$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cab15817-2490-3c69-867b-b18618d2e2a6.roa File: cab15817-2490-3c69-867b-b18618d2e2a6.roa (raw, json) Hash identifier: wJoTahRQ4+mdn8O/NLkBI6E3GIqkOLlkMVV034xDUik= Subject key identifier: FD:BF:0C:7C:FE:45:30:61:91:0C:09:CC:0B:7B:8C:47:84:F7:2B:75 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584D63AFA113C6DFFAB98253D980 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cab15817-2490-3c69-867b-b18618d2e2a6.roa Signing time: Sat 04 Apr 2026 01:00:25 +0000 ROA not before: Sat 04 Apr 2026 01:00:25 +0000 ROA not after: Fri 03 Jul 2026 01:00:25 +0000 asID: 396982 IP address blocks: 2604:a940:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:63:af:a1:13:c6:df:fa:b9:82:53:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Apr 4 01:00:25 2026 GMT Not After : Jul 3 01:00:25 2026 GMT Subject: CN=ba89e7d1-717d-4791-b650-2f833a050b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bd:b1:44:69:87:7e:5b:3c:84:ac:2a:3d:e4: 5d:be:50:ad:e7:df:71:07:31:57:3d:9d:64:55:33: 1f:a4:eb:94:57:31:32:de:5b:0b:a8:8a:54:7d:41: fa:9a:84:c1:6c:4c:21:c6:86:ab:2e:6c:26:f7:0b: df:e0:27:bb:95:99:30:d6:5e:0e:99:fb:25:e3:f3: 98:60:61:ba:78:45:f1:1b:0d:9a:3e:40:0e:21:91: f0:01:66:38:4d:4f:fb:3a:6f:9f:33:dc:3f:c1:1d: 31:f6:34:6a:3b:f6:b1:ac:a2:a4:52:ba:63:19:f9: 5f:7d:37:e3:df:cb:f5:e0:b9:3c:e1:28:ab:f5:43: b8:8e:12:6e:a5:c3:a4:15:2e:57:48:ba:2d:d2:b5: 07:6e:b4:33:65:46:1f:82:f4:53:56:97:a5:36:4b: f9:59:e1:77:4d:c4:5c:b1:f0:56:08:e6:05:dc:65: 4a:5a:c8:a0:77:4b:88:c9:c9:9f:21:d8:12:cd:e9: 3b:8e:9e:db:70:e6:a4:23:51:5b:41:b5:c8:31:a1: c2:b0:ca:01:11:0f:ba:8b:b2:1e:54:ca:c6:d3:10: be:9c:70:b1:b1:39:b8:be:56:dc:94:66:8d:ca:d3: 91:34:a8:90:bf:71:a2:76:af:6e:a3:ad:5c:3e:d9: d7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BF:0C:7C:FE:45:30:61:91:0C:09:CC:0B:7B:8C:47:84:F7:2B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cab15817-2490-3c69-867b-b18618d2e2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv6: 2604:a940:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:11:7a:e8:d7:bd:4b:95:da:b9:d5:b5:1d:6c:74:1b:7d:2f: 1e:f3:3d:25:62:3a:02:07:17:61:aa:86:ed:0d:2a:aa:cc:73: 98:d4:30:05:bc:d6:bf:1a:83:86:fe:a3:27:7a:14:41:10:cd: 50:56:29:98:71:1a:c4:07:08:44:d5:0d:b4:f1:47:36:18:24: 5b:db:e4:46:4e:7e:77:b0:99:c8:89:e7:e6:e7:92:ca:aa:ad: 7d:8c:d8:54:a3:7a:d7:36:30:2a:ae:a9:62:2b:19:24:05:bf: 1a:a6:e4:27:c7:c7:48:47:eb:cc:d6:87:51:43:b2:b0:7b:8c: 48:72:36:87:2f:f8:ad:66:ca:4d:24:41:fd:8f:bb:a7:c1:14: 33:19:68:82:3d:2c:41:25:7c:ed:a0:1c:56:52:97:88:98:fc: 08:fe:81:cb:ef:c7:de:6f:9c:12:e3:8d:42:35:d4:38:69:e4: 3d:96:60:b7:0b:65:40:5a:d5:c5:18:59:e2:00:53:e8:8f:78: 75:40:95:05:c2:e5:ff:e8:b8:0e:60:f3:e8:0d:5b:7c:13:34: ab:c9:eb:51:92:20:b8:01:9b:ef:59:53:ff:fa:3a:a3:3d:5d: 95:ae:f3:52:89:42:0c:66:d5:65:a7:9a:36:94:a5:94:78:4e: ec:aa:2d:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1jr6ETxt/6uYJT2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDQwNDAxMDAyNVoXDTI2MDcwMzAxMDAyNVowLzEtMCsGA1UEAxMk YmE4OWU3ZDEtNzE3ZC00NzkxLWI2NTAtMmY4MzNhMDUwYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb2xRGmHfls8hKwqPeRdvlCt599xBzFXPZ1k VTMfpOuUVzEy3lsLqIpUfUH6moTBbEwhxoarLmwm9wvf4Ce7lZkw1l4Omfsl4/OY YGG6eEXxGw2aPkAOIZHwAWY4TU/7Om+fM9w/wR0x9jRqO/axrKKkUrpjGflffTfj 38v14Lk84Sir9UO4jhJupcOkFS5XSLot0rUHbrQzZUYfgvRTVpelNkv5WeF3TcRc sfBWCOYF3GVKWsigd0uIycmfIdgSzek7jp7bcOakI1FbQbXIMaHCsMoBEQ+6i7Ie VMrG0xC+nHCxsTm4vlbclGaNytORNKiQv3Gidq9uo61cPtnXYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2/DHz+RTBhkQwJzAt7jEeE9yt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvY2FiMTU4MTctMjQ5MC0z YzY5LTg2N2ItYjE4NjE4ZDJlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSpQAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK4ReujXvUuV2rnVtR1sdBt9Lx7zPSViOgIHF2Gqhu0NKqrMc5jU MAW81r8ag4b+oyd6FEEQzVBWKZhxGsQHCETVDbTxRzYYJFvb5EZOfnewmciJ5+bn ksqqrX2M2FSjetc2MCquqWIrGSQFvxqm5CfHx0hH68zWh1FDsrB7jEhyNocv+K1m yk0kQf2Pu6fBFDMZaII9LEElfO2gHFZSl4iY/Aj+gcvvx95vnBLjjUI11Dhp5D2W YLcLZUBa1cUYWeIAU+iPeHVAlQXC5f/ouA5g8+gNW3wTNKvJ61GSILgBm+9ZU//6 OqM9XZWu81KJQgxm1WWnmjaUpZR4TuyqLf0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:00 2026 by rpki-client