$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa File: f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json) Hash identifier: Ae7de7piLsPw1544CAM1PIGCtgRerYE1wkZAayLRzMM= Subject key identifier: 2B:0F:E3:73:72:E5:7A:8E:40:96:FC:DA:FB:B9:F2:A9:7E:C7:1D:FD Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F4328584D6C0FB8DCD1ACE4780854FAC0 Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 2620:c3:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b8:dc:d1:ac:e4:78:08:54:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=d50a9a4c-593f-4888-b099-25ce4b353575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e0:4e:ce:f3:7a:ba:b5:ed:06:f5:2f:17:9b: 14:0b:c2:c0:69:56:1f:99:e4:9b:93:dd:20:9d:06: 2a:db:fa:8d:3f:31:f9:79:de:c7:b7:2f:17:e0:04: e2:fc:90:cf:3e:28:7d:aa:5d:45:08:61:73:31:82: d3:4e:6b:0f:65:21:c4:26:80:0a:e4:00:10:40:b0: 82:e8:42:dc:91:c3:67:ab:80:99:e3:fc:9d:81:33: 68:6d:42:bf:9c:a8:b7:60:ff:6e:36:86:8a:8c:93: 82:f5:75:ed:7c:3f:22:27:6e:04:cc:e7:4e:52:5b: 6c:37:f1:1e:31:d5:80:f7:91:26:33:d9:31:b2:b7: 03:97:b3:f0:5f:c8:27:9e:76:0a:ca:57:88:f7:55: 45:28:8a:01:75:50:cb:06:31:cc:27:75:ee:ab:80: bb:a5:dc:64:19:4a:5b:50:b0:51:e3:cd:87:8f:f2: f7:8f:3c:7d:b1:92:54:41:89:3b:71:31:ae:4b:9e: bc:e1:0a:32:03:82:92:03:22:99:62:35:8e:2a:f1: 55:c3:33:03:2b:19:b2:be:c8:55:4e:20:8d:3f:3c: f2:b7:2a:9d:94:a8:db:cd:57:a2:5d:d6:97:e6:6b: 37:31:fa:00:c5:90:86:39:f3:fb:a5:f3:75:89:99: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0F:E3:73:72:E5:7A:8E:40:96:FC:DA:FB:B9:F2:A9:7E:C7:1D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv6: 2620:c3:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c6:96:76:34:a6:e5:5f:eb:39:1a:c1:6a:58:02:78:57:58: 43:cd:24:bb:79:25:b9:39:64:18:73:f8:3e:55:6d:83:f3:8c: 9a:ce:6f:be:4b:0f:08:3a:fe:3a:79:b6:e4:1d:c6:b7:47:9f: 4d:54:0b:3f:21:b9:7a:f6:21:ed:fd:5f:b5:9b:dd:6b:eb:9a: 09:eb:bb:a9:c9:82:6c:18:d1:81:aa:22:1b:64:ec:89:01:7d: cc:ad:66:0d:11:ac:21:64:b1:85:64:b0:11:0c:f1:9e:7d:af: e9:3d:a8:8d:95:fa:80:bf:49:b2:a4:83:bc:fb:04:ff:f9:13: 35:81:06:98:32:1e:be:6d:c7:88:7c:47:73:82:81:ce:ca:2a: 6f:e2:95:2a:08:ce:3a:af:72:8f:f7:48:71:26:0c:26:07:76: d2:4f:98:bd:77:33:cd:21:32:b6:f7:32:7d:fb:d3:0b:fe:3c: 55:69:95:8a:7a:a2:97:a3:28:40:3b:e2:f0:e4:41:6b:fc:f3: 4b:ee:07:fb:ad:54:2f:b5:62:3e:b8:cf:45:3a:ec:e2:75:bf: 4a:5e:f3:50:81:7d:25:e1:ad:8a:47:77:84:01:d0:3c:70:7b: c0:b6:4b:cb:51:5d:09:ec:8f:69:ff:9f:b4:9e:74:a9:ce:db: 74:05:6f:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD7jc0azkeAhU+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZDUwYTlhNGMtNTkzZi00ODg4LWIwOTktMjVjZTRiMzUzNTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uBOzvN6urXtBvUvF5sUC8LAaVYfmeSbk90g nQYq2/qNPzH5ed7Hty8X4ATi/JDPPih9ql1FCGFzMYLTTmsPZSHEJoAK5AAQQLCC 6ELckcNnq4CZ4/ydgTNobUK/nKi3YP9uNoaKjJOC9XXtfD8iJ24EzOdOUltsN/Ee MdWA95EmM9kxsrcDl7PwX8gnnnYKyleI91VFKIoBdVDLBjHMJ3Xuq4C7pdxkGUpb ULBR482Hj/L3jzx9sZJUQYk7cTGuS5684QoyA4KSAyKZYjWOKvFVwzMDKxmyvshV TiCNPzzytyqdlKjbzVeiXdaX5ms3MfoAxZCGOfP7pfN1iZkeewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsP43Ny5XqOQJb82vu58ql+xx39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvZjUzM2QxNmUtZjBiMC0z YjM2LThhYWItMzJlZDViMTA3ODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAw+AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHGlnY0puVf6zkawWpYAnhXWEPNJLt5Jbk5ZBhz+D5VbYPzjJrO b75LDwg6/jp5tuQdxrdHn01UCz8huXr2Ie39X7Wb3Wvrmgnru6nJgmwY0YGqIhtk 7IkBfcytZg0RrCFksYVksBEM8Z59r+k9qI2V+oC/SbKkg7z7BP/5EzWBBpgyHr5t x4h8R3OCgc7KKm/ilSoIzjqvco/3SHEmDCYHdtJPmL13M80hMrb3Mn370wv+PFVp lYp6opejKEA74vDkQWv880vuB/utVC+1Yj64z0U67OJ1v0pe81CBfSXhrYpHd4QB 0Dxwe8C2S8tRXQnsj2n/n7SedKnO23QFby8= -----END CERTIFICATE-----Generated at Fri Apr 17 23:02:20 2026 by rpki-client