$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb949527-a685-34e6-8a3d-098a1dcd86f0.roa File: fb949527-a685-34e6-8a3d-098a1dcd86f0.roa (raw, json) Hash identifier: 2lXp+lt7pVs8ae9U8xwDaS8cuFEdNEMyCgMxBME9HQ8= Subject key identifier: 33:A8:D9:40:F6:5A:96:E0:30:5B:54:1E:82:EF:4F:16:82:97:E7:68 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584D7A054B105EDDCE437BC9CAC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb949527-a685-34e6-8a3d-098a1dcd86f0.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 13335 IP address blocks: 2606:4700:3018::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4b:10:5e:dd:ce:43:7b:c9:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=bf3aa4f0-dda4-480b-9aba-a8ea8eae3f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:ad:91:5b:8a:36:a0:23:46:dc:f0:77:01: d7:5b:c1:83:42:5d:7a:38:49:d0:d9:d9:7d:e5:cd: 35:3e:2d:08:9d:de:96:a0:ea:26:7d:14:5c:e2:93: aa:8a:09:50:f0:eb:0b:de:d2:d0:dd:4d:42:91:85: f7:11:b6:37:2d:de:d4:a5:bb:f7:fe:e2:6d:ad:84: 20:48:17:08:fa:9b:1c:0b:f4:f1:43:0d:48:37:64: 2b:47:32:5a:b1:cc:ac:08:95:4e:06:66:8e:23:3b: 09:53:2b:e9:77:a5:1f:dc:25:5c:ea:cc:c7:06:f5: 97:16:01:4e:40:d1:70:49:40:25:62:64:26:76:f6: 3f:b5:7e:e5:83:e0:da:1e:9c:0f:b0:8b:9c:c9:3d: f6:7f:b8:c4:e3:0e:30:d3:52:a4:a5:e9:bb:36:59: 16:6a:64:5a:dc:e1:06:71:0d:c5:83:f9:db:a3:fd: e1:62:0c:8d:f3:06:c7:b7:43:10:c6:65:ae:e6:4e: fd:b6:eb:49:d1:ed:16:2c:ce:fd:0b:5d:d9:63:cd: ea:f9:94:ed:56:38:6d:24:ed:a0:92:4c:d8:6b:87: fa:f7:21:5d:a2:6b:d6:84:02:84:22:0b:db:37:41: 3e:3e:31:9f:de:6a:0d:e1:f5:03:40:d5:e8:ec:35: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A8:D9:40:F6:5A:96:E0:30:5B:54:1E:82:EF:4F:16:82:97:E7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fb949527-a685-34e6-8a3d-098a1dcd86f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3018::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:95:55:c6:43:09:18:a8:1c:de:89:12:21:87:02:54:8a:b9: bf:6c:23:3c:f5:88:58:b3:50:90:83:4e:c5:83:ae:6a:e3:37: 55:65:5f:5c:c4:41:2d:ea:6c:ab:a4:1e:50:68:a1:bf:3f:fe: d9:4a:f4:e5:ee:62:39:f1:08:d6:a2:95:c0:2b:c5:f4:17:98: fe:11:08:06:66:db:d9:7c:c6:58:77:ba:f5:74:87:ae:1b:17: 6a:02:d0:a3:bc:02:07:74:41:b3:a7:d1:37:83:2f:a8:3e:f2: ef:a9:da:9c:03:c7:ad:b3:11:7f:f9:7b:6f:ac:ac:1e:9f:96: 14:17:03:62:45:c3:21:ac:f1:c6:fb:53:bd:14:ed:1e:ba:95: 6c:4c:0d:ed:c9:41:06:1a:de:32:58:2d:01:f0:3d:89:a9:83: 09:bf:07:f5:84:14:d7:c6:29:c4:5c:05:95:5a:49:c2:16:84: ce:f3:77:ed:97:8f:0e:f6:f6:2f:53:2a:a4:ff:b1:ec:92:fc: c7:de:63:d2:5c:96:01:8d:a0:9c:19:31:ee:df:b7:e0:09:cc: f8:35:d1:b2:99:ea:38:fb:91:82:e4:44:c8:e5:68:23:13:91: af:06:a4:99:5f:e6:1b:04:c1:58:0d:40:5d:9c:7f:f8:9f:4f: 66:10:18:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BUsQXt3OQ3vJysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YmYzYWE0ZjAtZGRhNC00ODBiLTlhYmEtYThlYThlYWUzZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYKtkVuKNqAjRtzwdwHXW8GDQl16OEnQ2dl9 5c01Pi0Ind6WoOomfRRc4pOqiglQ8OsL3tLQ3U1CkYX3EbY3Ld7Upbv3/uJtrYQg SBcI+pscC/TxQw1IN2QrRzJascysCJVOBmaOIzsJUyvpd6Uf3CVc6szHBvWXFgFO QNFwSUAlYmQmdvY/tX7lg+DaHpwPsIucyT32f7jE4w4w01Kkpem7NlkWamRa3OEG cQ3Fg/nbo/3hYgyN8wbHt0MQxmWu5k79tutJ0e0WLM79C13ZY83q+ZTtVjhtJO2g kkzYa4f69yFdomvWhAKEIgvbN0E+PjGf3moN4fUDQNXo7DVdcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDOo2UD2WpbgMFtUHoLvTxaCl+doMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmI5NDk1MjctYTY4NS0z NGU2LThhM2QtMDk4YTFkY2Q4NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGVVcZDCRioHN6JEiGHAlSKub9sIzz1iFizUJCDTsWDrmrjN1Vl X1zEQS3qbKukHlBoob8//tlK9OXuYjnxCNailcArxfQXmP4RCAZm29l8xlh3uvV0 h64bF2oC0KO8Agd0QbOn0TeDL6g+8u+p2pwDx62zEX/5e2+srB6flhQXA2JFwyGs 8cb7U70U7R66lWxMDe3JQQYa3jJYLQHwPYmpgwm/B/WEFNfGKcRcBZVaScIWhM7z d+2Xjw729i9TKqT/seyS/MfeY9JclgGNoJwZMe7ft+AJzPg10bKZ6jj7kYLkRMjl aCMTka8GpJlf5hsEwVgNQF2cf/ifT2YQGCM= -----END CERTIFICATE-----Generated at Fri Apr 17 18:04:21 2026 by rpki-client