$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee6c458-eeae-3d49-92f7-1454611950ef.roa File: 3ee6c458-eeae-3d49-92f7-1454611950ef.roa (raw, json) Hash identifier: fooE2MCJoEb/PTl3RlMudNTVIPU4H49FIwURvPMw0GQ= Subject key identifier: 5A:9C:F9:DB:6D:33:DC:40:BC:42:45:4E:35:80:8C:C1:36:69:EC:AE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAB8BC876CF5C1B8F4000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee6c458-eeae-3d49-92f7-1454611950ef.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 2605:4300:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:ab:8b:c8:76:cf:5c:1b:8f:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=087bd50a-e652-4ab3-ad59-85e543af19f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:84:53:64:f1:5a:26:77:d2:d5:39:ca:dd: 6a:e2:70:8c:18:95:ec:8f:5b:e1:95:fc:3e:46:1e: 3b:99:4b:7f:7d:89:a7:28:8e:0c:e6:a9:8b:51:5b: c5:eb:0a:ea:03:e4:52:26:3b:a8:97:cd:69:dc:b4: c7:bc:38:c6:35:91:0c:7e:cf:fc:37:40:d4:ed:4f: 3b:5b:b2:5a:68:ea:35:47:66:4a:df:86:41:67:36: 60:37:d2:01:69:58:40:47:da:04:60:e4:39:e9:14: 31:90:58:4f:22:af:3b:06:69:ef:51:a0:ad:4e:4e: ec:61:63:0d:a4:bf:9d:bb:c8:fa:39:38:5a:30:61: f3:b4:d5:c1:e2:4a:a9:7d:f9:3d:a9:4c:98:ba:3d: 30:ed:74:24:6f:55:17:5a:94:59:5a:34:50:14:74: bc:f6:e4:99:26:f3:dc:0c:a3:64:99:4a:87:ed:76: d0:77:7d:87:dd:fd:29:ed:2d:2a:05:13:6b:84:4f: f7:c5:91:dc:44:51:7d:13:4a:46:4e:75:f8:5c:26: 49:28:91:21:58:01:5f:35:ad:71:ca:bd:ab:20:31: 1e:92:c9:38:63:cc:c6:0b:88:99:e6:f5:9a:1e:8f: 9b:56:53:54:81:62:56:54:b5:b1:aa:04:40:98:23: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9C:F9:DB:6D:33:DC:40:BC:42:45:4E:35:80:8C:C1:36:69:EC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee6c458-eeae-3d49-92f7-1454611950ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a0:01:3d:cb:58:1d:91:43:b3:ac:7b:75:c6:b9:94:3d:21: 54:92:7f:03:16:0a:ed:97:17:2a:d7:e4:df:de:1c:82:f1:0d: 0b:a9:e9:9d:b7:ac:57:83:44:b7:1b:26:4e:92:4f:78:e8:72: 7f:30:89:6e:55:77:06:f8:06:05:d4:ca:2c:9c:e3:df:2d:01: b9:02:d1:39:9b:30:42:57:94:98:1b:20:d7:50:21:13:af:48: f8:3f:51:e6:5d:f7:b5:23:86:94:ea:49:26:3a:ca:89:9d:50: 21:9f:4f:0d:ac:e4:a8:7a:e5:92:72:49:d8:9b:a6:99:3f:d6: 67:d4:2d:8c:78:cc:2f:d7:25:ba:82:17:f3:20:fd:7a:ea:c3: 35:de:53:5d:ad:4b:b1:f8:a3:2c:48:e3:ee:b2:32:bb:5a:e5: 41:4d:42:bb:5a:2b:60:36:b5:9c:05:e3:d7:e9:52:f5:b9:50: 60:4f:14:62:a8:60:20:49:d2:1e:b5:b4:ee:90:50:4f:4d:1a: b4:26:97:23:06:71:bc:dd:96:4d:e2:7e:17:4f:01:7a:73:e7: 6a:fb:b6:33:37:1f:4b:47:91:a8:d6:8c:22:cd:47:ef:3b:f8: 12:82:62:b8:94:46:90:05:64:d6:ad:6b:fb:ac:4f:a7:9d:0d: f9:6c:ac:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1bT6uLyHbPXBuPQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MDg3YmQ1MGEtZTY1Mi00YWIzLWFkNTktODVlNTQzYWYxOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbWEU2TxWiZ30tU5yt1q4nCMGJXsj1vhlfw+ Rh47mUt/fYmnKI4M5qmLUVvF6wrqA+RSJjuol81p3LTHvDjGNZEMfs/8N0DU7U87 W7JaaOo1R2ZK34ZBZzZgN9IBaVhAR9oEYOQ56RQxkFhPIq87BmnvUaCtTk7sYWMN pL+du8j6OThaMGHztNXB4kqpffk9qUyYuj0w7XQkb1UXWpRZWjRQFHS89uSZJvPc DKNkmUqH7XbQd32H3f0p7S0qBRNrhE/3xZHcRFF9E0pGTnX4XCZJKJEhWAFfNa1x yr2rIDEeksk4Y8zGC4iZ5vWaHo+bVlNUgWJWVLWxqgRAmCM7fQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFqc+dttM9xAvEJFTjWAjME2aeyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2VlNmM0NTgtZWVhZS0z ZDQ5LTkyZjctMTQ1NDYxMTk1MGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDADQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAt6ABPctYHZFDs6x7dca5lD0hVJJ/AxYK7ZcXKtfk394cgvENC6np nbesV4NEtxsmTpJPeOhyfzCJblV3BvgGBdTKLJzj3y0BuQLROZswQleUmBsg11Ah E69I+D9R5l33tSOGlOpJJjrKiZ1QIZ9PDazkqHrlknJJ2JummT/WZ9QtjHjML9cl uoIX8yD9eurDNd5TXa1LsfijLEjj7rIyu1rlQU1Cu1orYDa1nAXj1+lS9blQYE8U YqhgIEnSHrW07pBQT00atCaXIwZxvN2WTeJ+F08BenPnavu2MzcfS0eRqNaMIs1H 7zv4EoJiuJRGkAVk1q1r+6xPp50N+WysEA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:42:48 2026 by rpki-client