$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa File: 43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa (raw, json) Hash identifier: /tfox3ngokg4NvZ1SltvZB+JZffLANotxc6sCX0bOQQ= Subject key identifier: 60:05:C5:F4:93:07:F4:15:30:19:1C:46:FE:80:B8:06:B0:3F:EC:00 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584D571FC18D3466CA8873C8A190 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 0 IP address blocks: 2001:504:99::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:c1:8d:34:66:ca:88:73:c8:a1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=5645535e-2c32-4ffc-8f03-3ebbe921b2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:89:08:c8:e3:bd:f8:1b:5f:f2:71:57:43: 5f:14:2e:da:31:47:ae:2e:77:27:d3:fb:0e:7f:7c: d9:83:ce:c0:58:2c:47:f0:b4:fe:d6:19:99:af:7b: 6e:55:b4:3c:7b:8a:35:96:a5:45:64:ff:4d:e3:30: e4:2e:14:cb:53:b8:36:c8:1d:09:34:1b:9b:a1:a9: 6e:cd:32:ca:6a:20:0c:d8:85:7c:9c:ca:bc:62:a4: 12:86:16:61:a3:38:48:40:87:b5:69:55:73:0c:d4: f8:23:ee:36:41:3a:a1:72:d8:02:d2:87:c0:a1:00: b6:1c:e3:32:87:81:63:30:e4:1d:5b:07:16:8f:8b: 90:01:c9:4b:90:de:87:f9:c9:89:ba:59:14:6e:f7: 9a:e2:28:d1:64:cd:0b:18:e7:ef:ff:4f:b5:cc:46: 26:02:d9:68:8c:7a:53:40:37:8c:f6:18:ac:cc:8f: fa:75:71:36:f9:43:a0:bf:64:ae:6f:26:87:bc:f4: 0a:cb:61:02:b3:1a:6f:16:12:8d:f5:35:49:56:92: ee:6a:95:34:87:e7:96:d8:3b:b0:1d:78:10:04:71: 3a:a7:8b:22:55:4b:df:78:c8:6f:97:df:1e:ad:67: 33:64:31:9a:92:e9:3b:22:4d:5d:67:e7:01:6c:28: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:05:C5:F4:93:07:F4:15:30:19:1C:46:FE:80:B8:06:B0:3F:EC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:99::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f2:61:2a:02:fe:85:64:33:9e:36:71:8b:ad:3b:08:31:f1: 59:82:2d:c6:14:91:28:84:f6:a5:f6:50:81:27:cd:fb:c3:ad: 00:47:54:dc:a1:e0:6d:0e:66:84:78:38:08:3a:2f:f9:45:3d: 73:b3:20:00:76:b3:ff:8c:21:20:57:de:b7:a6:ba:3f:0f:9e: d1:ae:73:d1:13:a8:81:71:b8:ce:b2:00:eb:a0:c5:f5:ef:4b: e6:0f:4f:41:69:1d:07:e8:ab:46:0a:6b:f4:45:c0:73:6d:d8: 0f:2a:85:d5:59:96:eb:03:d4:5f:b7:7e:c2:03:73:b7:c8:b5: 91:27:ce:53:dc:df:bf:e6:34:cf:c8:4f:c8:d4:6a:68:8f:42: 5f:1b:1b:8b:85:0d:ca:0a:26:1c:c8:92:be:64:96:68:59:20: 16:db:ff:e8:21:dc:cd:49:6e:f8:e5:68:7a:7e:34:d5:58:ef: e3:4a:e3:71:e1:73:9e:0a:00:c3:b4:5d:1d:e6:ba:cf:39:86: f8:e3:91:c0:a5:32:37:7e:34:74:53:e0:a9:08:5d:c2:c5:93: 27:5f:98:64:ee:8a:de:3c:0d:40:7b:e3:1b:e5:e2:6d:9e:6a: 01:e1:2a:15:79:04:58:60:0a:c9:c9:be:d9:b4:33:ef:6f:6b: 38:d4:6d:27 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE1XH8GNNGbKiHPIoZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTY0NTUzNWUtMmMzMi00ZmZjLThmMDMtM2ViYmU5MjFiMmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVCJCMjjvfgbX/JxV0NfFC7aMUeuLncn0/sO f3zZg87AWCxH8LT+1hmZr3tuVbQ8e4o1lqVFZP9N4zDkLhTLU7g2yB0JNBuboalu zTLKaiAM2IV8nMq8YqQShhZhozhIQIe1aVVzDNT4I+42QTqhctgC0ofAoQC2HOMy h4FjMOQdWwcWj4uQAclLkN6H+cmJulkUbvea4ijRZM0LGOfv/0+1zEYmAtlojHpT QDeM9hiszI/6dXE2+UOgv2SubyaHvPQKy2ECsxpvFhKN9TVJVpLuapU0h+eW2Duw HXgQBHE6p4siVUvfeMhvl98erWczZDGakuk7Ik1dZ+cBbChtjwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFGAFxfSTB/QVMBkcRv6AuAawP+wAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNDNkM2UxNGMtZWY0YS0z MjgzLWJiNzktYmI3OGFjYzRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACZ AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZPJhKgL+hWQznjZxi607CDHxWYItxhSRKIT2pfZQgSfN+8Ot AEdU3KHgbQ5mhHg4CDov+UU9c7MgAHaz/4whIFfet6a6Pw+e0a5z0ROogXG4zrIA 66DF9e9L5g9PQWkdB+irRgpr9EXAc23YDyqF1VmW6wPUX7d+wgNzt8i1kSfOU9zf v+Y0z8hPyNRqaI9CXxsbi4UNygomHMiSvmSWaFkgFtv/6CHczUlu+OVoen401Vjv 40rjceFzngoAw7RdHea6zzmG+OORwKUyN340dFPgqQhdwsWTJ1+YZO6K3jwNQHvj G+XibZ5qAeEqFXkEWGAKycm+2bQz729rONRtJw== -----END CERTIFICATE-----Generated at Thu Apr 16 22:37:38 2026 by rpki-client