$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa File: 2b2880f6-3011-3457-91e9-f1dd0625ae49.roa (raw, json) Hash identifier: 8qXVI4SqVOQrtjoEbhvhhtnmEkxjo7J92Pi3ReLOeU4= Subject key identifier: 13:AD:10:FD:DB:07:31:EC:42:8B:8F:EF:D4:DD:75:19:90:B6:9C:2A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51AC256A592202F339E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 2606:4700:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1a:c2:56:a5:92:20:2f:33:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=b90af366-ef2e-4a42-94f8-832961f1e70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ef:a1:bf:9e:d5:32:26:8d:a9:77:c2:dd:70: c5:11:1c:a1:ae:4a:ce:bc:6e:86:29:38:fe:39:4c: 35:99:ff:06:f2:cc:e4:c0:b7:cd:ed:66:a9:16:05: 66:86:68:d1:88:aa:ef:bc:92:3d:a6:96:53:31:4a: 05:7c:25:81:ee:7a:f2:df:28:2e:7f:dc:6e:1b:66: 5a:41:c9:82:8b:8f:83:e0:d6:95:61:66:b2:5c:e4: a7:ab:c7:93:f0:1e:77:80:92:9e:e3:86:74:7b:a1: 58:cb:a8:e0:bc:8b:48:ef:01:2a:1e:37:aa:21:cc: 6d:ac:c0:82:1e:be:7b:a6:17:af:b8:9a:7d:86:71: 9d:8a:6d:b8:96:b0:d8:41:dd:39:99:38:40:61:f7: c2:6f:0d:53:a6:f8:db:48:b0:f9:0f:e6:99:8d:48: 58:d9:8a:d9:1f:75:88:af:60:b3:12:37:97:48:1f: 3e:8d:c9:2e:8b:9f:13:44:dc:21:c6:9c:97:e2:68: ee:01:5f:87:92:eb:21:79:8a:7e:1e:90:f6:ed:84: 99:a6:ea:40:82:a5:84:e0:ab:50:91:2a:d2:7a:ff: 48:31:4a:e8:e9:c5:57:6a:c8:6a:3a:86:7d:c5:df: 10:ec:d7:b7:17:3e:c7:c5:f9:02:34:46:b7:63:69: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AD:10:FD:DB:07:31:EC:42:8B:8F:EF:D4:DD:75:19:90:B6:9C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b2880f6-3011-3457-91e9-f1dd0625ae49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c4:95:53:3c:24:ff:b8:cd:21:3c:f6:b6:cb:fe:0e:bb:7a: be:e1:c6:c6:7d:bd:9a:52:0e:1a:d2:dd:df:24:06:63:d8:84: 2b:b4:d5:61:64:e6:fe:eb:9f:15:ee:e8:93:06:b8:fb:88:7f: 0a:da:30:6a:77:cc:60:78:0f:77:bd:77:e0:22:e4:91:46:1d: fc:7e:99:47:4b:09:e6:5a:86:66:5c:3c:24:ec:b9:a3:cf:ef: b6:55:fd:a4:65:06:58:58:42:21:15:2e:25:41:91:bc:ca:a5: f8:14:fd:c4:92:c3:b8:1e:7b:c3:db:38:53:72:a1:2c:76:22: c9:05:06:23:a5:75:11:87:b0:4e:f9:c2:94:34:43:77:25:71: 84:1f:73:db:d0:6e:52:f4:00:93:8b:53:f7:d5:b1:57:ef:cb: 2d:42:f7:7b:04:01:73:3e:a3:3e:4b:95:a3:1a:8d:3e:6c:24: 5d:02:43:38:2d:c7:b0:7a:18:e7:03:e6:74:58:63:49:e2:3c: 34:f7:53:87:1c:0d:88:db:a7:9a:d2:64:4f:ff:fb:13:79:bf: 99:8f:5d:8c:56:10:da:49:d6:d2:ce:c1:b0:b2:44:e4:3c:9e: 9e:45:13:7d:92:e3:6b:ef:f6:52:0a:69:8b:4f:1d:9a:53:22: 6c:46:ac:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1xpRrCVqWSIC8znoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YjkwYWYzNjYtZWYyZS00YTQyLTk0ZjgtODMyOTYxZjFlNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O+hv57VMiaNqXfC3XDFERyhrkrOvG6GKTj+ OUw1mf8G8szkwLfN7WapFgVmhmjRiKrvvJI9ppZTMUoFfCWB7nry3yguf9xuG2Za QcmCi4+D4NaVYWayXOSnq8eT8B53gJKe44Z0e6FYy6jgvItI7wEqHjeqIcxtrMCC Hr57phevuJp9hnGdim24lrDYQd05mThAYffCbw1TpvjbSLD5D+aZjUhY2YrZH3WI r2CzEjeXSB8+jckui58TRNwhxpyX4mjuAV+HkusheYp+HpD27YSZpupAgqWE4KtQ kSrSev9IMUro6cVXashqOoZ9xd8Q7Ne3Fz7HxfkCNEa3Y2ka8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBOtEP3bBzHsQouP79TddRmQtpwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIyODgwZjYtMzAxMS0z NDU3LTkxZTktZjFkZDA2MjVhZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/ElVM8JP+4zSE89rbL/g67er7hxsZ9vZpSDhrS3d8kBmPYhCu0 1WFk5v7rnxXu6JMGuPuIfwraMGp3zGB4D3e9d+Ai5JFGHfx+mUdLCeZahmZcPCTs uaPP77ZV/aRlBlhYQiEVLiVBkbzKpfgU/cSSw7gee8PbOFNyoSx2IskFBiOldRGH sE75wpQ0Q3clcYQfc9vQblL0AJOLU/fVsVfvyy1C93sEAXM+oz5LlaMajT5sJF0C Qzgtx7B6GOcD5nRYY0niPDT3U4ccDYjbp5rSZE//+xN5v5mPXYxWENpJ1tLOwbCy ROQ8np5FE32S42vv9lIKaYtPHZpTImxGrHk= -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:42 2026 by rpki-client