$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1a44b96-dfc8-3b9b-98c7-a2558d13dab7.roa File: d1a44b96-dfc8-3b9b-98c7-a2558d13dab7.roa (raw, json) Hash identifier: hBNxQm4lgfRtqcVPut0FVizC08yVjM1bzFyVR771YN4= Subject key identifier: 2B:AC:78:D6:49:3C:79:23:51:D6:26:0B:9A:71:75:B7:4C:02:4D:69 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D67DFD5213F23ABC5149DD400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1a44b96-dfc8-3b9b-98c7-a2558d13dab7.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:4403::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d5:21:3f:23:ab:c5:14:9d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=ff13cb05-b11a-434c-abb6-4bf6ecde78c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:62:36:e8:90:3c:fd:19:71:5c:45:c8:d0: 01:8d:11:2c:b5:2a:8e:fa:02:82:ec:c7:80:24:e8: 17:b8:a8:26:a8:55:58:5c:a4:77:ec:5c:06:70:47: 5d:63:9c:cb:d7:d9:ee:03:dc:c8:25:77:b1:88:ec: 35:ec:da:41:35:a2:a9:59:bc:e0:17:83:9a:23:26: 19:c3:3b:f6:8c:0a:da:3f:19:74:08:18:2d:c4:de: 91:21:48:cf:e2:de:d3:e3:a8:e5:d4:0b:f2:9a:72: b3:81:94:d0:93:a9:d5:e0:cf:dd:fa:5b:05:5b:6b: 20:38:84:58:67:56:a5:03:de:56:2d:1f:1b:00:40: da:d9:d9:a0:dc:21:74:cd:e1:39:f4:1c:c6:c2:b6: 21:ea:4c:4a:3a:7a:54:fb:36:22:09:e3:70:17:62: f5:22:db:33:0f:1c:92:63:cd:19:8a:11:e7:d3:10: 85:78:56:f4:06:d5:dd:5a:64:94:95:97:05:cb:63: 7c:ac:d0:27:72:3f:f0:1f:8b:90:2e:00:52:9c:6f: fd:d6:b9:ba:02:f9:b9:15:e1:d0:25:c1:29:98:09: 26:11:bf:5a:50:c9:e6:ec:b6:fb:c4:08:3c:2f:f7: 5f:34:0b:10:a1:10:5c:06:84:e2:ac:b9:4d:39:64: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AC:78:D6:49:3C:79:23:51:D6:26:0B:9A:71:75:B7:4C:02:4D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d1a44b96-dfc8-3b9b-98c7-a2558d13dab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4403::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fb:49:fe:17:86:a7:d2:60:dc:9b:a1:3f:f8:2e:66:5e:b9: 4d:df:c5:a2:87:d2:b0:e6:3d:c8:99:c1:f0:04:2c:8c:1d:3a: 84:fd:a0:95:36:af:fa:65:bc:9a:a5:b7:27:04:e0:8a:92:0d: 60:28:3a:4c:54:40:9d:d0:a3:12:44:ee:33:94:60:d8:20:93: 94:88:9c:54:f5:e9:20:84:83:18:7d:ef:b7:d1:0a:0a:f0:21: 72:09:42:d5:c5:d6:b8:77:77:e3:82:44:78:01:9a:b4:5e:af: c3:c5:ee:d6:5a:fe:10:f3:90:e7:2e:02:cb:17:c6:f4:4b:ab: 21:f4:36:04:95:cd:72:5a:d5:b2:1d:99:37:bd:53:c5:dc:1a: 09:67:fb:68:fd:d7:54:f9:26:8d:e0:80:69:7a:ef:32:09:45: 3a:c9:9d:8d:ca:ea:83:2c:38:8a:08:df:49:46:08:b4:8d:60: af:fa:3a:9e:65:0e:41:5d:7f:5b:e4:13:17:ce:32:22:6d:32: c5:b6:03:6a:87:d2:81:c6:53:9b:1f:07:62:fb:e8:e5:e3:ef: 6e:96:66:4f:d4:ad:95:ff:2f:8e:d4:95:73:41:2c:77:bb:71: 6d:6c:f5:34:0b:43:8a:53:43:8c:c5:53:ad:59:ed:df:f5:a6: 57:17:a8:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1n39UhPyOrxRSd1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZmYxM2NiMDUtYjExYS00MzRjLWFiYjYtNGJmNmVjZGU3OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBhiNuiQPP0ZcVxFyNABjREstSqO+gKC7MeA JOgXuKgmqFVYXKR37FwGcEddY5zL19nuA9zIJXexiOw17NpBNaKpWbzgF4OaIyYZ wzv2jAraPxl0CBgtxN6RIUjP4t7T46jl1AvymnKzgZTQk6nV4M/d+lsFW2sgOIRY Z1alA95WLR8bAEDa2dmg3CF0zeE59BzGwrYh6kxKOnpU+zYiCeNwF2L1ItszDxyS Y80ZihHn0xCFeFb0BtXdWmSUlZcFy2N8rNAncj/wH4uQLgBSnG/91rm6Avm5FeHQ JcEpmAkmEb9aUMnm7Lb7xAg8L/dfNAsQoRBcBoTirLlNOWT3VwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCuseNZJPHkjUdYmC5pxdbdMAk1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDFhNDRiOTYtZGZjOC0z YjliLTk4YzctYTI1NThkMTNkYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJH7Sf4XhqfSYNyboT/4LmZeuU3fxaKH0rDmPciZwfAELIwdOoT9 oJU2r/plvJqltycE4IqSDWAoOkxUQJ3QoxJE7jOUYNggk5SInFT16SCEgxh977fR CgrwIXIJQtXF1rh3d+OCRHgBmrRer8PF7tZa/hDzkOcuAssXxvRLqyH0NgSVzXJa 1bIdmTe9U8XcGgln+2j911T5Jo3ggGl67zIJRTrJnY3K6oMsOIoI30lGCLSNYK/6 Op5lDkFdf1vkExfOMiJtMsW2A2qH0oHGU5sfB2L76OXj726WZk/UrZX/L47UlXNB LHe7cW1s9TQLQ4pTQ4zFU61Z7d/1plcXqL0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:44:12 2026 by rpki-client