$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa File: e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa (raw, json) Hash identifier: TPlU4w/FX6+IoeKONAoQIabi0dQ6iHENfoXGZYKsx5s= Subject key identifier: 3E:1B:A4:A7:0F:38:73:EE:1C:73:25:61:A8:EB:DA:5A:F0:46:5B:E5 Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584D75D52714E862666DAC2259C0 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 30165 IP address blocks: 2604:e540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:27:14:e8:62:66:6d:ac:22:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=add5d679-859f-4bd6-976d-e3c1d4bb370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:bd:9e:4b:87:04:8d:42:1a:e6:d6:f2:50: ed:ba:31:35:50:8c:eb:7d:35:e6:be:91:6c:e1:4d: f3:1d:20:22:62:8f:e5:0c:b0:b7:cd:55:51:cd:07: 14:f5:0a:5c:72:f6:38:1a:5e:dd:c9:90:48:bc:93: b7:9a:b0:c6:7d:41:63:12:47:d8:9e:bc:05:87:2b: dd:f4:d7:37:a9:52:95:d1:51:21:27:46:42:a2:34: c5:0d:ac:cc:2f:d9:69:ea:c4:3d:77:37:f2:b2:fb: 67:18:bc:21:01:11:9a:05:ea:e5:ae:1f:bb:07:92: 3a:39:62:17:a8:64:90:5d:a2:c4:b4:fe:3b:99:25: f3:d8:2b:f6:a0:f2:8f:ac:e6:b6:52:1b:f5:3e:42: 07:c0:b7:e6:57:cf:d6:7e:08:ec:b2:79:4c:32:c6: 95:1a:49:17:00:b5:a9:b3:22:70:72:bd:50:f4:5f: 5f:3d:be:bb:3c:e4:96:e4:d7:6c:93:8a:cd:c8:4f: 58:9f:09:07:17:15:9a:2d:03:03:11:89:d7:13:6a: 62:75:4f:fd:1f:69:77:b9:a3:57:56:38:0f:d8:29: 53:f5:bd:a5:6a:86:c6:a8:8c:58:5f:01:f8:1e:ce: fb:7e:21:94:b0:41:4b:2a:d8:18:76:37:dd:97:fa: ae:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1B:A4:A7:0F:38:73:EE:1C:73:25:61:A8:EB:DA:5A:F0:46:5B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/e152d5ef-5abc-3de2-8e1e-e2ec20e821b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv6: 2604:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e4:98:43:68:d3:eb:75:a9:21:3c:55:bc:6e:9e:f2:99:59: 0d:dc:a2:3e:52:21:06:55:0e:f6:e3:97:70:a2:c8:e7:3d:81: c4:3e:02:fe:04:82:00:1a:cc:d3:ad:39:14:a8:63:c6:b0:7c: bc:c6:bd:26:ed:26:a0:4c:62:d5:f3:65:59:67:38:c7:39:13: 33:bf:c8:50:a3:8c:d0:e7:57:10:c7:06:53:16:49:2c:1a:0d: 56:0a:8b:06:da:af:c1:f3:52:35:c2:7a:83:8c:6a:0c:02:4b: b7:7d:18:1d:f4:33:bb:f2:59:12:1b:01:18:8d:21:cd:cd:41: 75:03:62:26:34:8a:0a:3c:66:2d:78:e4:c2:eb:7a:cb:fe:11: 5e:92:99:ed:6f:d8:cb:5b:f5:00:fe:02:85:95:2f:42:13:39: b2:ab:d5:ed:42:ac:9a:ed:ab:0d:7b:2c:90:8d:ed:c2:5f:03: 58:cc:c0:c1:d3:e8:b9:bb:b6:be:05:4e:58:44:15:9b:1d:31: 40:d4:8a:db:57:16:53:99:e3:df:48:ae:04:1e:df:70:08:34: 26:33:51:7c:03:af:f7:c5:ad:94:e0:a4:87:a4:71:0a:50:43: f1:01:9a:a4:58:6e:ca:b0:fc:d8:49:3d:f9:19:79:86:19:5f: 07:ab:3e:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE111ScU6GJmbawiWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YWRkNWQ2NzktODU5Zi00YmQ2LTk3NmQtZTNjMWQ0YmIzNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/a9nkuHBI1CGubW8lDtujE1UIzrfTXmvpFs 4U3zHSAiYo/lDLC3zVVRzQcU9QpccvY4Gl7dyZBIvJO3mrDGfUFjEkfYnrwFhyvd 9Nc3qVKV0VEhJ0ZCojTFDazML9lp6sQ9dzfysvtnGLwhARGaBerlrh+7B5I6OWIX qGSQXaLEtP47mSXz2Cv2oPKPrOa2Uhv1PkIHwLfmV8/WfgjssnlMMsaVGkkXALWp syJwcr1Q9F9fPb67POSW5Ndsk4rNyE9YnwkHFxWaLQMDEYnXE2pidU/9H2l3uaNX VjgP2ClT9b2laobGqIxYXwH4Hs77fiGUsEFLKtgYdjfdl/quXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD4bpKcPOHPuHHMlYajr2lrwRlvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvZTE1MmQ1ZWYtNWFiYy0z ZGUyLThlMWUtZTJlYzIwZTgyMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTlQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAB5JhDaNPrdakhPFW8bp7ymVkN3KI+UiEGVQ7245dwosjnPYHEPgL+ BIIAGszTrTkUqGPGsHy8xr0m7SagTGLV82VZZzjHORMzv8hQo4zQ51cQxwZTFkks Gg1WCosG2q/B81I1wnqDjGoMAku3fRgd9DO78lkSGwEYjSHNzUF1A2ImNIoKPGYt eOTC63rL/hFekpntb9jLW/UA/gKFlS9CEzmyq9XtQqya7asNeyyQje3CXwNYzMDB 0+i5u7a+BU5YRBWbHTFA1IrbVxZTmePfSK4EHt9wCDQmM1F8A6/3xa2U4KSHpHEK UEPxAZqkWG7KsPzYST35GXmGGV8Hqz6m -----END CERTIFICATE-----Generated at Fri Apr 17 13:48:41 2026 by rpki-client