$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa File: 8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa (raw, json) Hash identifier: 3UrptnO3RA/wm7fNQrj9NHH4XXqvc058ihHJiaZEgpA= Subject key identifier: 53:23:B8:9C:5B:4B:5C:85:D5:7C:86:7D:41:06:66:A3:0C:B7:24:E3 Certificate issuer: /CN=9b1ca75e-4539-4223-b200-925398eb3409 Certificate serial: 010D0C9F4328584D703FE54549E554971FB8AD40 Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 2607:a940:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e5:45:49:e5:54:97:1f:b8:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=98fbc3a1-d8ad-43bd-81d2-2ce83f7b7ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8d:9f:92:7f:6a:f9:89:7b:92:a9:de:6f:da: 3b:05:fb:f7:24:9f:55:db:8a:f9:c7:4f:4b:36:47: a1:d1:a3:de:96:08:66:e4:64:86:69:45:79:e6:f2: 1c:d0:99:a8:ec:0f:91:95:6b:84:61:b1:5f:d4:3b: b7:27:89:72:ad:35:95:0a:33:53:eb:b8:54:a4:66: 19:0d:05:73:ad:b8:b2:72:e4:89:7e:af:f3:6c:98: 17:4e:b5:49:28:6e:eb:bc:4d:47:52:d9:51:75:aa: 92:a9:5d:0e:9c:2d:ac:41:2f:eb:51:b2:5c:f5:70: 6d:a9:69:98:9b:d5:0e:e2:c5:99:fd:bf:37:20:ff: 11:08:06:67:f8:19:e5:e5:ef:9d:b6:f6:c4:93:8f: 46:3e:3f:a4:b2:6c:ef:e1:34:89:c4:31:1a:9e:3a: 47:9a:a8:d0:31:c6:5f:99:06:c7:05:37:7d:e3:28: 35:74:9c:a1:3c:57:07:64:23:d5:0d:58:76:ed:f5: 7d:7d:b4:02:35:5d:69:84:cc:8d:3f:53:d0:f6:d2: 3b:da:c2:2a:f0:c3:36:b6:5f:47:54:b7:d1:54:32: d7:92:42:f8:99:f6:57:a9:89:0c:2f:88:37:ea:1b: 41:d2:34:c5:e4:c4:72:02:26:57:0d:55:4f:e2:cd: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:B8:9C:5B:4B:5C:85:D5:7C:86:7D:41:06:66:A3:0C:B7:24:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/8d419152-cb9a-3d9d-b08f-c378f5e8aa3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl X509v3 Authority Key Identifier: keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer sbgp-ipAddrBlock: critical IPv6: 2607:a940:b000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fe:7f:d1:4b:91:4c:c7:46:9e:88:f1:21:d6:cc:72:07:aa: 57:b9:77:30:72:c2:21:18:bd:cf:8f:18:91:14:f4:83:83:e0: 06:c1:76:ee:51:49:37:e5:65:77:22:79:6f:6f:cd:84:51:17: 60:ec:0f:77:2b:c3:bc:b0:d8:a0:f5:50:f8:32:a7:9d:9b:f6: bd:95:33:c3:39:e3:c1:32:c8:c1:40:5d:62:1e:49:3d:33:f7: 3f:eb:fb:ac:67:e2:de:75:18:aa:63:39:49:98:da:fd:7d:76: 26:0e:b3:b9:a7:cf:24:45:31:a8:c1:00:33:23:c1:75:89:79: 14:77:aa:65:bb:2d:18:ac:b7:97:89:4e:3a:95:ba:c2:92:f4: 88:74:37:c9:33:94:60:e9:89:a8:ec:2f:b6:57:fd:06:1f:03: 27:81:75:18:1e:b4:2f:71:4b:22:ee:fb:17:8f:85:48:63:e0: 76:28:4b:82:f6:a5:c6:3b:c7:4a:cc:37:64:a5:b7:1e:2b:9a: 03:bd:ea:c0:b9:f0:02:f0:1f:18:98:30:cf:ac:9b:cf:80:f0: b4:44:9b:ae:e7:95:fb:80:ef:52:6b:28:90:b9:f0:0b:74:48: fe:65:e9:29:a9:e8:bd:f8:7a:57:9e:4e:4c:eb:88:d3:f5:71: e3:5f:b2:82 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1wP+VFSeVUlx+4rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxY2E3NWUtNDUzOS00MjIzLWIyMDAtOTI1Mzk4ZWIz NDA5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OThmYmMzYTEtZDhhZC00M2JkLTgxZDItMmNlODNmN2I3ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/I2fkn9q+Yl7kqneb9o7Bfv3JJ9V24r5x09L Nkeh0aPelghm5GSGaUV55vIc0Jmo7A+RlWuEYbFf1Du3J4lyrTWVCjNT67hUpGYZ DQVzrbiycuSJfq/zbJgXTrVJKG7rvE1HUtlRdaqSqV0OnC2sQS/rUbJc9XBtqWmY m9UO4sWZ/b83IP8RCAZn+Bnl5e+dtvbEk49GPj+ksmzv4TSJxDEanjpHmqjQMcZf mQbHBTd94yg1dJyhPFcHZCPVDVh27fV9fbQCNV1phMyNP1PQ9tI72sIq8MM2tl9H VLfRVDLXkkL4mfZXqYkML4g36htB0jTF5MRyAiZXDVVP4s3s1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFMjuJxbS1yF1XyGfUEGZqMMtyTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YjFj YTc1ZS00NTM5LTQyMjMtYjIwMC05MjUzOThlYjM0MDkvOGQ0MTkxNTItY2I5YS0z ZDlkLWIwOGYtYzM3OGY1ZThhYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWIxY2E3NWUtNDUzOS00MjIzLWIy MDAtOTI1Mzk4ZWIzNDA5LzliMWNhNzVlLTQ1MzktNDIyMy1iMjAwLTkyNTM5OGVi MzQwOS5jcmwwHwYDVR0jBBgwFoAU3XSdGi+vlEdETqozixtgHMoEDkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85YjFjYTc1ZS00NTM5LTQyMjMtYjIwMC05MjUz OThlYjM0MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgepQLAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB/5/0UuRTMdGnojxIdbMcgeqV7l3MHLCIRi9z48YkRT0g4PgBsF2 7lFJN+VldyJ5b2/NhFEXYOwPdyvDvLDYoPVQ+DKnnZv2vZUzwznjwTLIwUBdYh5J PTP3P+v7rGfi3nUYqmM5SZja/X12Jg6zuafPJEUxqMEAMyPBdYl5FHeqZbstGKy3 l4lOOpW6wpL0iHQ3yTOUYOmJqOwvtlf9Bh8DJ4F1GB60L3FLIu77F4+FSGPgdihL gvalxjvHSsw3ZKW3HiuaA73qwLnwAvAfGJgwz6ybz4DwtESbrueV+4DvUmsokLnw C3RI/mXpKanovfh6V55OTOuI0/Vx41+ygg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:02:52 2026 by rpki-client