$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: P2YjsB8tQJuM8j8JTSq7J0/qQ+MR4bH3RK7l+Ub5LTo= Subject key identifier: 6B:E6:3F:45:3B:C6:64:E7:A7:94:3D:EB:6C:F4:43:08:3F:45:D1:FF Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F4328584D7A052D0B8D3A34311C3EEC00 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2d:0b:8d:3a:34:31:1c:3e:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=df4d47c7-802c-481a-8bc2-acb15416094b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:75:2b:34:bd:67:6b:94:6b:7c:45:3c:6a: 1e:85:a9:92:8c:41:2b:cb:a0:8b:d6:99:80:e7:2c: b2:62:86:6d:77:c8:09:13:98:72:d3:fa:79:af:c0: a0:e8:8b:85:4a:44:94:da:b9:eb:a9:ce:0a:d1:c7: 55:fa:bc:e5:0e:4c:92:27:cc:24:cb:a0:e4:86:8f: ed:da:c3:7e:65:2f:bf:12:24:e8:8a:bd:a2:ca:28: db:a9:57:06:c5:c9:ef:d4:11:cd:4b:7b:9f:5e:d2: 53:e3:84:9a:a5:bb:a0:61:9c:e9:cb:5b:1f:6d:c4: d4:d9:3c:21:9e:90:95:53:cc:31:66:20:3b:3e:99: 60:05:14:73:61:d4:14:3e:76:27:2a:74:5a:b3:8b: 37:ae:a7:a8:f0:ac:cc:1f:32:f9:67:9d:cf:92:8b: 8a:74:bd:36:a2:61:e2:6b:17:da:64:e8:be:0d:f3: fe:89:67:35:84:27:c6:9b:0a:4c:61:8f:3f:a8:09: a4:c7:1e:6e:34:74:bc:dd:e1:52:77:4b:ad:38:1c: 3d:3d:4f:fa:25:3d:e2:59:45:03:b8:f5:f1:ea:1b: 64:5f:c4:ee:ab:bf:51:99:a2:3d:6f:d4:82:62:a2: 59:d3:c6:0d:11:c1:35:16:e3:15:1b:19:93:cd:6e: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E6:3F:45:3B:C6:64:E7:A7:94:3D:EB:6C:F4:43:08:3F:45:D1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ea:5a:46:f0:a9:e8:9d:97:1a:6e:31:cb:dd:b4:41:ef:92: 2a:89:23:9a:d4:4b:e9:1a:bb:6f:d9:a6:b4:2c:ec:f1:80:0f: a0:d9:4c:eb:14:e8:64:77:c9:6a:74:96:7a:06:32:a1:ab:77: 8f:f7:21:58:49:eb:13:35:5e:a3:cb:12:72:80:3c:57:65:4c: 86:39:d7:77:44:e8:a4:54:c8:3b:32:7c:fb:6c:a6:d2:8d:a3: 94:e5:75:56:ef:8b:a4:46:eb:34:0b:6b:d5:54:46:21:87:03: 47:47:ee:2d:02:cf:ce:76:a9:f2:99:a8:5e:15:30:65:3a:06: 34:02:96:d7:69:f0:be:8b:aa:f7:45:da:6f:7b:8e:07:63:64: da:ac:c8:11:fc:22:a8:1d:5d:e1:ea:28:10:dd:7a:61:1b:5e: 1f:31:31:34:7e:b2:93:3d:db:8b:88:2a:ec:d0:f7:6b:be:8d: 7c:15:1c:e2:24:98:2b:6a:3a:61:95:0a:e9:54:42:ec:d7:b5: ff:07:26:5f:cd:9f:ba:ad:c9:02:8c:8f:f0:7b:73:d6:64:49: a9:10:6b:c3:e6:3f:a9:0f:c4:3c:e0:a3:0a:0b:5a:da:17:80: 3c:a9:16:bb:b1:e2:7d:1c:b9:c7:66:50:68:e4:f0:ae:eb:f7: f1:96:35:11 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BS0LjTo0MRw+7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZGY0ZDQ3YzctODAyYy00ODFhLThiYzItYWNiMTU0MTYwOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj51KzS9Z2uUa3xFPGoehamSjEEry6CL1pmA 5yyyYoZtd8gJE5hy0/p5r8Cg6IuFSkSU2rnrqc4K0cdV+rzlDkySJ8wky6Dkho/t 2sN+ZS+/EiToir2iyijbqVcGxcnv1BHNS3ufXtJT44SapbugYZzpy1sfbcTU2Twh npCVU8wxZiA7PplgBRRzYdQUPnYnKnRas4s3rqeo8KzMHzL5Z53PkouKdL02omHi axfaZOi+DfP+iWc1hCfGmwpMYY8/qAmkxx5uNHS83eFSd0utOBw9PU/6JT3iWUUD uPXx6htkX8Tuq79RmaI9b9SCYqJZ08YNEcE1FuMVGxmTzW7AjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGvmP0U7xmTnp5Q962z0Qwg/RdH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBP6lpG8KnonZcabjHL3bRB75IqiSOa1EvpGrtv2aa0LOzxgA+g2Uzr FOhkd8lqdJZ6BjKhq3eP9yFYSesTNV6jyxJygDxXZUyGOdd3ROikVMg7Mnz7bKbS jaOU5XVW74ukRus0C2vVVEYhhwNHR+4tAs/OdqnymaheFTBlOgY0ApbXafC+i6r3 Rdpve44HY2TarMgR/CKoHV3h6igQ3XphG14fMTE0frKTPduLiCrs0Pdrvo18FRzi JJgrajphlQrpVELs17X/ByZfzZ+6rckCjI/we3PWZEmpEGvD5j+pD8Q84KMKC1ra F4A8qRa7seJ9HLnHZlBo5PCu6/fxljUR -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:00 2026 by rpki-client