$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa File: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json) Hash identifier: Dp0e+9FeUJ2TTXfmOZyLTeu5kcgHfKu3FvFkVmHG5Vk= Subject key identifier: 79:99:99:A1:91:A1:C1:58:7B:1E:73:40:0C:0A:8B:16:B2:CD:F3:F2 Certificate issuer: /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Certificate serial: 010D0C9F4328584D746FC53C708EA7A466F0C700 Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 984 IP address blocks: 2606:fb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c5:3c:70:8e:a7:a4:66:f0:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=d391a94a-e864-4c16-b0fe-11dafc48f536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:53:ec:d5:a5:94:c5:b8:6e:90:a6:94:d3: 65:86:0a:60:80:86:f7:ac:61:f0:df:31:a1:9b:a6: c8:db:71:9f:43:48:58:52:b3:e0:10:96:11:8a:9f: 53:cc:98:39:4c:e4:14:a5:6e:05:39:4f:9a:59:b0: 06:7a:26:33:c1:a7:ae:b9:ab:1d:5a:97:e1:bd:f6: 28:04:3b:c3:5d:9d:b6:cf:63:a7:0e:da:4d:2c:c9: 97:3e:86:e9:ae:6c:a1:c2:91:c4:e9:f4:24:50:70: c9:30:7b:68:86:f5:9b:0f:ac:cd:19:ff:e9:81:38: 61:4c:8f:e2:54:35:a5:f8:87:ce:29:74:64:ad:3c: 04:e8:c3:e3:d7:90:99:5f:a5:f4:65:8c:df:9c:bc: c3:77:b3:3b:53:8b:35:f7:dd:09:95:dd:bb:d6:0d: d3:d5:3d:82:d1:f0:4f:8a:87:21:33:77:58:4f:5a: 16:76:8d:1d:04:35:79:13:94:45:0c:77:3b:8b:4e: 21:1f:72:7a:19:05:de:6b:19:09:3a:90:69:73:1a: 1c:12:70:e9:8b:12:71:4a:9b:56:c6:32:7c:2a:7f: 83:cf:c1:4b:98:26:01:3c:4d:0e:4a:50:b9:9e:47: b8:b6:34:aa:1b:61:2f:db:d7:33:ce:1f:67:f7:96: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:99:99:A1:91:A1:C1:58:7B:1E:73:40:0C:0A:8B:16:B2:CD:F3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl X509v3 Authority Key Identifier: keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:42:ef:20:fd:d8:cf:70:d1:0b:96:e7:df:3b:24:08:fa:d3: 8f:64:d9:5e:fe:f7:bb:a8:49:df:e1:c1:29:cd:16:e3:da:24: ba:b6:22:67:19:83:6a:90:cd:08:26:ff:e1:b4:8d:0b:f6:ac: c9:94:c0:58:40:02:8d:06:11:e3:02:24:10:4a:e4:1b:e3:f3: 9c:17:61:25:88:0c:0d:03:b7:a7:34:90:bf:0e:33:6b:c6:fa: ba:7d:92:5d:11:46:07:c8:da:fc:2c:68:76:63:d0:46:e1:0b: e4:d3:ea:64:50:bb:b3:3c:60:b5:01:b0:54:5e:0d:07:d3:49: 93:96:00:7c:fa:1a:ac:1e:52:3d:ff:79:f6:68:03:85:56:c0: e8:ab:3c:3a:b2:44:4e:aa:ba:13:71:b5:f6:fc:89:6a:04:db: ae:31:4d:b8:8d:fe:b1:e6:cf:b2:c3:5a:c6:65:1a:bc:62:16: f8:fd:e1:ab:88:4a:96:3a:9a:ed:8b:4b:fe:19:5c:b8:d1:7f: 37:99:dd:72:f6:82:0c:21:da:b0:32:cd:6b:6d:fc:b0:9d:17: c1:04:33:98:48:fa:30:15:44:75:07:7f:a5:94:9e:b9:7e:42: a0:b6:2f:d2:f0:e0:ea:6d:b1:7b:40:dd:f8:09:48:e5:35:70: fe:90:6d:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE10b8U8cI6npGbwxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5 ZjM5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDM5MWE5NGEtZTg2NC00YzE2LWIwZmUtMTFkYWZjNDhmNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65FT7NWllMW4bpCmlNNlhgpggIb3rGHw3zGh m6bI23GfQ0hYUrPgEJYRip9TzJg5TOQUpW4FOU+aWbAGeiYzwaeuuasdWpfhvfYo BDvDXZ22z2OnDtpNLMmXPobprmyhwpHE6fQkUHDJMHtohvWbD6zNGf/pgThhTI/i VDWl+IfOKXRkrTwE6MPj15CZX6X0ZYzfnLzDd7M7U4s1990Jld271g3T1T2C0fBP iochM3dYT1oWdo0dBDV5E5RFDHc7i04hH3J6GQXeaxkJOpBpcxocEnDpixJxSptW xjJ8Kn+Dz8FLmCYBPE0OSlC5nke4tjSqG2Ev29czzh9n95a7XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHmZmaGRocFYex5zQAwKixayzfPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5 OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCvQu8g/djPcNELluffOyQI+tOPZNle/ve7qEnf4cEpzRbj2iS6tiJn GYNqkM0IJv/htI0L9qzJlMBYQAKNBhHjAiQQSuQb4/OcF2EliAwNA7enNJC/DjNr xvq6fZJdEUYHyNr8LGh2Y9BG4Qvk0+pkULuzPGC1AbBUXg0H00mTlgB8+hqsHlI9 /3n2aAOFVsDoqzw6skROqroTcbX2/IlqBNuuMU24jf6x5s+yw1rGZRq8Yhb4/eGr iEqWOprti0v+GVy40X83md1y9oIMIdqwMs1rbfywnRfBBDOYSPowFUR1B3+llJ65 fkKgti/S8ODqbbF7QN34CUjlNXD+kG3K -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:32 2026 by rpki-client