$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa File: 7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa (raw, json) Hash identifier: 0gj+fouBpDqjMR1IpTUQTN4M1/tP/Zx7RtUNyI06qhI= Subject key identifier: 55:04:93:61:EC:4B:58:C5:FE:78:26:6A:1F:DB:A1:38:D4:23:75:A7 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D81005035B5F631C6A0AB2500 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 2606:3600:1120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:50:35:b5:f6:31:c6:a0:ab:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=8a422f80-f677-4764-b068-a6916ed1098d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:35:2f:c9:1f:03:d2:53:c4:ae:c3:95:f9: 8b:c0:80:09:ef:77:5d:bd:c6:5b:37:12:da:3e:27: 69:ef:4e:c0:44:cf:6f:00:61:bc:05:28:07:ae:71: 94:5e:77:ba:20:f8:cd:ab:ba:f9:b5:1a:98:a5:6f: 59:f1:42:c6:71:91:12:ac:34:4e:53:c8:3a:ef:f1: bc:0f:ac:24:ea:47:90:bc:7f:cd:86:8e:7e:54:58: ba:d1:01:b4:50:4b:d7:12:09:86:9e:e8:11:9d:88: 66:22:e5:19:19:c4:b4:b5:71:0b:cf:65:29:b9:51: 86:31:df:53:1d:ed:86:40:af:14:6e:0a:35:9d:55: 32:97:ca:0a:e1:26:30:be:0b:7c:d8:52:7e:87:c4: a1:37:bf:ad:ba:3f:9e:84:ab:18:e0:b9:3b:e6:33: 74:c9:18:32:4a:95:30:1f:dc:c7:27:2a:27:0d:01: d5:26:63:a9:96:7a:6f:24:e4:e7:d1:60:0e:90:c5: c7:82:fb:2e:d4:39:a3:53:50:c2:f3:00:82:b0:67: 1f:21:4f:42:dc:ac:6a:e7:9c:2d:05:27:b5:9b:a7: b9:83:64:17:a5:d9:8a:43:76:06:44:4d:4a:71:b6: 0c:42:77:4a:e3:7d:d4:07:62:9d:74:df:dc:a7:51: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:04:93:61:EC:4B:58:C5:FE:78:26:6A:1F:DB:A1:38:D4:23:75:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7ae70d56-3bf0-3e04-a81f-0220f9523fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:1120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2f:1d:99:c6:63:ef:82:8c:ec:bc:b0:fc:1c:99:a8:d0:d5: 69:37:ab:43:f1:53:be:34:98:7c:c0:39:48:93:9e:0e:8a:95: 2d:f2:3e:77:9e:03:da:c0:59:69:4e:0b:30:79:62:15:e2:c3: 7b:02:03:50:e8:fe:70:99:29:cb:6d:7b:69:5f:eb:ad:d1:54: 22:65:52:21:a8:cd:2b:65:d6:cc:6b:5b:51:eb:3f:94:a8:75: d1:de:2d:43:28:1a:3c:9b:a6:66:40:43:2f:ec:b7:e8:89:60: 10:f7:69:29:85:b2:81:d7:c0:cc:ba:e8:00:84:51:c4:7f:94: fe:05:c4:54:34:78:ec:e1:dd:cd:37:3f:1c:23:07:db:ad:7a: 29:30:67:67:f7:2d:f2:2b:2f:2e:e9:dc:c2:77:57:f0:43:c9: f1:95:0a:ae:b6:dc:d9:6b:ad:11:f1:ef:85:a2:f2:9c:5a:61: 12:e5:df:70:c0:b8:a7:9c:0d:08:30:7f:7a:0b:a4:30:e8:60: 3b:fc:04:4e:7e:8f:82:58:ec:0c:a5:d6:f3:e1:92:9c:b8:fe: db:82:e6:2a:21:e1:b1:5f:10:4c:d5:3f:55:86:3e:d7:56:18: 74:a6:5c:82:f0:62:3a:0b:61:77:7a:1d:0d:72:67:b8:23:2a: 42:f2:09:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2BAFA1tfYxxqCrJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk OGE0MjJmODAtZjY3Ny00NzY0LWIwNjgtYTY5MTZlZDEwOThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7E1L8kfA9JTxK7DlfmLwIAJ73ddvcZbNxLa Pidp707ARM9vAGG8BSgHrnGUXne6IPjNq7r5tRqYpW9Z8ULGcZESrDROU8g67/G8 D6wk6keQvH/Nho5+VFi60QG0UEvXEgmGnugRnYhmIuUZGcS0tXELz2UpuVGGMd9T He2GQK8Ubgo1nVUyl8oK4SYwvgt82FJ+h8ShN7+tuj+ehKsY4Lk75jN0yRgySpUw H9zHJyonDQHVJmOplnpvJOTn0WAOkMXHgvsu1DmjU1DC8wCCsGcfIU9C3Kxq55wt BSe1m6e5g2QXpdmKQ3YGRE1KcbYMQndK433UB2KddN/cp1EUSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUEk2HsS1jF/ngmah/boTjUI3WnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvN2FlNzBkNTYtM2JmMC0z ZTA0LWE4MWYtMDIyMGY5NTIzZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2ABEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8vHZnGY++CjOy8sPwcmajQ1Wk3q0PxU740mHzAOUiTng6KlS3y PneeA9rAWWlOCzB5YhXiw3sCA1Do/nCZKctte2lf663RVCJlUiGozStl1sxrW1Hr P5SoddHeLUMoGjybpmZAQy/st+iJYBD3aSmFsoHXwMy66ACEUcR/lP4FxFQ0eOzh 3c03PxwjB9uteikwZ2f3LfIrLy7p3MJ3V/BDyfGVCq623NlrrRHx74Wi8pxaYRLl 33DAuKecDQgwf3oLpDDoYDv8BE5+j4JY7Ayl1vPhkpy4/tuC5ioh4bFfEEzVP1WG PtdWGHSmXILwYjoLYXd6HQ1yZ7gjKkLyCbQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:27:45 2026 by rpki-client