$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: Vz/HuwIlbLajl6j7+LR5XCi1lxJX/kOmiri0VvJe9TY= Subject key identifier: 2C:BA:FB:6C:C1:82:11:EF:FE:61:04:F7:2A:66:7A:C0:66:5F:70:C2 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584D703FE03383DE1474E0C70C80 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e0:33:83:de:14:74:e0:c7:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=8cdc7bb8-af83-47e0-91a7-ba0f8db17756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:26:ea:3c:f0:5f:a7:a1:51:22:02:ab:49:42: fb:68:3c:57:d5:fb:e1:37:ca:ca:98:75:86:7f:fa: 60:c1:a6:3b:2d:f1:05:83:3f:39:66:fe:d2:89:f0: 9b:c7:47:0d:55:6c:be:92:a6:27:ec:31:85:1c:00: 5a:76:2d:01:86:c7:9d:c3:18:f8:bb:10:9f:f7:ea: 0c:1b:53:16:cc:38:cb:1f:75:5e:80:16:62:e6:00: a9:e4:6e:95:06:41:a7:d9:a9:5e:57:02:43:f9:d7: 5f:3f:51:33:73:3a:22:47:54:ba:fb:8e:4c:9a:91: b7:7e:f9:29:13:ed:5f:7a:e7:a0:fb:b5:01:4c:9c: a4:8a:c0:50:33:12:5b:c9:2c:27:e3:0c:76:34:ff: 93:1a:79:a2:f7:16:0d:22:9d:07:6e:e7:db:66:4e: a3:69:9e:2d:3c:70:fd:8c:17:6a:aa:2f:ce:b7:e8: a7:41:fc:bc:8c:20:7b:b2:a9:27:25:0e:b2:c4:12: 7a:d1:70:d3:92:17:75:db:e1:2b:4a:cc:37:3e:e0: 96:20:ea:5b:04:fa:18:8f:82:03:5d:e4:75:29:41: db:8a:77:b5:5f:74:70:87:d6:8b:14:e5:df:45:08: 6f:06:60:6e:40:0c:a5:d9:e3:bd:98:48:36:23:e7: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:FB:6C:C1:82:11:EF:FE:61:04:F7:2A:66:7A:C0:66:5F:70:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c9:91:0d:f3:c9:34:9c:75:ce:34:ae:d7:34:e5:02:9d:a7: 9a:b1:ea:02:49:ed:0d:d3:0d:23:14:3d:d9:9b:c9:1f:87:6b: 62:1b:a8:d2:a3:c4:d8:3d:2c:5d:89:8f:84:79:c9:08:09:ea: c6:d1:5f:82:21:86:fd:31:cb:91:d3:6a:1f:97:6a:46:67:9a: db:ca:dd:94:3e:93:9c:26:7e:59:c1:80:d6:a1:03:4d:f0:6c: e0:3a:db:b5:0c:63:4f:ed:71:b6:1c:28:7a:1c:d8:99:d2:0b: 5c:94:cb:d9:43:7b:c6:2f:01:dd:70:7a:1c:26:0b:77:a5:67: 73:f6:c4:be:94:4c:fa:5d:64:61:9b:fd:10:d9:3a:9a:df:53: 3c:9d:05:99:00:d8:23:f2:21:54:d0:c3:cd:92:43:fe:af:b8: f1:e7:cf:1f:bb:8b:3d:3c:2c:42:25:21:d1:ac:36:f7:2d:a0: 8b:25:13:45:ea:20:ef:be:60:28:61:12:6c:41:f4:88:c1:a0: a9:b8:01:c7:d0:c0:6f:83:50:5b:3e:e2:f3:ae:b6:35:0d:f4: e2:39:38:fe:89:16:11:b9:fd:2f:c9:3c:ac:1c:ec:c9:34:45: 5a:a3:0e:3e:e2:bc:a0:a9:7d:c7:9c:2c:04:4f:b5:f4:cb:01: b9:23:5c:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1wP+Azg94UdODHDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OGNkYzdiYjgtYWY4My00N2UwLTkxYTctYmEwZjhkYjE3NzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSbqPPBfp6FRIgKrSUL7aDxX1fvhN8rKmHWG f/pgwaY7LfEFgz85Zv7SifCbx0cNVWy+kqYn7DGFHABadi0Bhsedwxj4uxCf9+oM G1MWzDjLH3VegBZi5gCp5G6VBkGn2aleVwJD+ddfP1EzczoiR1S6+45MmpG3fvkp E+1feueg+7UBTJykisBQMxJbySwn4wx2NP+TGnmi9xYNIp0HbufbZk6jaZ4tPHD9 jBdqqi/Ot+inQfy8jCB7sqknJQ6yxBJ60XDTkhd12+ErSsw3PuCWIOpbBPoYj4ID XeR1KUHbine1X3Rwh9aLFOXfRQhvBmBuQAyl2eO9mEg2I+ewNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCy6+2zBghHv/mEE9ypmesBmX3DCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZyZEN88k0nHXONK7XNOUCnaeaseoCSe0N0w0jFD3Zm8kfh2tiG6jS o8TYPSxdiY+EeckICerG0V+CIYb9McuR02ofl2pGZ5rbyt2UPpOcJn5ZwYDWoQNN 8GzgOtu1DGNP7XG2HCh6HNiZ0gtclMvZQ3vGLwHdcHocJgt3pWdz9sS+lEz6XWRh m/0Q2Tqa31M8nQWZANgj8iFU0MPNkkP+r7jx588fu4s9PCxCJSHRrDb3LaCLJRNF 6iDvvmAoYRJsQfSIwaCpuAHH0MBvg1BbPuLzrrY1DfTiOTj+iRYRuf0vyTysHOzJ NEVaow4+4rygqX3HnCwET7X0ywG5I1w2 -----END CERTIFICATE-----Generated at Fri Apr 17 14:57:00 2026 by rpki-client