$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa File: 86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa (raw, json) Hash identifier: e/3O+vbmfpNBY6rm7vWBmIRoxfwcpa1inmrKmMqEFBk= Subject key identifier: 30:D9:ED:D1:3E:82:A8:B7:84:AA:7C:D9:16:B2:9C:31:CF:BD:46:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA7A0675B5BA34FDB20480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 397200 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:7a:06:75:b5:ba:34:fd:b2:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=05773df8-f45e-4433-b39e-31a9f0cd1440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:23:86:a7:07:89:5e:b6:3b:84:da:ca:1d:97: cb:c6:f5:3b:ce:50:4e:b0:f2:b3:91:da:9f:79:2d: c9:f0:6f:b0:05:4e:d4:c3:ff:ab:76:96:85:1f:bf: 7a:55:a4:fb:3e:0d:4c:84:c7:b1:33:d9:c8:29:63: aa:c5:cb:6a:0d:fb:7f:06:48:77:47:bd:50:14:f6: ca:a7:4c:5e:ba:6d:2a:cc:ca:86:ac:83:ac:7a:fb: 9f:cd:4f:e2:1f:50:92:c1:a9:ec:73:cc:92:d3:f1: a4:2e:31:6a:87:5e:76:b6:02:0b:0e:57:28:ef:25: bc:eb:6e:5f:a8:77:fe:ea:be:32:ed:58:c5:ab:ec: 41:79:bf:fb:4b:26:70:2b:0d:4b:95:3b:88:ad:16: d2:e4:ac:a9:6d:f2:5c:67:6a:3a:75:f1:89:86:af: 56:35:de:bd:5a:ee:31:0b:66:8e:6a:9e:70:dd:4c: 48:b6:ce:ed:b3:44:1b:1e:9a:a7:17:8d:f7:eb:88: 87:85:86:ac:3f:8f:95:c2:a0:8a:94:c5:3e:59:3a: 5a:0c:9f:cc:ab:b7:fe:cf:5c:02:37:63:30:57:06: 68:f8:a5:f2:58:d7:3c:31:bf:9e:14:4a:61:33:03: ef:bc:05:e4:76:16:65:d6:58:80:9f:c1:70:23:38: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:ED:D1:3E:82:A8:B7:84:AA:7C:D9:16:B2:9C:31:CF:BD:46:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86b62d95-1dd9-32de-a3fa-4a92b4a2238f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:4a:11:60:f3:52:b8:1f:e7:6b:61:b6:5e:e5:a8:f4:3f:56: d5:1d:33:4e:a7:b9:7c:de:6a:19:35:ec:14:2c:9e:07:a9:e1: 8a:93:8f:9d:5a:dc:46:20:08:4f:8d:6b:a8:e5:a6:f5:29:7a: 46:1b:96:c7:0f:82:b0:95:38:8f:8c:e4:b3:e4:54:fa:c6:4e: d8:b4:db:0d:90:13:ab:c4:2a:1e:a0:e6:43:9b:e2:04:f9:eb: a6:fa:83:da:ae:ae:09:61:25:68:9e:8e:d6:90:2c:ee:fe:d4: 73:d9:67:3e:31:9e:be:e7:6a:a1:a0:53:64:eb:5d:75:dc:6d: a9:8e:c3:44:8f:9a:04:0e:1c:cf:62:cf:fc:ad:0d:5b:6e:42: e9:b4:10:83:75:e3:93:d3:fc:0f:23:8c:74:7c:7f:5f:7d:12: 57:63:fc:e9:b5:26:91:be:3a:85:5b:af:da:1b:50:15:fa:db: 72:05:50:32:ad:ad:27:00:95:42:12:81:ef:10:54:c3:9d:e8: 47:60:fb:4b:d9:f0:93:47:8e:93:2c:5f:d6:78:96:23:24:18: 14:a2:64:d5:42:42:e1:9e:01:2d:35:84:22:69:b9:7d:f4:e8: 36:2c:a1:af:ac:e4:9e:62:8b:3a:c5:f1:21:94:f2:4d:50:71: 65:44:11:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1u2noGdbW6NP2yBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MDU3NzNkZjgtZjQ1ZS00NDMzLWIzOWUtMzFhOWYwY2QxNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyOGpweJXrY7hNrKHZfLxvU7zlBOsPKzkdqf eS3J8G+wBU7Uw/+rdpaFH796VaT7Pg1MhMexM9nIKWOqxctqDft/Bkh3R71QFPbK p0xeum0qzMqGrIOsevufzU/iH1CSwansc8yS0/GkLjFqh152tgILDlco7yW8625f qHf+6r4y7VjFq+xBeb/7SyZwKw1LlTuIrRbS5KypbfJcZ2o6dfGJhq9WNd69Wu4x C2aOap5w3UxIts7ts0QbHpqnF43364iHhYasP4+VwqCKlMU+WTpaDJ/Mq7f+z1wC N2MwVwZo+KXyWNc8Mb+eFEphMwPvvAXkdhZl1liAn8FwIzhzmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDZ7dE+gqi3hKp82RaynDHPvUbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZiNjJkOTUtMWRkOS0z MmRlLWEzZmEtNGE5MmI0YTIyMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALtKEWDzUrgf52thtl7lqPQ/VtUdM06nuXzeahk17BQsngep4YqT j51a3EYgCE+Na6jlpvUpekYblscPgrCVOI+M5LPkVPrGTti02w2QE6vEKh6g5kOb 4gT566b6g9qurglhJWiejtaQLO7+1HPZZz4xnr7naqGgU2TrXXXcbamOw0SPmgQO HM9iz/ytDVtuQum0EIN145PT/A8jjHR8f199Eldj/Om1JpG+OoVbr9obUBX623IF UDKtrScAlUISge8QVMOd6Edg+0vZ8JNHjpMsX9Z4liMkGBSiZNVCQuGeAS01hCJp uX306DYsoa+s5J5iizrF8SGU8k1QcWVEEa0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:30:30 2026 by rpki-client