$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa File: fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa (raw, json) Hash identifier: wnKmMdgx4eBguJo4Nu78OKZqCTjqGdExlW2WPsU43vY= Subject key identifier: 83:6D:39:5D:E3:EA:8F:B7:E5:75:03:69:A9:5E:FB:3F:BF:D2:91:B4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059BD67C652F26987611C700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 2001:4860:4864::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d6:7c:65:2f:26:98:76:11:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=cffa5db8-0c8b-4adb-86ca-728c830c025f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:48:a6:5d:57:41:af:07:32:c1:98:47:95: 7d:f0:b5:02:dd:3c:1d:a1:b4:cc:15:c8:e2:d2:92: 46:73:a6:69:b1:16:aa:42:c5:4f:38:14:d2:1b:66: 08:6c:cd:4c:23:f1:5c:85:28:3b:6f:de:97:06:bb: 3d:88:16:cf:35:d7:b2:c8:04:2f:26:f8:03:72:28: 9e:b9:81:cc:bc:66:ac:03:f6:b1:fb:12:67:66:53: a1:a1:43:c9:89:cd:16:f8:f0:5b:01:04:28:f0:87: da:4d:d5:0c:71:bc:a2:2f:76:f7:ca:e3:00:ff:0c: 58:85:2d:eb:ab:41:50:50:01:e4:0b:e5:49:39:5a: 0d:df:3b:45:39:4c:eb:26:3c:2f:4d:52:6b:2a:76: d8:d3:37:46:d9:c8:3e:84:1a:33:96:bc:15:25:bb: 36:7a:9b:fe:01:81:0b:f7:c7:a3:64:b5:a2:75:5b: a0:8f:a1:93:08:c2:18:59:8f:4e:ac:82:e8:79:d5: 6f:01:4d:4b:07:85:68:49:76:00:c5:cf:13:fe:e0: fc:9d:36:20:7d:c5:c2:d8:b5:4a:b3:03:17:14:95: 6d:7b:da:9a:51:9b:01:6a:29:a2:6b:63:cd:24:2c: a6:c7:3c:9e:f7:fa:56:1d:b1:f3:5c:72:b3:c7:1d: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6D:39:5D:E3:EA:8F:B7:E5:75:03:69:A9:5E:FB:3F:BF:D2:91:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fd1e0ae3-923a-32d9-a9a3-cb7e116a988a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4864::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:22:cc:fa:4c:fe:17:7c:de:84:27:2b:1a:81:ce:8c:35:3d: 1c:ed:0a:b6:b1:4c:d2:52:4a:b2:8c:54:cf:c0:cd:38:99:c4: 22:e7:73:22:28:ed:b4:fb:76:be:b7:a2:9c:f6:63:9d:4c:41: 95:a4:bd:bf:13:c7:24:5c:8c:d6:21:05:af:9d:ae:cc:39:e8: 62:4e:3f:ce:76:cc:9f:fd:77:47:99:14:ec:0a:39:17:49:2d: d3:98:34:71:56:68:3f:07:a9:c9:79:1b:ec:28:8e:c9:bc:3a: 99:ba:ef:65:10:1e:82:bb:52:5a:f8:52:ca:73:3a:2e:2c:d7: 7a:94:e9:4d:34:0f:7e:fb:8f:4d:5a:18:0b:9b:97:53:55:6c: 7f:7c:05:73:87:39:05:e6:77:24:42:cf:bc:64:34:76:29:af: 7c:00:54:34:a7:6b:5e:94:4d:17:d7:0f:be:42:2a:13:85:ff: 43:a6:3f:6c:a6:1b:60:9e:93:0f:a8:de:a6:76:ea:7c:36:8b: 50:9e:d4:c8:30:29:21:4b:2f:44:94:ef:4a:99:89:84:09:9d: df:6e:6d:a3:3c:0c:87:b0:95:90:00:aa:a2:cf:97:75:80:93: a4:fd:1b:f9:35:46:c9:14:02:b0:66:dd:e7:fd:d2:6e:cf:2e: 87:5b:cc:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Fm9Z8ZS8mmHYRxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Y2ZmYTVkYjgtMGM4Yi00YWRiLTg2Y2EtNzI4YzgzMGMwMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFdIpl1XQa8HMsGYR5V98LUC3TwdobTMFcji 0pJGc6ZpsRaqQsVPOBTSG2YIbM1MI/FchSg7b96XBrs9iBbPNdeyyAQvJvgDciie uYHMvGasA/ax+xJnZlOhoUPJic0W+PBbAQQo8IfaTdUMcbyiL3b3yuMA/wxYhS3r q0FQUAHkC+VJOVoN3ztFOUzrJjwvTVJrKnbY0zdG2cg+hBozlrwVJbs2epv+AYEL 98ejZLWidVugj6GTCMIYWY9OrILoedVvAU1LB4VoSXYAxc8T/uD8nTYgfcXC2LVK swMXFJVte9qaUZsBaimia2PNJCymxzye9/pWHbHzXHKzxx1fFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFINtOV3j6o+35XUDaale+z+/0pG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZmQxZTBhZTMtOTIzYS0z MmQ5LWE5YTMtY2I3ZTExNmE5ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEhk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0izPpM/hd83oQnKxqBzow1PRztCraxTNJSSrKMVM/AzTiZxCLn cyIo7bT7dr63opz2Y51MQZWkvb8TxyRcjNYhBa+drsw56GJOP852zJ/9d0eZFOwK ORdJLdOYNHFWaD8Hqcl5G+wojsm8Opm672UQHoK7Ulr4UspzOi4s13qU6U00D377 j01aGAubl1NVbH98BXOHOQXmdyRCz7xkNHYpr3wAVDSna16UTRfXD75CKhOF/0Om P2ymG2Cekw+o3qZ26nw2i1Ce1MgwKSFLL0SU70qZiYQJnd9ubaM8DIewlZAAqqLP l3WAk6T9G/k1RskUArBm3ef90m7PLodbzEI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:19:24 2026 by rpki-client