$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa File: f19b701f-4b64-3c06-9d45-c1e353da2929.roa (raw, json) Hash identifier: D1c1gZi9M0dltqTe0MfGcnsSuMgJ9/FD/u6ZbMbU3sE= Subject key identifier: 14:6C:39:FC:48:06:55:6F:37:91:26:32:9D:8C:4B:30:B0:7C:BD:53 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584D80FFFB22CAD334BD396F0C00 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16839 IP address blocks: 2606:3600:180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fb:22:ca:d3:34:bd:39:6f:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=a8f5288e-d128-41e8-8914-1909fd04da61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:a2:f7:80:88:dc:0c:e5:c2:1d:8f:8c:e2: 7d:f5:b0:48:3d:d9:9d:86:51:01:28:75:67:60:57: 7f:0f:28:ab:62:6b:9c:b0:4b:84:f4:72:02:33:29: fe:27:2e:53:68:29:8a:10:06:ee:7f:31:4d:c0:8d: c6:3a:1e:83:5e:d7:c6:d0:09:38:9f:86:d6:36:65: 34:6e:4a:6c:ce:61:bf:66:74:b9:31:12:ac:0c:97: d1:69:3e:da:81:be:63:b7:ba:1d:dd:0a:9e:40:34: 2b:20:13:16:2d:47:ab:ec:f8:ce:12:99:23:91:26: 5c:c3:a0:92:c1:9f:c0:92:c2:61:d1:71:14:40:8c: 53:c4:60:06:b4:20:cd:40:9a:45:69:48:1b:da:d7: 0f:fb:17:18:b7:2b:d4:c6:ad:d4:ba:70:b0:21:32: 8f:29:1f:65:f8:9e:90:69:fd:f3:0b:1c:64:37:b3: f9:6c:25:62:42:6e:28:47:8e:3a:3a:d7:9b:74:da: e5:83:99:6c:f0:97:a1:b2:e1:34:4e:9a:d2:95:dc: 7b:5c:50:8f:b2:bc:a1:a3:34:cc:70:69:fc:85:7e: 86:89:df:3f:17:86:a6:4a:25:07:84:ec:53:16:be: 4f:23:46:3f:66:c2:b9:85:a1:53:6b:c2:65:84:c5: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:39:FC:48:06:55:6F:37:91:26:32:9D:8C:4B:30:B0:7C:BD:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f19b701f-4b64-3c06-9d45-c1e353da2929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:180::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c5:9d:51:6b:9c:fd:c7:26:27:37:3c:2f:54:0c:56:e9:30: 94:c4:b2:c9:0e:f5:28:ef:83:40:2b:ec:92:b1:4e:74:d0:93: e8:23:29:a6:fd:9f:43:a7:19:4b:b7:a7:0a:3b:bd:f2:b4:16: 37:11:82:e8:a9:b1:d6:f3:0c:74:6d:d6:80:ab:43:26:a5:e4: e8:76:47:36:bf:dc:9f:86:39:ad:a4:a2:50:af:30:9c:3a:fc: 8a:93:86:a3:48:b5:86:4e:20:8f:7c:e4:a6:66:0b:80:ce:9d: 9a:f9:5b:00:c9:87:b0:a8:4e:36:f9:b0:25:73:12:da:fa:b0: 9f:e6:aa:b5:fe:b0:b9:fc:a5:e6:29:5a:96:ca:fc:7e:84:6d: 09:47:0c:88:74:d5:3b:37:fa:6f:00:c2:38:7e:cd:d9:de:41: b6:1e:f3:b0:a5:cd:1f:1b:6d:b4:70:32:b7:d4:f5:c9:d3:cc: c5:6a:56:78:b7:3c:0f:33:bb:07:98:77:ed:cf:34:be:bc:d9: bd:3a:3f:f9:85:a8:b7:aa:d2:f3:25:8d:24:35:5e:1e:02:32: 25:81:5e:bd:8a:13:87:b1:7a:74:6c:ee:c4:1f:9f:de:fb:74: e5:47:8f:03:f1:78:8a:7f:18:5b:31:2c:15:61:bc:57:d0:8b: aa:6c:ae:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A//siytM0vTlvDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YThmNTI4OGUtZDEyOC00MWU4LTg5MTQtMTkwOWZkMDRkYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBui94CI3Azlwh2PjOJ99bBIPdmdhlEBKHVn YFd/DyirYmucsEuE9HICMyn+Jy5TaCmKEAbufzFNwI3GOh6DXtfG0Ak4n4bWNmU0 bkpszmG/ZnS5MRKsDJfRaT7agb5jt7od3QqeQDQrIBMWLUer7PjOEpkjkSZcw6CS wZ/AksJh0XEUQIxTxGAGtCDNQJpFaUgb2tcP+xcYtyvUxq3UunCwITKPKR9l+J6Q af3zCxxkN7P5bCViQm4oR446OtebdNrlg5ls8JehsuE0TprSldx7XFCPsryhozTM cGn8hX6Gid8/F4amSiUHhOxTFr5PI0Y/ZsK5haFTa8JlhMXgzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRsOfxIBlVvN5EmMp2MSzCwfL1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZjE5YjcwMWYtNGI2NC0z YzA2LTlkNDUtYzFlMzUzZGEyOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHFnVFrnP3HJic3PC9UDFbpMJTEsskO9Sjvg0Ar7JKxTnTQk+gj Kab9n0OnGUu3pwo7vfK0FjcRguipsdbzDHRt1oCrQyal5Oh2Rza/3J+GOa2kolCv MJw6/IqThqNItYZOII985KZmC4DOnZr5WwDJh7CoTjb5sCVzEtr6sJ/mqrX+sLn8 peYpWpbK/H6EbQlHDIh01Ts3+m8Awjh+zdneQbYe87ClzR8bbbRwMrfU9cnTzMVq Vni3PA8zuweYd+3PNL682b06P/mFqLeq0vMljSQ1Xh4CMiWBXr2KE4exenRs7sQf n977dOVHjwPxeIp/GFsxLBVhvFfQi6psrlY= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:11 2026 by rpki-client