$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa File: 21e1f23d-5f1f-317b-8982-26cebe1a6742.roa (raw, json) Hash identifier: MXPP/KCA7QYgbNB7Eqw4Vp4VutnuChvM2HsM+sIJ81E= Subject key identifier: 53:A5:53:67:81:94:57:E5:2E:E4:D3:F1:8C:A3:A5:FF:47:08:ED:12 Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Certificate serial: 010D0C9F4328584D80FFEFAE95B1004BBEFC5200 Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 398065 IP address blocks: 2602:817:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:ef:ae:95:b1:00:4b:be:fc:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=7be95842-1c0c-4789-91d7-2d0e2a72a732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:7b:a2:63:e3:5f:63:d3:34:35:5d:5f:1a: e2:e3:ab:16:1f:05:a6:59:0b:37:24:23:66:90:52: e7:f6:d4:14:dd:f8:f4:f1:f6:be:98:93:8a:c0:94: 14:46:08:09:b7:95:e5:5c:d2:25:7f:e6:d8:f6:86: 61:f2:d6:1f:ca:a8:33:d1:e9:a3:da:92:f8:0f:2e: ea:67:1f:2f:f9:1a:a0:99:f3:10:ba:f0:eb:40:77: ea:8d:6f:06:8e:2c:45:7c:99:9d:f8:1f:72:6d:ff: 03:e1:a6:f2:fe:56:d6:00:e3:b3:f2:7e:a1:e5:ba: b6:f4:31:fa:b7:a9:25:ec:76:d6:02:11:e5:73:82: a1:46:f4:72:fa:1e:3a:69:9c:08:2e:2c:0d:37:e7: 47:3e:76:4d:3d:9c:01:44:80:b6:8e:3e:4d:9b:62: 92:86:4f:3a:b1:4d:2c:20:68:4d:a2:24:31:c0:d0: f0:0d:cb:93:70:c7:33:19:f8:3e:18:da:1c:8a:e3: 0b:fe:19:cc:2e:be:7f:ff:b2:44:2b:3c:6c:3d:f7: da:24:9c:9c:47:ed:38:09:6a:16:d5:67:f2:65:3e: 1a:1e:c7:8b:13:a1:e5:41:e2:60:87:08:b5:00:b8: 5f:ce:97:2c:5a:a7:3b:87:de:48:89:ae:33:87:05: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:53:67:81:94:57:E5:2E:E4:D3:F1:8C:A3:A5:FF:47:08:ED:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/21e1f23d-5f1f-317b-8982-26cebe1a6742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl X509v3 Authority Key Identifier: keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:37:9e:2d:fd:e1:61:bc:d9:9f:a4:33:5d:2c:ed:e0:10:e6: dc:a3:ff:48:36:9b:ba:7a:4b:60:85:6d:12:cd:59:c7:01:55: 36:5c:61:81:42:8b:36:7d:e9:b9:21:03:52:51:cf:a0:a7:e9: 75:c4:3a:8d:55:00:e7:56:10:72:3d:f6:fd:c1:56:86:26:9a: 9a:b3:22:34:9e:2b:7b:6d:8c:4e:74:1d:86:35:bf:9c:b3:8f: dc:c7:e0:d2:0c:ed:36:a7:89:f2:75:bd:bc:20:63:e1:36:b0: bd:06:7f:e3:14:1c:50:c7:3a:02:2c:17:e2:5c:74:7f:90:d4: ff:62:07:05:e6:e2:80:c9:80:bc:96:d6:d2:e6:18:42:e7:e0: 64:a0:98:c6:99:b9:75:b5:9d:68:f7:d8:cc:4f:59:f5:d6:53: 4b:55:d9:3e:40:b8:a9:90:a1:63:2e:c3:59:46:e7:6f:cb:f4: b4:c5:01:e3:71:78:01:20:9c:a6:a6:7f:11:44:11:e1:55:1e: fb:2f:50:0b:83:f4:0a:29:a4:9b:a9:4c:f5:e1:a9:66:2b:4f: 64:c8:92:93:59:32:be:94:ea:61:db:f3:0a:59:dc:01:54:ec: 1a:5d:b7:4c:7c:2d:0f:d0:bf:0d:52:f2:47:14:c1:5f:6c:dc: fc:7e:c8:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/++ulbEAS778UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY1MjE3NTktYjg4MC00YTdkLWJlOGItM2NlNzBlNGFi YTgzMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk N2JlOTU4NDItMWMwYy00Nzg5LTkxZDctMmQwZTJhNzJhNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJ7omPjX2PTNDVdXxri46sWHwWmWQs3JCNm kFLn9tQU3fj08fa+mJOKwJQURggJt5XlXNIlf+bY9oZh8tYfyqgz0emj2pL4Dy7q Zx8v+RqgmfMQuvDrQHfqjW8GjixFfJmd+B9ybf8D4aby/lbWAOOz8n6h5bq29DH6 t6kl7HbWAhHlc4KhRvRy+h46aZwILiwNN+dHPnZNPZwBRIC2jj5Nm2KShk86sU0s IGhNoiQxwNDwDcuTcMczGfg+GNociuML/hnMLr5//7JEKzxsPffaJJycR+04CWoW 1WfyZT4aHseLE6HlQeJghwi1ALhfzpcsWqc7h95Iia4zhwXcvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOlU2eBlFflLuTT8Yyjpf9HCO0SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUy MTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3MGU0YWJhODMvMjFlMWYyM2QtNWYxZi0z MTdiLTg5ODItMjZjZWJlMWE2NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGY1MjE3NTktYjg4MC00YTdkLWJl OGItM2NlNzBlNGFiYTgzLzBmNTIxNzU5LWI4ODAtNGE3ZC1iZThiLTNjZTcwZTRh YmE4My5jcmwwHwYDVR0jBBgwFoAUB8KLUXEBd4+x1cBmbyFq1ySw5VQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wZjUyMTc1OS1iODgwLTRhN2QtYmU4Yi0zY2U3 MGU0YWJhODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFzAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKM3ni394WG82Z+kM10s7eAQ5tyj/0g2m7p6S2CFbRLNWccBVTZc YYFCizZ96bkhA1JRz6Cn6XXEOo1VAOdWEHI99v3BVoYmmpqzIjSeK3ttjE50HYY1 v5yzj9zH4NIM7TanifJ1vbwgY+E2sL0Gf+MUHFDHOgIsF+JcdH+Q1P9iBwXm4oDJ gLyW1tLmGELn4GSgmMaZuXW1nWj32MxPWfXWU0tV2T5AuKmQoWMuw1lG52/L9LTF AeNxeAEgnKamfxFEEeFVHvsvUAuD9AoppJupTPXhqWYrT2TIkpNZMr6U6mHb8wpZ 3AFU7Bpdt0x8LQ/Qvw1S8kcUwV9s3Px+yKI= -----END CERTIFICATE-----Generated at Fri Apr 17 15:53:39 2026 by rpki-client