$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa File: e44f254e-92b8-36de-a3cb-2504b5f74802.roa (raw, json) Hash identifier: b6UytXSGzsQa+9SHUrMreIPHsZf/W+W+ORcNZpVPwrk= Subject key identifier: A1:FF:EC:48:95:57:32:FC:E1:3C:04:1A:01:5C:9E:78:28:C7:A9:0E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A053B5492BAD9789828B680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 2606:4700:3009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:3b:54:92:ba:d9:78:98:28:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=4c87fcf9-6104-4c17-b0fe-59ec9d56b689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:e0:4f:d2:62:60:16:1d:a0:c8:b3:f6:59: 4a:d2:07:d1:40:69:f7:9c:58:79:f3:eb:0d:a5:af: 7f:68:be:97:0a:ce:8f:c9:05:f8:c4:eb:90:c7:1e: 3d:77:60:1d:b9:c5:9e:95:48:ba:07:b2:5d:87:6c: 17:3d:82:d3:44:5f:1c:b9:48:f8:08:9e:ee:d7:29: 36:1a:a3:b2:b5:d8:79:24:96:00:45:c5:e6:61:9e: 93:8a:ee:17:d7:fc:15:d9:2d:02:13:15:c4:2d:bb: f9:ad:44:1c:36:8e:12:a3:ff:57:55:78:72:91:e8: 4f:5e:13:3b:c0:b9:73:22:86:ec:2c:5b:91:e4:83: 81:c0:9e:fd:ee:23:0b:6d:8d:d9:1f:88:b9:d5:aa: 2d:ad:7c:5a:70:69:14:07:c1:86:77:9b:24:e7:91: 05:b6:1f:32:33:84:ed:03:6f:24:5a:98:65:9d:7a: 9a:56:fd:42:89:17:03:df:e6:da:52:1f:2b:cb:37: 31:55:e0:47:ab:09:13:99:e3:bc:c5:a4:c0:11:35: 53:31:77:2b:6b:93:d5:dd:60:e9:b0:97:b6:29:09: dc:a9:b2:d6:10:68:f7:1a:1d:6e:d6:26:2d:07:5a: e9:64:67:2c:42:96:37:9e:07:e4:ee:75:70:d3:98: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FF:EC:48:95:57:32:FC:E1:3C:04:1A:01:5C:9E:78:28:C7:A9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b1:bb:f6:55:29:38:c3:26:87:15:ac:e4:7d:0d:58:e9:61: 01:bc:50:01:1c:d4:77:54:30:cf:5c:8b:1a:91:41:17:44:e2: 0c:16:30:88:1f:09:be:ad:46:8a:da:24:e5:17:75:fc:53:8b: 7b:47:b1:03:8c:28:c1:23:29:c1:99:e4:6f:76:62:19:b8:ac: 35:36:cf:e9:ee:3f:b7:b1:a7:3c:b4:91:85:53:c2:9b:75:29: 6f:1a:65:4a:4a:1e:21:c1:b8:98:17:04:4a:cc:8a:d0:ad:e2: 41:9a:f7:c2:03:49:36:27:8c:83:ce:e3:3f:63:46:51:99:2e: ce:af:31:1e:c1:7d:b2:27:cb:31:82:dd:a2:e5:7b:f9:9a:e1: 2d:c1:1d:86:ff:75:6f:89:1b:1d:f3:45:bf:20:e2:c1:54:71: 22:9a:21:59:9b:d6:f5:40:fa:7b:9c:b0:c5:cf:7c:62:57:be: 2d:da:ff:ba:a3:94:77:53:e6:f9:1c:44:73:24:5c:25:d5:13: 61:6d:2d:be:a9:ba:01:02:62:60:a7:ea:d7:4c:ae:eb:cd:12: 5f:13:37:41:40:01:a6:80:75:8e:fd:9c:9b:e2:8c:14:7b:ef: 4b:f5:c9:08:63:50:39:20:d2:78:bc:e3:da:16:db:b9:51:53: c5:c8:00:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BTtUkrrZeJgotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NGM4N2ZjZjktNjEwNC00YzE3LWIwZmUtNTllYzlkNTZiNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ingT9JiYBYdoMiz9llK0gfRQGn3nFh58+sN pa9/aL6XCs6PyQX4xOuQxx49d2AducWelUi6B7Jdh2wXPYLTRF8cuUj4CJ7u1yk2 GqOytdh5JJYARcXmYZ6Tiu4X1/wV2S0CExXELbv5rUQcNo4So/9XVXhykehPXhM7 wLlzIobsLFuR5IOBwJ797iMLbY3ZH4i51aotrXxacGkUB8GGd5sk55EFth8yM4Tt A28kWphlnXqaVv1CiRcD3+baUh8ryzcxVeBHqwkTmeO8xaTAETVTMXcra5PV3WDp sJe2KQncqbLWEGj3Gh1u1iYtB1rpZGcsQpY3ngfk7nVw05ig0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKH/7EiVVzL84TwEGgFcnngox6kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTQ0ZjI1NGUtOTJiOC0z NmRlLWEzY2ItMjUwNGI1Zjc0ODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOxu/ZVKTjDJocVrOR9DVjpYQG8UAEc1HdUMM9cixqRQRdE4gwW MIgfCb6tRoraJOUXdfxTi3tHsQOMKMEjKcGZ5G92Yhm4rDU2z+nuP7expzy0kYVT wpt1KW8aZUpKHiHBuJgXBErMitCt4kGa98IDSTYnjIPO4z9jRlGZLs6vMR7BfbIn yzGC3aLle/ma4S3BHYb/dW+JGx3zRb8g4sFUcSKaIVmb1vVA+nucsMXPfGJXvi3a /7qjlHdT5vkcRHMkXCXVE2FtLb6pugECYmCn6tdMruvNEl8TN0FAAaaAdY79nJvi jBR770v1yQhjUDkg0ni849oW27lRU8XIADw= -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:42 2026 by rpki-client