$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa File: 4bf5f122-1142-3348-bba1-25509bd0c542.roa (raw, json) Hash identifier: KG8hkE28rAFgJ6ECnBNbQTKeGYaqNOaeGPP7vOZRmZ0= Subject key identifier: 1A:D7:0F:1F:27:04:2F:71:31:7C:DA:2D:B1:D8:18:10:5B:B1:2C:76 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8BA604639E5E05F1B640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 2001:418:4001:2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8b:a6:04:63:9e:5e:05:f1:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=52664db3-f36a-488c-8b4a-e3da2ebdd4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fe:9c:d8:6b:4e:03:c7:b6:8f:9e:11:af:3d: b3:c1:e5:58:37:69:d4:47:ff:7e:ee:91:06:6b:f3: 3a:82:08:1f:78:64:46:cc:49:45:9b:23:79:80:a5: 1d:02:d0:f3:fe:f5:c2:7a:20:9c:fe:bd:14:d2:63: 13:45:ab:b4:84:24:73:87:85:a2:6e:2a:12:49:5f: 4a:46:33:69:59:22:45:be:a4:f8:9f:25:62:42:f6: 3b:9b:36:19:ba:53:1e:e5:be:ed:a4:45:46:b0:11: 20:23:8e:84:b3:4c:42:f2:a0:7a:1d:c6:93:dc:41: ce:e3:1d:74:6c:8c:d5:9e:c3:67:7b:e6:6f:29:52: 55:28:0e:5f:e2:a2:25:c0:43:48:04:3d:a4:ad:a3: 08:e6:4e:f3:1d:31:24:d2:27:70:96:95:e3:9a:0a: 80:49:ca:b3:61:c8:2e:a3:6c:0e:63:99:06:a9:a4: 85:c3:a1:89:4e:7a:01:68:c9:16:1b:80:97:64:62: c7:82:c9:70:2a:ab:15:fa:14:d8:f6:13:b7:22:f1: 16:3a:74:ac:af:70:58:ad:54:ba:92:68:e7:7f:b4: a7:61:c5:f2:89:b6:05:e0:a1:a1:bb:30:d1:16:4f: 3b:27:8a:17:42:be:bc:cb:63:0b:29:71:11:9e:fd: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D7:0F:1F:27:04:2F:71:31:7C:DA:2D:B1:D8:18:10:5B:B1:2C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4bf5f122-1142-3348-bba1-25509bd0c542.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:4001:2::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:62:5b:30:f7:ea:68:03:44:9f:c4:2f:a0:a6:fb:55:83:46: 98:f1:39:9f:b8:a1:54:df:08:dc:9c:b4:fa:66:0e:42:bd:b6: ac:e7:73:b5:c5:40:1a:d5:09:12:bc:99:d6:e9:99:50:4a:1d: 63:65:0a:5d:d2:a4:41:7d:7f:d6:f7:2b:43:be:48:eb:e8:48: 61:ae:f0:5c:4b:97:29:f2:24:a8:c6:fd:c6:b3:09:e9:d5:38: 15:20:3b:28:85:e3:81:03:ff:12:27:16:ee:03:d0:40:a3:ca: a6:19:00:14:5c:5c:40:42:cb:c3:9c:93:64:47:b6:a3:a2:36: 91:85:85:4b:27:47:3e:dd:de:95:63:a8:64:a4:51:77:31:05: af:07:42:ef:b1:0d:8a:4b:69:5f:1a:6a:84:6d:7b:0c:53:53: 1e:2b:1b:4b:c1:85:29:80:d6:d5:d3:09:52:aa:be:c0:56:6a: ad:38:ad:0d:96:48:20:0a:d2:59:34:bf:34:88:ce:fa:bb:bc: 52:63:93:5a:b5:a1:db:fb:3a:ed:73:d5:d2:75:16:15:9a:12: 0e:c3:8d:88:c4:83:05:02:b8:7b:ae:0d:de:72:1b:28:04:43: 37:d3:72:42:44:44:3d:cd:cb:78:8d:ac:1d:e1:0c:6b:b3:fc: e5:fe:89:20 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE17aoumBGOeXgXxtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NTI2NjRkYjMtZjM2YS00ODhjLThiNGEtZTNkYTJlYmRkNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf6c2GtOA8e2j54Rrz2zweVYN2nUR/9+7pEG a/M6gggfeGRGzElFmyN5gKUdAtDz/vXCeiCc/r0U0mMTRau0hCRzh4WibioSSV9K RjNpWSJFvqT4nyViQvY7mzYZulMe5b7tpEVGsBEgI46Es0xC8qB6HcaT3EHO4x10 bIzVnsNne+ZvKVJVKA5f4qIlwENIBD2kraMI5k7zHTEk0idwlpXjmgqAScqzYcgu o2wOY5kGqaSFw6GJTnoBaMkWG4CXZGLHgslwKqsV+hTY9hO3IvEWOnSsr3BYrVS6 kmjnf7SnYcXyibYF4KGhuzDRFk87J4oXQr68y2MLKXERnv2fIQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBrXDx8nBC9xMXzaLbHYGBBbsSx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGJmNWYxMjItMTE0Mi0z MzQ4LWJiYTEtMjU1MDliZDBjNTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGEAB AAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAVGJbMPfqaANEn8QvoKb7VYNGmPE5n7ihVN8I3Jy0+mYOQr22 rOdztcVAGtUJEryZ1umZUEodY2UKXdKkQX1/1vcrQ75I6+hIYa7wXEuXKfIkqMb9 xrMJ6dU4FSA7KIXjgQP/EicW7gPQQKPKphkAFFxcQELLw5yTZEe2o6I2kYWFSydH Pt3elWOoZKRRdzEFrwdC77ENiktpXxpqhG17DFNTHisbS8GFKYDW1dMJUqq+wFZq rTitDZZIIArSWTS/NIjO+ru8UmOTWrWh2/s67XPV0nUWFZoSDsONiMSDBQK4e64N 3nIbKARDN9NyQkREPc3LeI2sHeEMa7P85f6JIA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:26:52 2026 by rpki-client