$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa File: 5e77d852-ed63-3985-aa23-e8aa56c369a2.roa (raw, json) Hash identifier: XkuA7wO0Si+i1Sud3jiwmSA3IUpZgTupfDdcC3n3SnY= Subject key identifier: EE:AB:3D:0E:EA:15:99:87:DD:52:BE:7F:C7:23:F2:5A:7E:9B:C3:A9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD4E5D0AFF32E73A19400 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 11344 IP address blocks: 2001:4860:3::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d4:e5:d0:af:f3:2e:73:a1:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=93c1fc2d-6784-4f6d-a791-d3764eca1774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:78:5f:59:c1:e9:3f:22:0d:6e:e0:88:9d: c7:9f:6d:90:7d:23:97:1b:7c:d8:a0:a4:4a:8a:ac: 19:8f:c6:3e:e9:c1:2e:b8:84:19:e4:b5:60:79:5c: e3:61:9a:77:08:64:6f:35:52:d0:05:0a:13:45:f2: 18:1d:78:f1:3f:30:21:79:fe:2d:e0:df:21:87:92: 47:56:d2:05:cc:69:4a:a0:5b:c0:cd:19:c6:0b:fb: 4c:1c:66:33:7d:33:db:d2:74:27:38:96:0c:62:2f: c2:e4:ec:00:bc:ed:ac:2f:07:86:ef:c2:eb:0d:b7: 6d:51:3f:9f:df:c5:70:e0:fa:98:19:2c:2b:a5:54: 62:0b:08:4b:92:c6:37:4d:ca:f5:dd:f9:15:66:1b: 27:ba:4d:a9:6e:bf:6c:cd:37:9c:a3:14:de:3a:9d: e4:1b:0c:fd:80:cf:d1:a3:f9:d5:1d:cb:23:44:8f: 21:39:7b:51:01:a1:39:a0:9e:12:e0:bc:70:2d:d2: 22:1e:e6:2a:49:74:6f:cf:2e:52:7e:78:1b:82:82: 24:76:44:22:2b:fe:3e:e1:7f:2b:50:a7:66:3b:4e: 86:b7:af:d2:30:52:e4:b4:0e:93:1e:93:1a:63:fa: 79:bc:c0:ba:ca:8f:3e:01:1a:e5:b2:2a:ce:44:2b: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:3D:0E:EA:15:99:87:DD:52:BE:7F:C7:23:F2:5A:7E:9B:C3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e77d852-ed63-3985-aa23-e8aa56c369a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:3::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8a:35:ff:15:3a:d2:0a:18:78:f6:83:be:e5:e1:3f:da:03: 58:0a:1d:26:60:49:bc:66:1d:ae:94:1c:5b:42:aa:d4:c8:a4: a1:d6:d9:03:7c:b4:b2:69:14:0b:3d:82:77:3b:44:03:95:2e: b8:b6:d2:20:1b:c1:2e:d8:a8:e5:d2:dd:42:14:fc:cb:8f:c7: f6:7e:51:fd:6b:9a:8c:a4:97:f5:87:12:f6:22:b3:32:e0:e9: 96:8b:6f:73:15:f3:c7:8f:18:c5:be:e2:fc:53:50:97:5b:5b: 46:2b:b1:37:1b:e9:ea:24:fe:3f:cd:72:64:80:55:93:da:a9: 4f:75:50:4f:2c:fc:33:a4:5f:27:5d:23:3c:36:a9:71:5f:23: c1:3f:a8:00:0b:f0:e0:9b:ec:c6:59:ca:57:e7:c7:0e:03:1c: 04:9d:a0:f5:ef:72:a1:11:8c:6b:35:54:ec:be:35:dd:d6:cb: 53:ac:80:5b:f2:7d:5c:f8:a5:7b:85:83:71:ff:61:61:03:30: da:31:aa:8a:b5:f1:0f:6e:b7:01:74:31:14:aa:fc:e7:b2:88: 60:8f:82:2c:44:d3:e6:7f:b8:be:9f:53:f4:0e:9f:a2:81:99: 8c:b3:ed:89:79:a2:a7:16:d1:f3:70:3c:60:05:8f:ea:71:b2: a6:b2:28:0a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE4Fm9Tl0K/zLnOhlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OTNjMWZjMmQtNjc4NC00ZjZkLWE3OTEtZDM3NjRlY2ExNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUh4X1nB6T8iDW7giJ3Hn22QfSOXG3zYoKRK iqwZj8Y+6cEuuIQZ5LVgeVzjYZp3CGRvNVLQBQoTRfIYHXjxPzAhef4t4N8hh5JH VtIFzGlKoFvAzRnGC/tMHGYzfTPb0nQnOJYMYi/C5OwAvO2sLweG78LrDbdtUT+f 38Vw4PqYGSwrpVRiCwhLksY3Tcr13fkVZhsnuk2pbr9szTecoxTeOp3kGwz9gM/R o/nVHcsjRI8hOXtRAaE5oJ4S4LxwLdIiHuYqSXRvzy5SfngbgoIkdkQiK/4+4X8r UKdmO06Gt6/SMFLktA6THpMaY/p5vMC6yo8+ARrlsirORCvlTwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFO6rPQ7qFZmH3VK+f8cj8lp+m8OpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWU3N2Q4NTItZWQ2My0z OTg1LWFhMjMtZThhYTU2YzM2OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFIYAAD AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJ4o1/xU60goYePaDvuXhP9oDWAodJmBJvGYdrpQcW0Kq1Mik odbZA3y0smkUCz2CdztEA5UuuLbSIBvBLtio5dLdQhT8y4/H9n5R/WuajKSX9YcS 9iKzMuDplotvcxXzx48Yxb7i/FNQl1tbRiuxNxvp6iT+P81yZIBVk9qpT3VQTyz8 M6RfJ10jPDapcV8jwT+oAAvw4JvsxlnKV+fHDgMcBJ2g9e9yoRGMazVU7L413dbL U6yAW/J9XPile4WDcf9hYQMw2jGqirXxD263AXQxFKr857KIYI+CLETT5n+4vp9T 9A6fooGZjLPtiXmipxbR83A8YAWP6nGyprIoCg== -----END CERTIFICATE-----Generated at Sun Jun 14 10:46:48 2026 by rpki-client