$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d716c31c-d4b0-3067-b4c2-64ceb1479f93.roa File: d716c31c-d4b0-3067-b4c2-64ceb1479f93.roa (raw, json) Hash identifier: xd84ZeDPY6LgYg7f+2VRLnH1MnbtrAPsDz1hCxVi83Q= Subject key identifier: 45:FE:A3:93:30:0A:83:1C:AC:A6:0B:44:2D:95:93:EC:A1:02:B8:35 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A8CF86782D91372380200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d716c31c-d4b0-3067-b4c2-64ceb1479f93.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 275 IP address blocks: 2001:418:1401:f4::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8c:f8:67:82:d9:13:72:38:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=c31c7294-be8b-460e-ad0d-a63e47091fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:98:0f:15:48:a8:95:51:cb:02:6f:da:5e: 30:64:cb:e7:b5:06:d3:dd:e4:78:f5:2a:63:20:a9: a2:e4:73:58:44:35:a2:af:14:89:22:28:9b:fd:0e: 48:2c:f0:12:1d:86:b7:3c:c9:e2:16:de:3b:76:56: 84:7a:0b:33:cd:a7:d8:d1:8a:3b:09:d9:fa:df:f1: 71:70:25:65:da:0b:ee:a0:ff:0e:a9:7b:13:01:64: 5e:73:d0:7b:7b:0a:39:29:ad:e1:10:41:e1:ff:bf: b6:44:6d:b8:05:e8:dd:05:6d:4c:e6:12:e6:c3:28: 9e:ed:04:21:01:61:00:b7:39:36:af:d8:d5:7a:21: 93:f0:33:67:72:5e:4d:03:7a:7a:42:28:d8:a0:3d: dd:7a:cc:11:27:45:59:91:d6:4a:1c:48:ec:39:af: 04:2b:10:d1:a9:cf:ac:14:eb:8f:03:5d:14:37:b1: ad:7e:ea:b3:cd:05:dc:a3:02:31:76:22:ad:b5:0d: 88:f0:cb:b9:ae:20:97:58:c8:09:a8:cd:9e:f9:aa: a9:a5:0a:a9:26:f7:62:cd:9e:68:69:05:70:57:e9: c5:7c:55:b2:54:99:76:3f:ce:e0:a3:40:a8:06:e6: 67:5a:e8:3c:7d:6d:75:95:e6:3e:24:d9:06:5f:f5: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FE:A3:93:30:0A:83:1C:AC:A6:0B:44:2D:95:93:EC:A1:02:B8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d716c31c-d4b0-3067-b4c2-64ceb1479f93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:f4::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:66:68:cc:d3:69:2d:4d:14:67:eb:eb:b6:9b:ad:91:74:05: 4c:fc:ea:a2:ee:ff:80:e2:2a:09:3c:c3:11:ae:48:ab:c8:51: 78:00:dc:a9:94:95:eb:8c:89:28:f4:e5:8a:de:2f:43:c7:75: fd:39:63:19:67:13:b9:5f:af:b4:95:1d:e2:5e:95:7a:27:e4: c1:39:41:2e:7a:86:29:8b:35:d2:4a:98:1d:a9:0f:88:a6:27: 4b:76:82:cd:69:67:75:e2:0a:32:5d:66:ea:59:e3:f3:7e:cf: 84:50:7c:f4:26:ba:1f:39:32:d5:76:89:a1:09:d9:fd:3a:f6: 22:3e:bd:da:6d:4b:ac:be:a5:6e:b6:cb:f7:a4:01:76:63:32: 0e:a8:55:fa:0e:5c:46:06:ba:7c:46:fd:de:b1:04:8d:70:73: d0:8e:32:c4:99:50:45:e0:76:2d:50:27:3f:1a:dd:76:75:57: b2:76:04:02:79:12:fa:88:c4:f6:52:e6:6c:dd:91:9b:05:a2: 41:8a:0e:75:4e:fc:6e:20:72:b0:6a:54:c2:03:5f:46:65:d2: 62:30:1a:92:32:78:66:c6:a7:16:10:93:e6:83:af:61:09:36: d7:93:88:72:b0:41:e8:df:5c:06:8e:17:dd:ae:95:e4:65:e9: ba:cb:e9:71 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE1/moz4Z4LZE3I4AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YzMxYzcyOTQtYmU4Yi00NjBlLWFkMGQtYTYzZTQ3MDkxZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0eYDxVIqJVRywJv2l4wZMvntQbT3eR49Spj IKmi5HNYRDWirxSJIiib/Q5ILPASHYa3PMniFt47dlaEegszzafY0Yo7Cdn63/Fx cCVl2gvuoP8OqXsTAWRec9B7ewo5Ka3hEEHh/7+2RG24BejdBW1M5hLmwyie7QQh AWEAtzk2r9jVeiGT8DNncl5NA3p6QijYoD3deswRJ0VZkdZKHEjsOa8EKxDRqc+s FOuPA10UN7GtfuqzzQXcowIxdiKttQ2I8Mu5riCXWMgJqM2e+aqppQqpJvdizZ5o aQVwV+nFfFWyVJl2P87go0CoBuZnWug8fW11leY+JNkGX/WgkwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEX+o5MwCoMcrKYLRC2Vk+yhArg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDcxNmMzMWMtZDRiMC0z MDY3LWI0YzItNjRjZWIxNDc5ZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB APQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEArWZozNNpLU0UZ+vrtputkXQFTPzqou7/gOIqCTzDEa5Iq8hR eADcqZSV64yJKPTlit4vQ8d1/TljGWcTuV+vtJUd4l6VeifkwTlBLnqGKYs10kqY HakPiKYnS3aCzWlndeIKMl1m6lnj837PhFB89Ca6Hzky1XaJoQnZ/Tr2Ij692m1L rL6lbrbL96QBdmMyDqhV+g5cRga6fEb93rEEjXBz0I4yxJlQReB2LVAnPxrddnVX snYEAnkS+ojE9lLmbN2RmwWiQYoOdU78biBysGpUwgNfRmXSYjAakjJ4ZsanFhCT 5oOvYQk215OIcrBB6N9cBo4X3a6V5GXpusvpcQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:46 2026 by rpki-client