$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa File: 3a696e09-7384-38e4-8936-c5171efb8159.roa (raw, json) Hash identifier: BKSCA2gJsf5VJ4H8h48WQgklDhyLGjZErtIp4B50jHE= Subject key identifier: 05:25:1E:ED:2A:01:53:57:64:F0:ED:87:7A:92:6A:81:7B:4C:3E:51 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A0528B91E178A3FD3F30640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 2001:418:1401:12::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:28:b9:1e:17:8a:3f:d3:f3:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=9f13d747-1cc8-47d2-b2f8-66df273cb7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:d1:07:bd:4b:32:b1:6d:c9:68:0d:62:b4: 65:fd:67:b3:07:8d:c4:38:ca:8f:7d:4e:4a:09:d9: 9d:a5:aa:d5:28:86:ac:6a:92:59:f7:a3:3d:b9:b9: f9:ae:64:f3:68:18:4e:57:89:e0:51:20:98:05:f8: 82:27:fb:09:99:aa:7d:26:53:b8:f0:28:24:1b:9d: 82:ae:75:3d:62:85:5f:4b:12:a1:00:3a:ec:bd:63: a9:6d:6b:03:bb:b7:53:d2:6b:a9:b4:5f:42:55:ed: d3:5b:28:08:b8:5a:0d:ff:e8:fb:17:b8:ba:a6:61: 57:48:4e:8b:b8:b5:59:89:8c:d6:e2:06:2b:30:4d: 15:bd:45:21:14:17:3f:1e:03:66:5b:55:e8:2a:15: 08:5f:d7:36:45:5c:47:1d:30:3a:f3:63:cb:5d:b4: 71:2e:a1:15:ad:75:08:f0:7c:75:5a:11:93:23:3b: 1e:21:9e:dc:b6:34:3e:4d:b0:54:47:ab:04:5f:9f: 30:37:77:ac:35:8d:b5:a4:9c:1b:6e:e5:44:1c:1d: 2a:d7:1d:09:4d:1e:eb:49:94:a9:88:8c:cc:b4:32: f8:54:32:80:fc:63:6c:ec:34:2a:70:68:13:84:33: cb:8b:6a:d6:b1:6f:20:68:6c:bd:93:03:79:de:31: 0b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:25:1E:ED:2A:01:53:57:64:F0:ED:87:7A:92:6A:81:7B:4C:3E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3a696e09-7384-38e4-8936-c5171efb8159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:12::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4f:fd:26:53:79:26:17:72:a6:b9:4e:09:ed:9e:2a:5b:ba: c6:a2:5e:cf:f5:85:2d:9e:af:89:69:3e:eb:ad:30:fd:6d:a3: cb:90:45:9e:a1:51:a4:6c:5d:9c:2f:99:88:cf:a3:9d:e7:ea: 03:32:44:83:4a:0b:07:1d:83:e3:87:10:d2:13:98:e7:44:1b: e5:b1:d3:11:eb:b4:34:1a:6f:77:f7:3e:96:cf:56:8a:b9:71: fe:3c:26:19:b9:bb:33:ab:65:9f:37:49:8f:1b:eb:28:45:51: a7:e6:3a:69:5e:06:27:40:77:1f:71:89:7d:6a:57:28:6a:ea: fd:37:6e:bb:f9:b2:24:41:45:77:88:c9:d4:a9:ef:db:ee:43: ae:91:6c:f5:a0:dc:97:f1:4e:51:a0:f9:de:9e:06:86:48:a1: 07:f1:79:93:f9:34:24:d3:80:21:83:07:95:36:83:8f:b4:bb: 3b:21:68:7c:ce:a2:53:75:1b:65:d9:cc:6c:c5:d5:70:cc:51: 9e:47:35:f4:d5:99:94:6e:54:ee:26:35:46:1f:43:a6:a1:27: 40:d1:92:8a:8f:b6:48:45:65:1c:47:1e:a7:6e:57:fc:c6:ac: 0f:9c:47:69:8c:63:16:0c:18:a5:c7:e7:00:12:19:1b:c2:11: 45:bb:c1:21 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE16BSi5HheKP9PzBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OWYxM2Q3NDctMWNjOC00N2QyLWIyZjgtNjZkZjI3M2NiN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPRB71LMrFtyWgNYrRl/WezB43EOMqPfU5K CdmdparVKIasapJZ96M9ubn5rmTzaBhOV4ngUSCYBfiCJ/sJmap9JlO48CgkG52C rnU9YoVfSxKhADrsvWOpbWsDu7dT0muptF9CVe3TWygIuFoN/+j7F7i6pmFXSE6L uLVZiYzW4gYrME0VvUUhFBc/HgNmW1XoKhUIX9c2RVxHHTA682PLXbRxLqEVrXUI 8Hx1WhGTIzseIZ7ctjQ+TbBUR6sEX58wN3esNY21pJwbbuVEHB0q1x0JTR7rSZSp iIzMtDL4VDKA/GNs7DQqcGgThDPLi2rWsW8gaGy9kwN53jELNwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAUlHu0qAVNXZPDth3qSaoF7TD5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2E2OTZlMDktNzM4NC0z OGU0LTg5MzYtYzUxNzFlZmI4MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ABIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAFE/9JlN5JhdyprlOCe2eKlu6xqJez/WFLZ6viWk+660w/W2j y5BFnqFRpGxdnC+ZiM+jnefqAzJEg0oLBx2D44cQ0hOY50Qb5bHTEeu0NBpvd/c+ ls9Wirlx/jwmGbm7M6tlnzdJjxvrKEVRp+Y6aV4GJ0B3H3GJfWpXKGrq/Tduu/my JEFFd4jJ1Knv2+5DrpFs9aDcl/FOUaD53p4GhkihB/F5k/k0JNOAIYMHlTaDj7S7 OyFofM6iU3UbZdnMbMXVcMxRnkc19NWZlG5U7iY1Rh9DpqEnQNGSio+2SEVlHEce p25X/MasD5xHaYxjFgwYpcfnABIZG8IRRbvBIQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:36:20 2026 by rpki-client