$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa File: 5311ad24-87c1-3f2b-99ca-8a69266c0972.roa (raw, json) Hash identifier: CgpDqSXvdEoREDKw7juB1g/65gqWu9skLRAz8tWyWgQ= Subject key identifier: 52:84:43:57:F2:42:E8:8E:6A:DC:94:FD:75:37:C8:9A:07:06:5E:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D71A51AE848F2C26B82E16180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 13335 IP address blocks: 2606:4700:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1a:e8:48:f2:c2:6b:82:e1:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=774a0e41-073e-4fe8-b0e6-2ef5bfb81984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:33:c5:34:0c:a8:c2:b5:49:12:84:5e:1e: 25:42:8a:9d:1f:e6:6c:89:2e:43:88:9f:45:a6:5d: 87:d4:c1:47:f3:d8:35:45:2c:6f:08:a7:49:cb:01: 90:60:f4:5b:af:cc:1c:9b:de:15:39:62:e0:ad:cc: 1f:ce:31:9c:77:69:0c:dc:7d:b0:49:97:e3:ec:de: 60:7e:28:2e:d3:5e:79:cd:7f:ed:89:48:18:4c:53: 29:e6:b7:7b:57:b1:86:80:38:90:40:08:42:be:0c: d9:c8:a9:5d:23:39:00:86:33:73:42:2b:a9:5c:c1: 06:15:c6:df:3d:44:e3:c9:f7:b3:dc:26:d0:42:0f: a4:81:3c:a5:43:1d:54:3b:e9:14:0a:4b:f4:e2:7c: 7d:59:1b:86:c4:1d:63:68:37:3f:83:b1:52:a4:46: d4:51:05:d3:7e:02:a1:0b:20:b1:2d:6e:63:af:60: 4b:16:b5:73:54:50:38:f6:90:a9:af:37:0b:15:03: 21:6f:87:73:94:f0:f2:1a:2e:cc:26:15:7d:01:00: f1:2d:6c:12:bb:9c:08:c9:84:67:8d:98:78:bf:69: ca:b5:42:99:2e:fd:39:e6:90:a3:98:bf:9f:8e:8e: ef:f3:b3:de:7b:21:fd:3f:db:4f:8e:d9:ce:e7:10: 05:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:43:57:F2:42:E8:8E:6A:DC:94:FD:75:37:C8:9A:07:06:5E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5311ad24-87c1-3f2b-99ca-8a69266c0972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:11:07:d0:72:4b:17:09:20:a9:56:05:c1:32:60:ee:87:b0: b9:90:90:6b:ab:23:4a:45:6f:1b:45:77:a8:97:62:0e:aa:0e: a5:d2:be:f1:3b:f1:7f:11:98:95:16:b6:a4:b6:df:51:25:ff: d1:40:80:0f:73:9a:03:31:b3:8e:f4:64:72:45:19:98:9b:81: 2b:dd:6f:39:64:fd:17:37:d1:35:7e:a9:a1:e4:d6:b4:6f:fc: 0d:c9:90:7a:36:79:e2:14:28:73:96:08:e7:59:5c:72:c7:74: 41:7c:cb:b4:e1:e7:9c:d5:b3:90:ab:17:19:f9:51:71:10:ec: 52:d5:a0:a6:43:4f:77:9b:8f:4e:5d:11:43:53:f9:aa:0f:2f: 01:82:60:9a:cc:36:6b:04:d9:4c:d1:0c:98:19:c1:81:eb:37: 4e:f7:29:ad:85:5c:82:1b:65:dc:c8:e0:c1:fc:1c:97:a9:55: 1b:45:6a:67:36:0e:b8:df:2c:71:d6:db:13:39:09:78:a1:29: 9e:c5:84:e5:28:70:bf:31:ed:a9:76:e9:69:28:fe:6a:3b:03: b1:b2:49:15:8b:53:4c:31:da:95:72:c4:25:bf:71:c4:f5:9f: 0f:a1:0c:24:9f:35:5d:4e:dc:1b:23:e3:79:be:30:c1:2d:be: 35:05:2e:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1xpRroSPLCa4LhYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk Nzc0YTBlNDEtMDczZS00ZmU4LWIwZTYtMmVmNWJmYjgxOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYIzxTQMqMK1SRKEXh4lQoqdH+ZsiS5DiJ9F pl2H1MFH89g1RSxvCKdJywGQYPRbr8wcm94VOWLgrcwfzjGcd2kM3H2wSZfj7N5g figu0155zX/tiUgYTFMp5rd7V7GGgDiQQAhCvgzZyKldIzkAhjNzQiupXMEGFcbf PUTjyfez3CbQQg+kgTylQx1UO+kUCkv04nx9WRuGxB1jaDc/g7FSpEbUUQXTfgKh CyCxLW5jr2BLFrVzVFA49pCprzcLFQMhb4dzlPDyGi7MJhV9AQDxLWwSu5wIyYRn jZh4v2nKtUKZLv055pCjmL+fjo7v87PeeyH9P9tPjtnO5xAFJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFKEQ1fyQuiOatyU/XU3yJoHBl7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTMxMWFkMjQtODdjMS0z ZjJiLTk5Y2EtOGE2OTI2NmMwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ4RB9BySxcJIKlWBcEyYO6HsLmQkGurI0pFbxtFd6iXYg6qDqXS vvE78X8RmJUWtqS231El/9FAgA9zmgMxs470ZHJFGZibgSvdbzlk/Rc30TV+qaHk 1rRv/A3JkHo2eeIUKHOWCOdZXHLHdEF8y7Th55zVs5CrFxn5UXEQ7FLVoKZDT3eb j05dEUNT+aoPLwGCYJrMNmsE2UzRDJgZwYHrN073Ka2FXIIbZdzI4MH8HJepVRtF amc2DrjfLHHW2xM5CXihKZ7FhOUocL8x7al26Wko/mo7A7GySRWLU0wx2pVyxCW/ ccT1nw+hDCSfNV1O3Bsj43m+MMEtvjUFLvQ= -----END CERTIFICATE-----Generated at Fri Apr 17 20:55:45 2026 by rpki-client