$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a291b1f-dc62-3bcb-9288-fd56a330e440.roa File: 5a291b1f-dc62-3bcb-9288-fd56a330e440.roa (raw, json) Hash identifier: POpvBWe+taN4H4HyKvNPQHrKl2oxpMK8FVMzipTPsNE= Subject key identifier: C9:52:0E:5E:F2:C1:02:22:E2:23:F2:2B:C5:55:97:97:6B:11:97:14 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F95FFE94381F8D96CC780 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a291b1f-dc62-3bcb-9288-fd56a330e440.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 2605:4300:2d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:95:ff:e9:43:81:f8:d9:6c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=b9c56df7-18f5-43f0-8a29-41a6599ef038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:0a:a3:15:9c:0f:a3:70:77:e6:76:d3:f6: f2:85:35:16:fb:fc:cf:95:ed:55:b8:36:3d:20:0e: 85:d5:25:bb:08:36:96:89:29:8c:a5:99:94:92:08: b8:75:3f:fd:31:f5:31:0b:a9:85:ea:d6:75:ff:67: 29:da:b9:1c:2b:33:da:ec:7e:bb:15:52:32:7d:36: cb:87:94:41:63:80:b8:02:e7:d3:51:fa:1f:2e:8d: e4:be:49:d3:70:46:13:4f:85:55:c2:7d:8b:b9:e8: 59:9f:6d:3a:bc:c3:ed:34:de:40:a8:62:a9:a2:c7: b3:a2:84:fe:6e:98:88:a4:3e:a7:a5:01:5c:7e:8e: 84:c8:26:01:b4:53:b0:85:99:d2:5c:48:17:8f:22: 8e:1e:d8:a5:13:6e:ff:86:68:2d:37:fd:05:06:36: a9:26:49:32:ca:fd:bc:a9:ea:8a:58:e6:45:00:c8: 4c:c4:bb:ef:57:60:39:0b:ab:1d:94:43:7c:07:2e: 1d:9e:21:76:21:02:6e:f1:bc:7f:d1:f1:09:03:62: a3:3c:3f:28:43:03:ac:25:d3:a3:6d:0a:0d:37:89: fc:cb:6e:5e:ef:57:4c:ed:3f:cc:c7:74:c5:a6:b5: 08:75:b9:ea:1a:98:db:9d:58:3a:9b:fe:a8:4e:62: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:0E:5E:F2:C1:02:22:E2:23:F2:2B:C5:55:97:97:6B:11:97:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5a291b1f-dc62-3bcb-9288-fd56a330e440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:19:d5:40:94:60:2b:15:d6:56:b2:38:b3:b9:5f:32:be:6a: 44:b4:9b:67:2f:69:e1:86:84:89:f0:09:5e:bf:98:b9:95:3b: cf:9b:82:13:39:29:f9:ac:8b:92:cd:35:61:af:fd:bc:b7:9e: 04:e6:63:cf:0d:35:32:6c:88:f3:3c:39:c4:16:2c:33:12:85: 97:d9:47:67:a5:3d:c0:b7:52:7a:a4:66:e2:84:21:72:0a:21: 93:3a:23:c1:f7:e9:1a:f0:49:81:2e:16:f5:c5:41:75:49:f9: ae:a4:5c:8e:71:ff:0e:96:c6:55:43:c9:69:84:5a:04:9d:e5: 75:ed:fd:57:ca:ee:13:cb:dd:d7:e7:a3:6b:af:91:db:19:bf: 13:93:35:fd:66:48:36:02:be:bc:61:54:87:0c:c0:92:16:14: 32:74:0b:3a:ff:a9:aa:90:0c:11:95:dd:4c:ed:92:02:27:b4: e4:0f:1a:30:ef:14:59:7b:de:92:90:60:e1:49:73:6a:8d:b1: 48:3d:d4:d0:8d:29:d2:07:5c:9f:f1:03:7f:e6:4e:1e:9c:f6: ac:2f:b5:3d:e4:75:41:f5:0d:38:58:47:7f:6c:42:b9:4d:b5: ab:13:82:45:05:01:37:97:1c:93:82:26:1e:c0:ff:ad:4c:8d: 53:d2:38:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1bT5X/6UOB+Nlsx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk YjljNTZkZjctMThmNS00M2YwLThhMjktNDFhNjU5OWVmMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcoKoxWcD6Nwd+Z20/byhTUW+/zPle1VuDY9 IA6F1SW7CDaWiSmMpZmUkgi4dT/9MfUxC6mF6tZ1/2cp2rkcKzPa7H67FVIyfTbL h5RBY4C4AufTUfofLo3kvknTcEYTT4VVwn2LuehZn206vMPtNN5AqGKposezooT+ bpiIpD6npQFcfo6EyCYBtFOwhZnSXEgXjyKOHtilE27/hmgtN/0FBjapJkkyyv28 qeqKWOZFAMhMxLvvV2A5C6sdlEN8By4dniF2IQJu8bx/0fEJA2KjPD8oQwOsJdOj bQoNN4n8y25e71dM7T/Mx3TFprUIdbnqGpjbnVg6m/6oTmLpKQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMlSDl7ywQIi4iPyK8VVl5drEZcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWEyOTFiMWYtZGM2Mi0z YmNiLTkyODgtZmQ1NmEzMzBlNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDAC0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnRnVQJRgKxXWVrI4s7lfMr5qRLSbZy9p4YaEifAJXr+YuZU7z5uC Ezkp+ayLks01Ya/9vLeeBOZjzw01MmyI8zw5xBYsMxKFl9lHZ6U9wLdSeqRm4oQh cgohkzojwffpGvBJgS4W9cVBdUn5rqRcjnH/DpbGVUPJaYRaBJ3lde39V8ruE8vd 1+eja6+R2xm/E5M1/WZINgK+vGFUhwzAkhYUMnQLOv+pqpAMEZXdTO2SAie05A8a MO8UWXvekpBg4Ulzao2xSD3U0I0p0gdcn/EDf+ZOHpz2rC+1PeR1QfUNOFhHf2xC uU21qxOCRQUBN5cck4ImHsD/rUyNU9I4OA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:16:26 2026 by rpki-client