$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa File: 4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa (raw, json) Hash identifier: v2dZUzvx897hUFsUwy6BjXfb/ewS8iJVSIU7c+yCnp8= Subject key identifier: FC:1B:74:B8:C9:8C:DD:86:EC:E2:3C:46:D3:F4:13:2D:B9:5F:B7:BE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA496701CA5916A41D600 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 2605:4300:1e00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a4:96:70:1c:a5:91:6a:41:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=3ae1dc4f-44f8-44b4-86c3-313bcc693696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:4f:d1:ff:0e:c1:f5:6a:af:87:7a:c0:25: cc:5f:66:e8:b1:ea:40:41:e8:59:f3:4a:5b:86:b1: 01:ce:15:d8:70:f4:f6:0d:94:ef:59:7e:0c:5c:1f: d1:35:4b:f0:70:62:6a:44:97:25:28:01:c4:31:ef: 0c:94:9a:51:ee:d8:a4:e8:d6:cf:c5:5c:16:40:e0: 6d:2f:77:76:b2:c4:64:42:0a:d4:99:98:c2:c1:4f: c2:87:4a:73:9a:6b:2a:a0:39:c9:fc:5f:cc:33:d6: 44:44:a8:5e:71:46:a9:97:09:8b:ed:d7:d7:a2:7a: ec:87:1c:ca:a6:b5:8d:26:e3:74:b4:1b:b1:78:48: 76:ca:ce:28:dc:ce:ee:c4:84:19:71:69:19:e5:86: 5b:7f:49:6a:62:eb:51:d8:27:85:d5:74:3f:b0:05: 71:14:68:4c:0a:25:03:ae:6c:2d:69:89:ab:00:06: 0d:1c:ee:51:5a:5f:71:7d:62:ef:e2:ce:9c:79:68: 96:c3:37:82:63:9c:22:96:be:26:30:3a:68:0b:25: 70:37:95:4a:88:a7:7c:c7:6f:32:90:6d:65:98:4e: 9d:81:61:be:f9:bc:cd:bb:e1:ad:8b:b8:d6:b4:b4: 95:24:d0:8d:81:1e:39:69:a3:92:3b:07:49:42:e8: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1B:74:B8:C9:8C:DD:86:EC:E2:3C:46:D3:F4:13:2D:B9:5F:B7:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:8a:ab:76:fc:90:1e:dd:1a:79:02:ba:8c:f4:11:18:5a:1a: 06:28:6d:d9:a9:a1:4d:a7:31:2f:89:91:da:a3:1a:7e:40:53: 2d:c5:d3:f5:e4:d7:f1:37:5b:27:ea:4b:50:8f:b7:ca:f6:96: f6:26:4d:d8:1e:68:46:82:4d:ca:21:ca:73:02:26:00:0a:3d: a8:ae:5c:46:5c:30:5d:a9:ef:9e:6d:9b:a8:dd:c8:0d:3d:6f: d5:92:69:80:3c:5a:f8:cb:7f:ae:c6:9b:a5:d4:02:aa:e3:32: 72:88:d9:0c:41:46:c5:fa:63:84:d6:d9:ea:0b:12:fd:13:89: 83:fe:1b:29:cc:ad:09:96:d3:65:43:75:2d:1a:19:06:0b:a9: d2:fb:c8:6f:e4:3a:ec:ec:7f:52:85:2d:45:14:55:01:59:39: 9a:ff:37:33:28:de:3a:0b:91:60:03:d2:43:82:de:ac:58:58: 74:c3:29:d6:ee:52:8c:c6:b7:99:36:5a:0a:30:90:b8:8f:6a: 6b:f5:d3:63:a0:d9:31:08:7b:40:5b:00:85:54:50:d8:17:54: 23:49:d5:0a:96:bf:a6:4f:7a:8e:b6:a4:f6:c7:3d:66:e3:28: ea:2f:64:3b:d8:28:3a:2c:da:a3:c4:07:80:ac:55:38:fd:aa: 43:3c:42:01 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1bT6SWcBylkWpB1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk M2FlMWRjNGYtNDRmOC00NGI0LTg2YzMtMzEzYmNjNjkzNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYpP0f8OwfVqr4d6wCXMX2bosepAQehZ80pb hrEBzhXYcPT2DZTvWX4MXB/RNUvwcGJqRJclKAHEMe8MlJpR7tik6NbPxVwWQOBt L3d2ssRkQgrUmZjCwU/Ch0pzmmsqoDnJ/F/MM9ZERKhecUaplwmL7dfXonrshxzK prWNJuN0tBuxeEh2ys4o3M7uxIQZcWkZ5YZbf0lqYutR2CeF1XQ/sAVxFGhMCiUD rmwtaYmrAAYNHO5RWl9xfWLv4s6ceWiWwzeCY5wilr4mMDpoCyVwN5VKiKd8x28y kG1lmE6dgWG++bzNu+Gti7jWtLSVJNCNgR45aaOSOwdJQugruwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPwbdLjJjN2G7OI8RtP0Ey25X7e+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGI5MDhmNzctNjczOC0z MDkxLWJhMDgtMGUzMmU0ZjBkNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDAB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtIqrdvyQHt0aeQK6jPQRGFoaBiht2amhTacxL4mR2qMafkBTLcXT 9eTX8TdbJ+pLUI+3yvaW9iZN2B5oRoJNyiHKcwImAAo9qK5cRlwwXanvnm2bqN3I DT1v1ZJpgDxa+Mt/rsabpdQCquMycojZDEFGxfpjhNbZ6gsS/ROJg/4bKcytCZbT ZUN1LRoZBgup0vvIb+Q67Ox/UoUtRRRVAVk5mv83MyjeOguRYAPSQ4LerFhYdMMp 1u5SjMa3mTZaCjCQuI9qa/XTY6DZMQh7QFsAhVRQ2BdUI0nVCpa/pk96jrak9sc9 ZuMo6i9kO9goOizao8QHgKxVOP2qQzxCAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:41:26 2026 by rpki-client