$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa File: 3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa (raw, json) Hash identifier: XOYCEmZogZVnNKw0a3BJTRhMnea/RcSYqqoA1qgxqaI= Subject key identifier: 2C:95:F2:0D:B3:92:04:FF:3A:21:1F:2D:7B:F0:76:1A:A5:97:F6:E9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8AE9EB24739ABF812560 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 2001:418:1401:25::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8a:e9:eb:24:73:9a:bf:81:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=3c272116-9af9-4675-8d12-b3fbfd2f167b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:ad:69:d6:a1:66:22:c2:61:11:60:28:35: b3:b4:bf:6a:66:b9:db:91:89:9a:9e:b6:d1:69:c7: 5c:91:cb:c0:13:e0:dc:56:cd:75:1c:d4:65:4b:5a: 5e:59:c8:87:76:e0:d0:fa:8b:9f:0d:b2:cf:35:f4: 05:de:fe:4b:08:0f:d1:c7:c2:fa:41:19:0f:64:53: 24:4a:86:ee:d7:4f:a5:2a:84:ac:0b:19:3e:4d:f5: 02:0c:bc:82:0e:7e:1d:be:85:93:e1:58:ef:55:50: f3:60:d8:11:b7:48:b1:f6:db:bb:ec:f0:ce:46:46: 18:82:3f:92:fc:dd:bb:e1:d9:b9:90:11:01:8a:27: bb:f5:70:bd:e7:52:04:eb:8f:b2:0f:a1:21:40:c7: b8:05:dd:a9:29:09:78:fe:31:12:2f:7f:63:10:79: d8:3a:48:9d:70:3f:22:86:8f:ef:cb:15:9c:39:8c: de:09:99:0c:3b:ae:81:60:7f:60:64:94:0c:1c:e2: ca:2a:8b:36:1a:c1:f5:ba:96:76:c1:e6:09:cd:f5: 46:cc:31:9a:3f:51:e4:06:a6:da:b4:e1:9e:61:35: d7:48:42:2d:3d:98:07:1a:58:ad:8d:c6:1d:5b:aa: b5:20:a4:09:a4:2d:cc:80:b3:d6:f5:2a:18:be:9c: 12:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:95:F2:0D:B3:92:04:FF:3A:21:1F:2D:7B:F0:76:1A:A5:97:F6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e53b78e-2ab8-3b67-b6b3-698393a631a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:25::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:11:f4:bf:1c:04:28:7a:e4:40:d8:c9:16:bf:68:52:a5:c0: d6:34:a0:f1:07:9d:3d:12:67:0a:81:d9:fb:70:b7:d7:21:61: 13:40:b1:8a:8c:77:19:92:36:d8:72:51:9d:d4:ad:f0:b0:cf: 58:65:66:57:e9:4d:bc:15:a2:95:21:9f:7b:7f:a3:fc:81:51: c5:05:4c:ef:54:81:b2:ec:9b:e1:53:51:c8:de:9b:a0:01:88: 7b:15:6d:80:1a:84:90:aa:a9:99:2b:f1:04:e7:0e:51:b1:aa: 75:36:76:b3:0a:29:f2:12:03:94:52:94:48:17:7d:cb:71:36: d5:40:7a:53:1c:1b:7a:d2:f7:b3:f0:23:91:13:46:f5:be:c9: ba:ee:2f:a7:61:01:94:75:d0:20:d6:96:41:07:3a:9d:37:2b: 5e:18:4a:5b:46:18:0b:36:a6:a2:3e:dd:15:fa:79:e8:6a:af: c7:06:73:08:ed:11:be:ba:2a:c5:e5:eb:c9:55:25:3a:d8:04: aa:c6:21:df:a1:10:5e:6a:23:fb:ef:f8:9c:64:33:af:97:d3: 27:a9:ad:a9:3e:3d:d2:f1:35:c4:b3:63:34:d7:15:d0:19:4f: 36:02:4e:2b:e0:39:0a:51:4d:86:80:dc:28:e7:14:f7:9f:06: be:b8:4f:06 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE17aorp6yRzmr+BJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk M2MyNzIxMTYtOWFmOS00Njc1LThkMTItYjNmYmZkMmYxNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNytadahZiLCYRFgKDWztL9qZrnbkYmanrbR acdckcvAE+DcVs11HNRlS1peWciHduDQ+oufDbLPNfQF3v5LCA/Rx8L6QRkPZFMk Sobu10+lKoSsCxk+TfUCDLyCDn4dvoWT4VjvVVDzYNgRt0ix9tu77PDORkYYgj+S /N274dm5kBEBiie79XC951IE64+yD6EhQMe4Bd2pKQl4/jESL39jEHnYOkidcD8i ho/vyxWcOYzeCZkMO66BYH9gZJQMHOLKKos2GsH1upZ2weYJzfVGzDGaP1HkBqba tOGeYTXXSEItPZgHGlitjcYdW6q1IKQJpC3MgLPW9SoYvpwSKQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCyV8g2zkgT/OiEfLXvwdhqll/bpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2U1M2I3OGUtMmFiOC0z YjY3LWI2YjMtNjk4MzkzYTYzMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWRH0vxwEKHrkQNjJFr9oUqXA1jSg8QedPRJnCoHZ+3C31yFh E0Cxiox3GZI22HJRndSt8LDPWGVmV+lNvBWilSGfe3+j/IFRxQVM71SBsuyb4VNR yN6boAGIexVtgBqEkKqpmSvxBOcOUbGqdTZ2swop8hIDlFKUSBd9y3E21UB6Uxwb etL3s/AjkRNG9b7Juu4vp2EBlHXQINaWQQc6nTcrXhhKW0YYCzamoj7dFfp56Gqv xwZzCO0RvroqxeXryVUlOtgEqsYh36EQXmoj++/4nGQzr5fTJ6mtqT490vE1xLNj NNcV0BlPNgJOK+A5ClFNhoDcKOcU958GvrhPBg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:21:08 2026 by rpki-client