$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa File: b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa (raw, json) Hash identifier: 6IMiQ9YwGT0yRT/9zd8lSlIaXUCDycaRmYa7YNa812g= Subject key identifier: B2:5E:E3:B3:F0:88:45:1B:C2:D6:F2:83:C9:F1:C0:8A:C2:40:65:25 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F946FD07F64589EE15B70 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 2605:4300:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:94:6f:d0:7f:64:58:9e:e1:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=9a74b9f8-04be-42c1-a321-8b5ec9e83c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:e5:f1:50:22:05:34:0b:cc:1d:11:e3:0e: f8:83:db:15:a3:14:ca:35:7c:f9:01:15:4f:52:bc: 39:b6:22:fa:4b:fe:48:28:7f:23:51:58:ab:ac:c4: a4:4c:03:f6:60:c0:06:96:a1:b3:11:a1:45:54:23: 97:f2:cf:d4:82:7a:b9:27:01:97:09:39:41:3d:ed: 52:bc:77:80:e0:de:78:71:fb:65:3b:9e:94:0c:d7: f7:98:09:47:b5:ec:85:fe:65:5f:53:bf:ef:a2:a1: 8d:b3:61:e7:d5:c7:f0:a0:ff:ab:88:88:5f:d3:f6: bf:a3:ed:ed:3d:2f:8f:15:06:89:a2:82:e9:ac:ea: 26:3f:9b:1b:1a:81:53:00:1f:37:2b:25:cb:d5:b0: 63:13:c6:db:ae:8a:11:3c:d9:00:6d:4f:04:5c:9c: 5a:d5:00:ec:a7:8e:52:37:78:46:4a:85:90:76:79: 2e:9f:03:12:87:71:d5:be:c1:b1:16:96:2c:d7:99: 65:11:cf:0b:c1:ba:18:62:26:92:b8:ea:4b:56:c9: 4a:15:d9:ce:1a:25:81:9b:84:ed:47:78:49:6b:32: 20:0d:ea:ff:26:bf:16:65:79:c0:07:ba:75:17:c1: 5d:b6:11:90:27:c9:6f:ac:94:df:6c:ba:d5:7a:4d: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5E:E3:B3:F0:88:45:1B:C2:D6:F2:83:C9:F1:C0:8A:C2:40:65:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2900::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d3:8e:03:52:0e:6b:70:95:2b:44:4e:36:1c:8a:50:23:22: 27:c4:2a:49:c9:5a:47:63:f0:2e:6c:32:28:69:32:71:6c:60: 9c:2b:93:b3:85:df:2f:c1:9e:4f:2c:0f:ef:56:d3:d0:52:89: 60:05:5e:a8:44:5f:92:23:37:77:f3:aa:5d:10:6d:92:24:dc: 50:b3:2c:3d:7c:f4:4e:c0:11:ac:8a:ca:86:a6:86:9d:eb:63: 38:60:cd:75:95:d5:b6:af:ac:c1:48:d8:21:20:b0:59:8b:c5: f9:c5:03:6c:c3:ca:0c:02:dc:d7:cf:57:39:99:85:39:69:8c: 67:50:34:be:f4:ae:34:7e:96:d4:cc:a3:63:64:24:3e:2c:21: 58:ec:23:8d:79:ea:cf:fa:06:54:e2:c3:08:bc:c0:74:0f:bf: 31:03:0e:47:dd:af:b4:c6:b4:f1:52:b1:09:87:01:57:8f:fd: 3f:93:48:24:94:b2:82:ee:2a:15:07:d6:51:78:9f:c8:20:14: de:06:e8:97:69:8f:9f:c6:8a:d7:65:92:e4:82:57:2b:3d:dd: 91:9c:35:67:52:c9:16:ad:cf:3e:ad:d1:a7:92:df:38:55:c5: 1f:1b:32:38:a6:af:2f:48:39:e8:94:2d:26:47:9c:0b:2c:e3: c2:c9:ab:2e -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1bT5Rv0H9kWJ7hW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk OWE3NGI5ZjgtMDRiZS00MmMxLWEzMjEtOGI1ZWM5ZTgzYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Xl8VAiBTQLzB0R4w74g9sVoxTKNXz5ARVP Urw5tiL6S/5IKH8jUVirrMSkTAP2YMAGlqGzEaFFVCOX8s/Ugnq5JwGXCTlBPe1S vHeA4N54cftlO56UDNf3mAlHteyF/mVfU7/voqGNs2Hn1cfwoP+riIhf0/a/o+3t PS+PFQaJooLprOomP5sbGoFTAB83KyXL1bBjE8bbrooRPNkAbU8EXJxa1QDsp45S N3hGSoWQdnkunwMSh3HVvsGxFpYs15llEc8LwboYYiaSuOpLVslKFdnOGiWBm4Tt R3hJazIgDer/Jr8WZXnAB7p1F8FdthGQJ8lvrJTfbLrVek2nqwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLJe47PwiEUbwtbyg8nxwIrCQGUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjBmYzgxYTktNjljOS0z OTYwLWJhODYtNDhhOGY2MGU0M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDACkw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAddOOA1IOa3CVK0RONhyKUCMiJ8QqSclaR2PwLmwyKGkycWxgnCuT s4XfL8GeTywP71bT0FKJYAVeqERfkiM3d/OqXRBtkiTcULMsPXz0TsARrIrKhqaG netjOGDNdZXVtq+swUjYISCwWYvF+cUDbMPKDALc189XOZmFOWmMZ1A0vvSuNH6W 1MyjY2QkPiwhWOwjjXnqz/oGVOLDCLzAdA+/MQMOR92vtMa08VKxCYcBV4/9P5NI JJSygu4qFQfWUXifyCAU3gbol2mPn8aK12WS5IJXKz3dkZw1Z1LJFq3PPq3Rp5Lf OFXFHxsyOKavL0g56JQtJkecCyzjwsmrLg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:03 2026 by rpki-client