$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa File: 3b035878-f1ae-3036-94e4-2a11a6346da4.roa (raw, json) Hash identifier: n3QWI0wCejBS8yFjv0YbntuqP4piqvQmMbfSlgTufXo= Subject key identifier: 60:E8:C6:F2:5F:E7:C3:B3:FF:EC:CE:68:BC:7D:8F:64:44:6C:CF:09 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A8B1102FC58F436D1F5CC Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 2001:418:1401:7d::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8b:11:02:fc:58:f4:36:d1:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=18618be8-6172-4e9f-bc82-fd26ec034b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:dc:14:7c:aa:56:6e:13:38:ff:61:f1:43: ee:0a:67:e6:cb:e6:42:dd:1f:bd:1c:d5:72:66:7c: 4c:0d:b1:c1:fc:49:51:21:63:c2:60:7b:04:53:64: 35:40:bc:44:7a:14:ed:d0:20:b5:56:bb:42:ad:ed: 6d:d1:78:a5:70:77:13:c3:a4:ee:73:88:16:84:e2: 4d:f6:06:79:32:32:80:08:68:38:27:cc:f5:82:0c: 3a:a7:2d:72:71:d0:a8:4a:6f:b4:e1:44:df:e5:64: ae:55:59:a6:1b:38:b5:1c:99:0a:30:e9:9e:87:4c: 76:bc:e4:40:53:0b:51:0b:55:b4:01:c2:67:b0:6b: ea:87:f5:f4:a1:43:c5:2b:bd:3a:1d:a6:b7:c8:d2: 68:d9:66:76:3d:8a:92:04:93:90:d5:c6:2b:75:e3: 66:cf:5d:1a:b0:07:35:72:d4:8d:1a:14:9b:55:18: f1:70:af:6c:29:0d:d2:d7:4b:d4:6e:e9:ad:bc:98: b5:d2:b1:10:17:f7:32:fc:d2:59:1b:fe:90:40:d3: 34:a8:8b:76:b4:50:ce:26:89:7c:f8:61:aa:6f:2b: 54:c3:d3:8a:2d:bb:2e:26:e7:d1:44:40:ce:b0:70: 85:ba:04:90:19:66:f6:16:7e:7f:b1:6d:2d:84:0d: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E8:C6:F2:5F:E7:C3:B3:FF:EC:CE:68:BC:7D:8F:64:44:6C:CF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3b035878-f1ae-3036-94e4-2a11a6346da4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:7d::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:85:29:db:3c:77:76:a1:e2:36:ad:46:c6:ea:cb:0a:8e:9e: e3:0b:e4:96:61:f1:1c:ad:89:ce:89:16:c6:67:7d:39:3c:b5: 1a:23:17:1a:d4:9e:3f:ea:7d:a7:57:ff:0d:95:cd:2c:4d:21: 86:74:94:7a:2c:77:ca:5e:f9:ea:ed:4d:1b:c5:e5:44:ae:9d: 26:46:70:67:64:c3:61:bd:1a:c2:3a:50:60:c5:04:e7:66:4f: 62:46:a4:2f:ef:ce:6f:c5:73:8b:a7:5d:7d:0f:e5:50:70:e2: f7:4f:da:84:f1:1b:ba:b9:27:f9:f5:aa:4a:ac:37:7e:70:a6: e4:ae:18:11:ff:2b:40:02:ad:08:24:21:17:e3:d5:be:db:6d: f7:da:fa:b5:69:7d:33:1d:a3:79:ff:9a:43:c2:75:7d:c5:98: 9b:74:0a:1f:e8:77:55:bf:9e:72:19:11:5c:73:75:c7:f5:ac: 54:d9:87:c1:fd:66:be:24:69:fe:1e:f1:cb:a9:ec:44:c8:4a: 80:7b:1a:12:1e:9a:45:c2:64:21:4c:2a:7f:6d:04:e9:e0:b1: 02:e6:50:1e:d2:32:b1:bd:33:b1:c0:69:42:38:cb:22:5c:cb: 7d:80:d3:79:ae:56:d8:1a:a6:e9:52:7f:0d:33:1d:1e:8b:e5: 08:7a:d9:bf -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE1/mosRAvxY9DbR9cwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MTg2MThiZTgtNjE3Mi00ZTlmLWJjODItZmQyNmVjMDM0YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIjcFHyqVm4TOP9h8UPuCmfmy+ZC3R+9HNVy ZnxMDbHB/ElRIWPCYHsEU2Q1QLxEehTt0CC1VrtCre1t0XilcHcTw6Tuc4gWhOJN 9gZ5MjKACGg4J8z1ggw6py1ycdCoSm+04UTf5WSuVVmmGzi1HJkKMOmeh0x2vORA UwtRC1W0AcJnsGvqh/X0oUPFK706Haa3yNJo2WZ2PYqSBJOQ1cYrdeNmz10asAc1 ctSNGhSbVRjxcK9sKQ3S10vUbumtvJi10rEQF/cy/NJZG/6QQNM0qIt2tFDOJol8 +GGqbytUw9OKLbsuJufRREDOsHCFugSQGWb2Fn5/sW0thA1KfQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFGDoxvJf58Oz/+zOaLx9j2REbM8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2IwMzU4NzgtZjFhZS0z MDM2LTk0ZTQtMmExMWE2MzQ2ZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AH0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAfYUp2zx3dqHiNq1GxurLCo6e4wvklmHxHK2JzokWxmd9OTy1 GiMXGtSeP+p9p1f/DZXNLE0hhnSUeix3yl756u1NG8XlRK6dJkZwZ2TDYb0awjpQ YMUE52ZPYkakL+/Ob8Vzi6ddfQ/lUHDi90/ahPEburkn+fWqSqw3fnCm5K4YEf8r QAKtCCQhF+PVvttt99r6tWl9Mx2jef+aQ8J1fcWYm3QKH+h3Vb+echkRXHN1x/Ws VNmHwf1mviRp/h7xy6nsRMhKgHsaEh6aRcJkIUwqf20E6eCxAuZQHtIysb0zscBp QjjLIlzLfYDTea5W2Bqm6VJ/DTMdHovlCHrZvw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:15 2026 by rpki-client