$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa File: 9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa (raw, json) Hash identifier: 3mGU9mRwnXSG98pvOw8OGtV16PsZHFN7gaP8XkQvNns= Subject key identifier: 9E:B7:62:76:7D:3E:D8:DD:A8:91:17:C4:1C:36:86:75:D8:0E:43:2F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A05284EE16F32094FE5E800 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 2001:418:3801::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:28:4e:e1:6f:32:09:4f:e5:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=d971c90a-40ab-4273-ad15-c5334fa89c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:9b:54:74:dc:12:5a:86:ee:98:7c:75:86: f0:cf:fa:6b:21:c8:27:5a:6b:27:6a:01:41:89:26: d6:74:20:ea:92:1a:6d:3c:41:e0:c4:0f:fb:69:1d: b0:fe:a7:aa:71:29:29:e5:c2:38:33:d4:65:68:25: a4:6c:1a:58:44:4b:fc:34:e6:bc:69:16:0b:51:d8: 38:08:d1:69:40:c1:4d:7e:38:b6:04:8c:28:48:aa: 11:17:21:05:8c:c3:9e:93:fe:4d:b4:cd:d0:56:e1: c9:05:53:c1:78:0e:42:c5:83:11:44:d5:a6:e6:77: da:f9:ae:32:60:7b:b8:d0:f5:69:e8:a3:25:53:1a: c4:24:cf:d4:ee:0e:d1:8e:de:38:d8:03:f6:58:17: 1c:79:1a:63:b6:fe:69:45:73:a8:58:fc:75:63:ed: 0b:9b:7d:e4:1c:24:24:ee:65:59:61:9f:2a:81:f6: d0:82:9e:10:4d:19:0f:da:71:8c:ff:95:c7:89:24: 3e:30:28:5d:62:da:55:66:25:91:04:b7:f7:48:f1: 13:bd:53:f4:73:82:78:2e:e8:1d:79:ff:60:0e:38: 42:b6:76:5d:d1:b3:af:a6:e7:25:91:b5:86:44:04: 78:16:e9:b5:11:07:d2:42:db:85:b8:14:fa:bf:0d: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B7:62:76:7D:3E:D8:DD:A8:91:17:C4:1C:36:86:75:D8:0E:43:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a81db9d-8d34-32d2-b1d2-8295bcd578e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:3801::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ce:4b:4d:ee:59:e6:b0:bd:59:3b:08:4d:cd:71:fe:e6:8d: b3:eb:1c:88:63:0f:4c:92:fa:37:87:b4:5f:85:fe:c8:25:c4: f7:7e:cc:5d:d9:e3:84:e0:13:97:55:69:58:be:f0:87:37:c1: 1a:2a:67:9c:67:6f:aa:2f:c2:6e:5b:c6:36:3f:b2:c2:84:6a: 44:69:3d:84:3f:16:99:40:ee:7d:31:da:56:b6:eb:71:59:6a: da:aa:c9:46:d8:ba:e2:4d:0c:ce:a6:5b:e5:ed:0d:35:ff:d1: c1:f3:22:bf:79:c0:54:00:3e:d8:f9:04:90:e6:5e:17:45:d7: 98:9d:93:80:9b:1f:ae:d2:03:e5:fd:27:bc:a8:50:51:86:59: 85:e9:3d:bb:68:df:0d:25:35:69:54:7a:ff:58:9d:55:66:d2: 98:4c:2f:f2:f0:f9:53:79:8c:26:5e:4b:c4:24:7c:43:8f:64: 92:0b:d9:a9:a5:34:15:b8:3d:01:50:5f:ab:97:a1:8e:dc:1d: e7:32:03:43:82:8f:f9:50:a0:35:09:b8:3b:ff:27:e4:f8:33: f7:21:1b:96:a7:cb:7a:30:61:b7:5c:4f:71:ab:e5:36:2e:42: 2c:90:2c:a1:7f:8c:80:c0:15:ba:0f:6d:86:9d:e8:84:b9:0b: 6b:87:b4:de -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE16BShO4W8yCU/l6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ZDk3MWM5MGEtNDBhYi00MjczLWFkMTUtYzUzMzRmYTg5YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXibVHTcElqG7ph8dYbwz/prIcgnWmsnagFB iSbWdCDqkhptPEHgxA/7aR2w/qeqcSkp5cI4M9RlaCWkbBpYREv8NOa8aRYLUdg4 CNFpQMFNfji2BIwoSKoRFyEFjMOek/5NtM3QVuHJBVPBeA5CxYMRRNWm5nfa+a4y YHu40PVp6KMlUxrEJM/U7g7Rjt442AP2WBcceRpjtv5pRXOoWPx1Y+0Lm33kHCQk 7mVZYZ8qgfbQgp4QTRkP2nGM/5XHiSQ+MChdYtpVZiWRBLf3SPETvVP0c4J4Lugd ef9gDjhCtnZd0bOvpuclkbWGRAR4Fum1EQfSQtuFuBT6vw2l6QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJ63YnZ9PtjdqJEXxBw2hnXYDkMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWE4MWRiOWQtOGQzNC0z MmQyLWIxZDItODI5NWJjZDU3OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGDgB AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAqs5LTe5Z5rC9WTsITc1x/uaNs+sciGMPTJL6N4e0X4X+yCXE 937MXdnjhOATl1VpWL7whzfBGipnnGdvqi/CblvGNj+ywoRqRGk9hD8WmUDufTHa VrbrcVlq2qrJRti64k0MzqZb5e0NNf/RwfMiv3nAVAA+2PkEkOZeF0XXmJ2TgJsf rtID5f0nvKhQUYZZhek9u2jfDSU1aVR6/1idVWbSmEwv8vD5U3mMJl5LxCR8Q49k kgvZqaU0Fbg9AVBfq5ehjtwd5zIDQ4KP+VCgNQm4O/8n5Pgz9yEblqfLejBht1xP cavlNi5CLJAsoX+MgMAVug9thp3ohLkLa4e03g== -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:14 2026 by rpki-client