$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa File: aff36023-01d7-3371-9cba-b3d40a4f342c.roa (raw, json) Hash identifier: UgZnUxX7Q+AMRqXja+nC4ikCzvk6wZPI90YiR74nKSs= Subject key identifier: 0F:07:28:96:08:FB:F2:47:2B:F6:7F:2C:5A:3C:22:7C:6F:8A:F0:7A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7B6A8B92869E4EF32ABF0A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 2001:418:1401:71::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8b:92:86:9e:4e:f3:2a:bf:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=e05c4a03-a8c8-4423-b051-79fc767a5cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:ed:e6:92:0f:0d:53:83:7c:b4:15:91:b7: 22:12:d1:94:23:c2:e3:b5:b4:28:ed:4b:2f:b9:41: 46:e1:71:0c:f9:01:88:43:e8:05:f1:7e:ef:45:66: d7:2b:cf:af:2b:e1:9a:8e:90:4b:bf:9a:e7:6a:bd: 0d:ed:76:1f:c4:18:a3:67:d1:be:7f:12:ae:b0:e0: 49:b2:30:6c:83:e7:e5:f8:ce:86:b5:f7:fc:d3:0d: cd:da:20:86:bf:09:2b:94:59:25:e3:e2:4e:58:97: a4:ed:5b:e3:13:27:8f:f2:20:15:8a:6e:8f:43:84: 9d:ee:a9:32:e2:95:7b:86:15:15:ca:7a:18:38:40: 2e:d4:a6:76:ef:44:57:2b:d4:b6:29:74:1d:6d:40: 3f:9b:af:b5:d7:c3:d3:ea:55:69:f1:2f:7b:6e:cf: 3f:2d:17:c4:62:cd:27:9d:68:58:29:82:9c:dc:d5: b6:76:c4:64:9a:5b:c1:cd:b7:f1:60:fd:0b:f7:6d: 73:42:38:87:13:6d:25:ea:8a:6a:6a:2b:f4:46:1d: 68:20:05:62:92:0b:0f:ee:3d:f2:c5:f7:88:2f:b8: 0a:11:b9:a1:b1:1d:18:df:05:33:67:50:3a:99:91: 40:8e:0e:2e:66:9c:aa:f8:57:0b:41:aa:cc:96:1e: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:28:96:08:FB:F2:47:2B:F6:7F:2C:5A:3C:22:7C:6F:8A:F0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:71::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bb:69:7a:ae:b0:d0:97:c2:cb:f4:92:ea:41:8c:ea:5c:14: fa:84:54:02:f3:7a:f0:a2:84:77:32:46:52:89:8f:1a:e9:8c: d6:3e:6e:1b:45:1a:84:8d:0e:66:59:12:9f:2e:5f:0b:88:4d: 67:94:d7:4c:ff:3a:9a:47:df:c5:3b:bb:28:09:9b:8e:f8:b7: 6d:22:62:e9:c6:cc:f0:2b:9f:19:55:b9:d5:1a:85:02:e4:c0: ad:95:e8:38:8e:79:90:cd:21:f8:2f:dd:1a:4c:cb:43:f5:a1: 1b:7a:d6:bf:70:83:36:68:8f:a0:f2:19:a4:2a:77:69:d0:ea: c0:54:f6:2a:2d:79:20:40:18:b4:36:4a:fa:21:5c:4f:55:e1: c8:ff:fa:26:76:9a:2f:ab:89:e5:ef:a1:c2:bc:fd:96:bd:99: 4d:41:9c:b1:3b:1c:4c:9d:0a:f6:39:62:5f:40:a1:17:4f:1e: aa:c7:ea:7d:43:64:4b:5c:0f:d1:ad:ee:9d:10:2c:d1:39:9b: a2:77:42:98:f4:40:ae:0c:36:f3:22:b4:7b:ea:d9:f1:b3:5d: 30:88:44:0d:1f:79:03:1a:65:ca:f7:12:55:1c:93:e2:b5:1a: 46:e3:f3:09:04:0e:15:ae:32:4e:2b:df:9d:98:84:7f:1b:3c: 9d:54:75:3a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE17aouShp5O8yq/CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTA1YzRhMDMtYThjOC00NDIzLWIwNTEtNzlmYzc2N2E1Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ7t5pIPDVODfLQVkbciEtGUI8LjtbQo7Usv uUFG4XEM+QGIQ+gF8X7vRWbXK8+vK+GajpBLv5rnar0N7XYfxBijZ9G+fxKusOBJ sjBsg+fl+M6Gtff80w3N2iCGvwkrlFkl4+JOWJek7VvjEyeP8iAVim6PQ4Sd7qky 4pV7hhUVynoYOEAu1KZ270RXK9S2KXQdbUA/m6+118PT6lVp8S97bs8/LRfEYs0n nWhYKYKc3NW2dsRkmlvBzbfxYP0L921zQjiHE20l6opqaiv0Rh1oIAVikgsP7j3y xfeIL7gKEbmhsR0Y3wUzZ1A6mZFAjg4uZpyq+FcLQarMlh7/RQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFA8HKJYI+/JHK/Z/LFo8InxvivB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWZmMzYwMjMtMDFkNy0z MzcxLTljYmEtYjNkNDBhNGYzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AHEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAl7tpeq6w0JfCy/SS6kGM6lwU+oRUAvN68KKEdzJGUomPGumM 1j5uG0UahI0OZlkSny5fC4hNZ5TXTP86mkffxTu7KAmbjvi3bSJi6cbM8CufGVW5 1RqFAuTArZXoOI55kM0h+C/dGkzLQ/WhG3rWv3CDNmiPoPIZpCp3adDqwFT2Ki15 IEAYtDZK+iFcT1XhyP/6JnaaL6uJ5e+hwrz9lr2ZTUGcsTscTJ0K9jliX0ChF08e qsfqfUNkS1wP0a3unRAs0TmbondCmPRArgw28yK0e+rZ8bNdMIhEDR95AxplyvcS VRyT4rUaRuPzCQQOFa4yTivfnZiEfxs8nVR1Og== -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:27 2026 by rpki-client