$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa File: 682b6135-e067-305c-a752-4e63ad4480df.roa (raw, json) Hash identifier: VENy8iilC4lpiClH4jq7ufX3tbv9e4/KpAYIoQwFW4M= Subject key identifier: B5:4F:E1:68:5D:45:54:A0:F5:41:9F:9F:FE:4D:9B:F4:6F:C6:6D:33 Certificate issuer: /CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Certificate serial: 010D0C9F4328584D65151DE1348ED72D9CF60400 Authority key identifier: 73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 40153 IP address blocks: 2620:8d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1d:e1:34:8e:d7:2d:9c:f6:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd7bd65f-83d2-4046-ad64-40ba458415a2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=1a171760-9dab-4f81-a509-cb285931cb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f8:1b:fb:a6:d9:da:f1:d9:b2:37:11:f2:95: 8f:64:56:59:a0:35:e5:97:df:1c:58:95:28:fe:4c: ab:6c:f9:1b:ae:4d:c3:9a:a8:ee:dd:08:85:49:a4: ec:d9:6a:28:f2:2a:c1:e2:49:fc:b7:64:76:bd:e7: 8a:62:b8:58:b6:d2:4a:71:d4:c5:59:c8:e6:ba:fc: 46:65:6d:c7:5d:09:52:c7:28:4a:c9:6f:40:5e:84: 8f:49:2a:aa:70:9a:d8:d8:0c:8e:31:5d:18:8c:28: eb:db:67:b4:1d:ff:7e:30:79:a5:13:21:4f:f6:3b: 9d:18:22:95:97:e0:f6:df:66:14:d8:a7:20:17:32: 0c:ef:54:bf:87:74:db:c4:ce:8f:60:58:54:b7:34: db:26:40:b6:dc:21:b7:ff:42:cf:b6:81:b6:3f:66: ad:12:30:31:48:b6:fc:95:c9:2d:3c:43:f9:34:b9: e6:ea:a7:d0:fd:c0:68:9b:a0:4e:2e:28:e8:70:5d: c6:07:e1:6c:2c:3d:a3:c2:52:3c:fc:91:2d:fd:05: cf:dd:b2:ac:43:0a:1a:38:c0:b5:05:b9:10:20:17: 39:27:5f:7b:93:22:5d:42:1a:9e:84:ee:b2:84:f0: 06:41:59:b9:40:34:58:9a:27:36:9e:74:58:f1:d0: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:E1:68:5D:45:54:A0:F5:41:9F:9F:FE:4D:9B:F4:6F:C6:6D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/682b6135-e067-305c-a752-4e63ad4480df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2/fd7bd65f-83d2-4046-ad64-40ba458415a2.crl X509v3 Authority Key Identifier: keyid:73:3D:A8:16:7C:90:7B:98:87:54:D1:1B:83:65:83:DF:2B:35:30:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd7bd65f-83d2-4046-ad64-40ba458415a2.cer sbgp-ipAddrBlock: critical IPv6: 2620:8d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:52:7b:d8:65:37:c9:ff:e0:60:45:84:bc:e7:e8:23:2c:4e: 18:7b:80:9b:ca:c3:67:a1:7e:88:39:c4:57:73:14:8c:ee:7e: 03:6a:0c:83:61:b0:6d:e6:cf:53:b6:f3:65:68:f0:4d:fb:30: af:75:e8:35:11:4a:71:a5:aa:e7:12:8a:86:25:49:64:91:ca: fb:16:11:8c:57:3c:33:ff:af:6f:23:79:5f:e2:b8:80:e8:fd: fe:d7:03:8e:34:15:e3:0c:62:ac:ab:ad:0c:b3:c2:aa:7c:cb: ec:5f:4f:46:4c:d4:d2:31:e1:30:69:d4:92:b8:4d:e5:b6:0e: 05:41:23:2f:e5:6f:83:00:82:86:54:5c:12:eb:53:aa:a2:61: 1a:c1:f5:19:cb:11:88:0c:56:cd:89:38:6e:3a:8b:5b:3e:e4: f6:ab:c1:50:46:07:f9:b8:cf:7d:f4:b1:26:00:b1:ad:b6:0f: 1a:1f:84:5d:78:33:ac:fc:7b:1d:9c:72:3a:fc:8c:af:3c:60: c9:1c:d6:2b:91:cb:64:32:69:d3:cb:91:42:c8:d9:f9:eb:a2: d0:76:1b:0c:7b:c8:a3:7a:f5:ec:3a:88:63:73:91:be:2c:67: 0f:9e:ca:a2:53:b5:27:66:f4:48:e5:1c:df:1f:f6:01:fd:b0: a2:10:45:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFR3hNI7XLZz2BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ3YmQ2NWYtODNkMi00MDQ2LWFkNjQtNDBiYTQ1ODQx NWEyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MWExNzE3NjAtOWRhYi00ZjgxLWE1MDktY2IyODU5MzFjYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/gb+6bZ2vHZsjcR8pWPZFZZoDXll98cWJUo /kyrbPkbrk3Dmqju3QiFSaTs2Woo8irB4kn8t2R2veeKYrhYttJKcdTFWcjmuvxG ZW3HXQlSxyhKyW9AXoSPSSqqcJrY2AyOMV0YjCjr22e0Hf9+MHmlEyFP9judGCKV l+D232YU2KcgFzIM71S/h3TbxM6PYFhUtzTbJkC23CG3/0LPtoG2P2atEjAxSLb8 lcktPEP5NLnm6qfQ/cBom6BOLijocF3GB+FsLD2jwlI8/JEt/QXP3bKsQwoaOMC1 BbkQIBc5J197kyJdQhqehO6yhPAGQVm5QDRYmic2nnRY8dBANQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLVP4WhdRVSg9UGfn/5Nm/Rvxm0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdi ZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJhNDU4NDE1YTIvNjgyYjYxMzUtZTA2Ny0z MDVjLWE3NTItNGU2M2FkNDQ4MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ3YmQ2NWYtODNkMi00MDQ2LWFk NjQtNDBiYTQ1ODQxNWEyL2ZkN2JkNjVmLTgzZDItNDA0Ni1hZDY0LTQwYmE0NTg0 MTVhMi5jcmwwHwYDVR0jBBgwFoAUcz2oFnyQe5iHVNEbg2WD3ys1MBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDdiZDY1Zi04M2QyLTQwNDYtYWQ2NC00MGJh NDU4NDE1YTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFSe9hlN8n/4GBFhLzn6CMsThh7gJvKw2ehfog5xFdzFIzufgNq DINhsG3mz1O282Vo8E37MK916DURSnGlqucSioYlSWSRyvsWEYxXPDP/r28jeV/i uIDo/f7XA440FeMMYqyrrQyzwqp8y+xfT0ZM1NIx4TBp1JK4TeW2DgVBIy/lb4MA goZUXBLrU6qiYRrB9RnLEYgMVs2JOG46i1s+5ParwVBGB/m4z330sSYAsa22Dxof hF14M6z8ex2ccjr8jK88YMkc1iuRy2QyadPLkULI2fnrotB2Gwx7yKN69ew6iGNz kb4sZw+eyqJTtSdm9EjlHN8f9gH9sKIQRSQ= -----END CERTIFICATE-----Generated at Sat Apr 18 09:12:55 2026 by rpki-client