$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa File: c1c9275e-3166-38df-9204-a7da58d008ca.roa (raw, json) Hash identifier: tuTATgIsXLWW5RsXt+c/8KV0vrtL0NlqBKyj845+WH4= Subject key identifier: 5A:19:C8:9D:E4:C5:F8:F3:5C:94:E0:AE:D4:E0:A4:65:91:10:84:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D5E1A7334944AE7154A4B0D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 3939 IP address blocks: 2001:418:1407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:73:34:94:4a:e7:15:4a:4b:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=e862a65f-9680-4a2f-916a-2915701230ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:04:92:e6:67:39:d3:b2:fb:dd:18:3a:fd:b0: d8:48:10:10:df:a2:28:f2:3e:3e:97:c8:04:27:36: 66:4e:b9:fe:f8:07:de:2f:d0:26:28:04:d1:00:6d: 17:36:af:f8:83:ca:1d:90:8f:17:ec:31:46:c5:a1: 79:f2:fa:23:59:79:e9:d1:21:01:00:2e:44:a0:4d: 1f:c2:cd:4e:3c:1d:2a:d9:b5:98:24:bf:47:72:b7: 1b:3a:42:a1:bc:b0:ce:0c:33:67:76:f2:c1:83:9a: d4:3d:be:b1:37:55:2d:b6:23:a0:ca:f2:11:be:dc: 65:46:8d:f1:71:82:fb:2c:23:87:09:ad:32:c6:ee: e7:14:58:90:e7:04:e1:c3:fb:51:e4:6b:b7:9b:b1: 34:cd:a1:0f:70:f9:1e:8e:41:09:78:7e:19:b5:37: 4c:50:22:e2:1d:fb:05:51:63:98:ec:01:58:41:a0: 98:10:fb:17:b9:2b:43:d4:17:19:80:5f:e8:f2:c5: 99:24:8e:cd:16:ab:a1:36:18:1f:dd:0c:a5:c1:bd: 58:92:ac:da:14:91:e9:dc:50:d1:38:3d:a7:69:b2: f9:41:93:b1:8f:a3:04:0e:23:2a:d4:da:d6:64:7f: 2a:d3:ef:a2:0d:ef:3c:5e:7e:b3:73:2f:f6:9e:51: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:19:C8:9D:E4:C5:F8:F3:5C:94:E0:AE:D4:E0:A4:65:91:10:84:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c1c9275e-3166-38df-9204-a7da58d008ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:97:25:43:cb:91:26:c0:da:a9:88:9a:89:d2:89:f0:5f: 8b:b3:26:95:b5:3f:e1:18:7e:5c:51:f9:c6:ee:31:54:9a:1e: 20:c2:ff:95:3f:43:80:ac:c6:0d:b5:c7:b9:bf:3f:9f:01:b4: f5:bb:2c:b5:00:90:01:88:30:8d:da:23:bb:67:4e:3f:9b:e8: 71:2c:f8:68:c6:8d:be:c3:99:8b:f9:65:ec:bd:4e:aa:e1:ff: 71:90:63:fb:4d:ae:8a:f1:9a:98:ec:4b:1c:4a:c9:56:22:f6: 9f:84:b1:e1:41:c5:a3:91:b4:64:2c:be:36:6a:d6:1c:59:15: 6f:c1:76:a0:aa:de:7f:9c:98:65:74:bc:2c:4c:6f:02:dd:c9: 5d:b9:9b:32:f1:fa:05:a0:de:5c:0f:13:26:99:e9:88:10:cf: da:85:c9:0d:68:0c:81:5a:d3:3d:50:e8:5b:2d:9a:86:31:63: a1:75:6a:55:26:d6:7d:e0:77:7d:08:0f:25:ad:35:a3:51:52: a2:c6:30:61:bb:db:56:81:81:85:9d:b2:f9:32:aa:ce:46:6d: d4:7f:e4:e8:c0:4c:d3:43:78:91:b6:3a:71:9e:21:00:0e:48: 65:f8:e2:71:c4:bf:22:d2:50:a5:f3:c8:ca:d6:eb:3f:cd:14: 44:b1:d0:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGnM0lErnFUpLDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZTg2MmE2NWYtOTY4MC00YTJmLTkxNmEtMjkxNTcwMTIzMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgASS5mc507L73Rg6/bDYSBAQ36Io8j4+l8gE JzZmTrn++AfeL9AmKATRAG0XNq/4g8odkI8X7DFGxaF58vojWXnp0SEBAC5EoE0f ws1OPB0q2bWYJL9HcrcbOkKhvLDODDNndvLBg5rUPb6xN1UttiOgyvIRvtxlRo3x cYL7LCOHCa0yxu7nFFiQ5wThw/tR5Gu3m7E0zaEPcPkejkEJeH4ZtTdMUCLiHfsF UWOY7AFYQaCYEPsXuStD1BcZgF/o8sWZJI7NFquhNhgf3Qylwb1YkqzaFJHp3FDR OD2nabL5QZOxj6MEDiMq1NrWZH8q0++iDe88Xn6zcy/2nlFJgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFoZyJ3kxfjzXJTgrtTgpGWREIQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzFjOTI3NWUtMzE2Ni0z OGRmLTkyMDQtYTdkYTU4ZDAwOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAJlyVDy5EmwNqpiJqJ0onwX4uzJpW1P+EYflxR+cbuMVSaHiDC /5U/Q4Csxg21x7m/P58BtPW7LLUAkAGIMI3aI7tnTj+b6HEs+GjGjb7DmYv5Zey9 Tqrh/3GQY/tNrorxmpjsSxxKyVYi9p+EseFBxaORtGQsvjZq1hxZFW/BdqCq3n+c mGV0vCxMbwLdyV25mzLx+gWg3lwPEyaZ6YgQz9qFyQ1oDIFa0z1Q6FstmoYxY6F1 alUm1n3gd30IDyWtNaNRUqLGMGG721aBgYWdsvkyqs5GbdR/5OjATNNDeJG2OnGe IQAOSGX44nHEvyLSUKXzyMrW6z/NFESx0As= -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:54 2026 by rpki-client