$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa File: 2245f89a-e298-3cf0-ad95-ae8459f6b003.roa (raw, json) Hash identifier: lyRdkSRGETX9WAN0BCdrkt6v8Fb+MDCpgO+B4YSGv1A= Subject key identifier: 4F:86:13:B2:F5:F3:64:DF:60:9C:65:13:F9:4C:09:0C:0E:D9:B6:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A053BE808A1E2E41235D300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 2606:4700:3031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3b:e8:08:a1:e2:e4:12:35:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=87f8bf6c-a162-4c83-878c-09692b4d1539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:57:bd:fc:d8:cf:d0:e8:e3:ef:80:d9:0f: a6:00:a6:09:43:0a:a7:8d:7d:3e:ea:f6:c4:e2:12: 07:8d:e4:99:02:43:29:df:07:7e:02:43:34:8a:e5: 99:5e:93:db:10:f7:9a:aa:60:e6:fa:73:c5:cc:83: ea:f9:56:62:c2:71:6e:b5:e6:6e:94:bb:f6:dc:84: 23:bf:62:4c:05:e7:bb:88:ee:67:9a:27:f7:63:bf: 0b:d9:09:09:3f:71:47:47:2c:ee:93:74:7a:18:2c: 21:13:77:23:31:b4:3e:a5:d9:c7:5e:2b:cf:45:03: ce:d0:28:16:05:f8:05:79:dd:c1:e1:d8:88:18:03: 13:09:d4:89:f1:1e:3c:e6:e0:98:e0:cb:3e:9d:1f: c5:20:33:35:42:23:59:27:31:a8:ca:37:29:6b:f1: 78:f2:74:01:91:ba:44:cd:70:54:d7:70:82:c3:a1: 61:a2:2e:e0:4d:d3:c0:74:b6:07:9d:4a:e0:38:8c: fe:cf:0e:58:c2:78:90:ba:3f:eb:e6:f6:16:51:00: 51:c9:bb:db:e2:34:4e:2b:b0:8b:4b:40:4e:1f:14: de:25:9f:46:6a:86:3f:da:91:bc:be:bf:e8:df:d6: 8b:1e:22:4e:ac:90:4d:d8:03:a6:ac:cc:3c:48:e3: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:86:13:B2:F5:F3:64:DF:60:9C:65:13:F9:4C:09:0C:0E:D9:B6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2245f89a-e298-3cf0-ad95-ae8459f6b003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3031::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:94:c7:88:5d:79:dd:5b:64:05:a2:65:db:65:16:ca:14:8c: 8f:42:33:b0:00:0e:02:2c:69:6d:9d:f9:fd:5c:d3:f7:70:4f: 4a:ad:dd:ed:12:bf:05:15:e1:c7:20:f7:00:a6:5a:58:8f:f9: 2e:a6:d3:38:10:47:ba:92:7c:3e:bf:65:dc:96:4f:77:2a:4d: f1:c4:68:2f:f0:e4:fc:a0:46:84:e9:be:22:f6:a0:2d:8d:51: af:88:7f:42:84:2c:b4:15:e7:11:e1:6c:2a:33:b9:d4:5e:0c: e1:6a:8d:cb:0f:3c:5b:25:b0:17:c8:fb:73:d5:8f:1a:85:66: 49:5b:ef:13:61:c8:b7:7c:df:2a:16:4f:a3:3e:1d:a5:8a:95: c0:3e:3a:93:63:82:50:94:b3:1e:24:9d:52:6a:51:72:dc:0f: 92:97:fb:f8:7f:26:93:46:ee:9a:af:44:b5:92:2a:05:c3:85: 0f:27:6a:7b:e0:92:b3:06:58:77:7e:75:a8:d8:d8:fa:fe:78: f3:66:26:67:7e:18:85:8e:e0:78:77:a5:2a:23:be:eb:a4:a3: 23:f1:cf:83:f7:24:48:2c:a1:c0:89:4b:63:4a:56:88:3b:3a: b3:07:d9:08:4e:0f:9c:95:ea:7c:17:80:c2:34:42:19:bb:53: a9:a0:2b:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BTvoCKHi5BI10wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODdmOGJmNmMtYTE2Mi00YzgzLTg3OGMtMDk2OTJiNGQxNTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VJXvfzYz9Do4++A2Q+mAKYJQwqnjX0+6vbE 4hIHjeSZAkMp3wd+AkM0iuWZXpPbEPeaqmDm+nPFzIPq+VZiwnFuteZulLv23IQj v2JMBee7iO5nmif3Y78L2QkJP3FHRyzuk3R6GCwhE3cjMbQ+pdnHXivPRQPO0CgW BfgFed3B4diIGAMTCdSJ8R485uCY4Ms+nR/FIDM1QiNZJzGoyjcpa/F48nQBkbpE zXBU13CCw6Fhoi7gTdPAdLYHnUrgOIz+zw5YwniQuj/r5vYWUQBRybvb4jROK7CL S0BOHxTeJZ9GaoY/2pG8vr/o39aLHiJOrJBN2AOmrMw8SOPDDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+GE7L182TfYJxlE/lMCQwO2bZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjI0NWY4OWEtZTI5OC0z Y2YwLWFkOTUtYWU4NDU5ZjZiMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6Ux4hded1bZAWiZdtlFsoUjI9CM7AADgIsaW2d+f1c0/dwT0qt 3e0SvwUV4ccg9wCmWliP+S6m0zgQR7qSfD6/ZdyWT3cqTfHEaC/w5PygRoTpviL2 oC2NUa+If0KELLQV5xHhbCozudReDOFqjcsPPFslsBfI+3PVjxqFZklb7xNhyLd8 3yoWT6M+HaWKlcA+OpNjglCUsx4knVJqUXLcD5KX+/h/JpNG7pqvRLWSKgXDhQ8n anvgkrMGWHd+dajY2Pr+ePNmJmd+GIWO4Hh3pSojvuukoyPxz4P3JEgsocCJS2NK Vog7OrMH2QhOD5yV6nwXgMI0Qhm7U6mgK4k= -----END CERTIFICATE-----Generated at Fri Apr 17 15:41:21 2026 by rpki-client