9:5e:06:4f:76:17:e7:31:40:05:f9:9c:34:fa:27: ed:7d:a9:11:f6:24:a2:be:4e:c4:2f:d7:e0:2f:ec: e8:9f:40:99:2c:c5:38:0d:c6:e8:cd:48:ba:e0:ef: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:76:30:BB:53:D2:06:07:ED:7D:15:C1:EF:33:BE:55:64:81:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ff2c0ec-3e5e-30ad-ac5e-910b0b4b3667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4831::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ee:19:4e:ef:cd:5a:8a:a7:ff:85:57:ec:b8:99:42:4b:bd: f6:16:32:90:d4:d1:71:ca:ad:15:d6:62:0c:cb:77:35:88:63: 82:b3:58:cd:df:3d:48:fc:57:a2:6c:99:01:30:b2:d7:b8:cf: c9:66:b1:82:41:9e:7e:7b:73:f0:40:62:44:e0:dd:f9:9e:b8: f0:d8:f5:96:4f:5a:dc:4b:7c:9b:14:62:bf:34:6f:ea:d0:ce: 81:40:39:7f:b0:ad:8a:50:97:41:a4:22:91:c6:6a:f3:2b:2c: 22:ff:a5:d0:fa:25:0d:60:88:4b:79:1b:4a:dc:a1:0b:b1:3b: 7a:7d:b3:39:2e:39:ee:70:82:0e:fa:d3:59:fb:24:f7:35:dc: fd:05:f9:db:1b:51:87:54:1a:84:83:77:82:a8:6f:b4:f7:f2: 1f:ba:9f:df:b9:8d:85:45:ac:10:8d:07:4f:f3:ce:fd:a1:14: e7:07:f5:fd:ea:cd:39:84:21:aa:d3:1b:f0:6a:59:12:a3:19: e8:88:42:02:75:06:81:51:59:63:62:66:7a:53:6a:7a:01:11: 8c:86:09:04:1c:d8:53:07:fa:db:39:35:eb:3c:22:04:27:8e: bf:64:6b:23:a7:93:f4:71:09:e2:53:c6:79:b5:6b:d4:86:ea: ee:b0:8d:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnFXq/BKxMWokFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk M2U1ODRmNGYtZWM1NS00YWJjLWI3YmQtZTY4MTYxOWFkZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkum58HusCYcE2TGEh8Po+uMxSWtQT0jiMpXb TPrMjIgqON+QW4UwBWa1ctfVcwDdwPF5t45wIKixEeYtnMG/Ts95n9KjR7oOeeCa UKNMpu/qlHxZHa0BeqqPwES5O57Lf5PXoiUEOp/5a7OC82Zr/xvLTvlNLkBcMIPh trYbA1ny9p5qr+qWKpsfRaed+kFety2h2TYcOlazuap/p5eRfWtnqeQ+IU1AGlPb +AOpvSh+webRTXUhlsxEdE3ph88jaySgOXMISFf3xgLoWGrx8oDJXgZPdhfnMUAF +Zw0+iftfakR9iSivk7EL9fgL+zon0CZLMU4DcbozUi64O/9lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEmldjC7U9IGB+19FcHvM75VZIG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2ZmMmMwZWMtM2U1ZS0z MGFkLWFjNWUtOTEwYjBiNGIzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHuGU7vzVqKp/+FV+y4mUJLvfYWMpDU0XHKrRXWYgzLdzWIY4Kz WM3fPUj8V6JsmQEwste4z8lmsYJBnn57c/BAYkTg3fmeuPDY9ZZPWtxLfJsUYr80 b+rQzoFAOX+wrYpQl0GkIpHGavMrLCL/pdD6JQ1giEt5G0rcoQuxO3p9szkuOe5w gg7601n7JPc13P0F+dsbUYdUGoSDd4Kob7T38h+6n9+5jYVFrBCNB0/zzv2hFOcH 9f3qzTmEIarTG/BqWRKjGeiIQgJ1BoFRWWNiZnpTanoBEYyGCQQc2FMH+ts5Nes8 IgQnjr9kayOnk/RxCeJTxnm1a9SG6u6wjV0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:23 2026 by rpki-client