$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa File: 45085941-5166-3649-92de-8ad40bad4a58.roa (raw, json) Hash identifier: lO+YzvTtk+em0+jHpYLDjE0O/8W6aGaEM9DEtGhte4o= Subject key identifier: 9C:B1:6E:A1:00:83:61:F0:55:17:F8:F8:A5:93:33:CB:0E:CF:6C:46 Certificate issuer: /CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed Certificate serial: 010D0C9F4328584D7E3533785BA34E1DD22B1D80 Authority key identifier: B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 54057 IP address blocks: 2604:1de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:33:78:5b:a3:4e:1d:d2:2b:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a98125f9-ec1d-4988-bd94-11fb3274a4ed Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=9db7d7f5-4f18-4998-b852-04cf1a6f7c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:a3:be:c9:8a:cd:ad:36:df:b0:4b:a9:df: 95:7d:cc:0a:ff:3a:f7:0e:9a:ab:34:da:3d:04:1e: 79:a5:19:30:f1:73:13:5c:38:fd:09:72:48:ff:cb: 8b:fd:1f:6e:ca:07:b6:28:3e:4d:f9:dd:35:03:bf: da:13:1f:b8:29:7b:67:a3:dc:32:d4:58:b9:2b:a0: 97:8a:46:8c:ba:1d:ca:7c:ab:fe:60:74:ac:d6:ec: 07:b3:59:21:31:06:f7:8b:ed:1c:76:ab:59:a9:70: 45:61:24:42:15:05:7a:55:c1:3c:70:eb:b3:cc:78: 11:b4:83:cf:24:5d:6a:70:52:e3:30:3a:24:fe:cd: 44:ec:78:42:9a:db:f0:93:1f:72:ad:82:91:0d:a7: c7:c0:64:54:33:c9:01:63:28:2e:fd:4d:8b:5b:0c: d5:e6:e8:d4:7f:63:ae:91:66:e4:68:5c:06:0e:a4: 34:38:d3:d1:1e:28:d2:da:be:3c:b4:90:5f:ab:e9: d1:24:07:c4:8d:50:20:96:7b:f6:5f:68:a0:94:ff: 20:13:0c:4d:2f:ca:06:74:1e:c7:b7:44:3d:e3:47: 5c:4f:8c:fd:22:44:0b:f8:85:77:75:46:42:46:c0: 97:1a:9c:21:fc:62:ef:52:78:0d:d0:6f:85:c4:9e: 0b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B1:6E:A1:00:83:61:F0:55:17:F8:F8:A5:93:33:CB:0E:CF:6C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/45085941-5166-3649-92de-8ad40bad4a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed/a98125f9-ec1d-4988-bd94-11fb3274a4ed.crl X509v3 Authority Key Identifier: keyid:B6:3F:13:51:FB:B2:D9:DF:60:B0:87:B8:52:0F:56:73:D5:A3:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a98125f9-ec1d-4988-bd94-11fb3274a4ed.cer sbgp-ipAddrBlock: critical IPv6: 2604:1de0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4f:b5:4d:b7:43:b6:04:02:15:59:60:6a:59:04:98:cc:7d: fd:7e:62:d0:bd:45:a3:16:79:6d:d8:05:2a:60:0b:b1:79:47: 12:70:eb:bb:45:92:f3:58:cf:f3:4c:97:c9:32:1a:48:70:4f: 65:97:73:bb:34:46:dd:51:02:38:96:fd:cf:16:29:2e:c4:f7: 05:24:c4:d4:59:2b:23:af:80:3e:f6:99:a9:e8:98:26:23:f7: 4e:38:49:c3:0d:25:ec:b6:d0:1d:46:31:0e:d0:52:97:59:34: 17:76:69:aa:d8:a9:b3:72:a8:85:b9:2e:06:3d:57:0a:7b:86: 2b:99:93:6b:1a:70:14:42:db:fb:bd:ff:5d:17:09:c1:eb:20: 22:6b:a0:10:23:75:61:5c:6d:71:81:44:32:d5:f7:5a:a9:c5: a2:d1:66:72:21:10:a0:cb:3e:2c:ee:63:fc:3d:11:02:d5:8c: 55:ac:7d:53:2d:b4:02:3e:d4:9f:cf:7e:b1:a5:a6:b1:ba:4e: 47:60:37:d3:4f:75:28:9b:07:86:02:60:39:71:55:6a:5f:6e: 6e:07:a7:9e:34:35:7e:1a:40:2e:1d:52:ce:7d:31:c4:e7:ba: 2c:6d:29:b1:1b:bd:ba:1a:5b:7a:aa:7a:a8:f5:74:f3:dc:cd: 7e:68:0a:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1+NTN4W6NOHdIrHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4MTI1ZjktZWMxZC00OTg4LWJkOTQtMTFmYjMyNzRh NGVkMB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk OWRiN2Q3ZjUtNGYxOC00OTk4LWI4NTItMDRjZjFhNmY3YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloSjvsmKza0237BLqd+VfcwK/zr3DpqrNNo9 BB55pRkw8XMTXDj9CXJI/8uL/R9uyge2KD5N+d01A7/aEx+4KXtno9wy1Fi5K6CX ikaMuh3KfKv+YHSs1uwHs1khMQb3i+0cdqtZqXBFYSRCFQV6VcE8cOuzzHgRtIPP JF1qcFLjMDok/s1E7HhCmtvwkx9yrYKRDafHwGRUM8kBYygu/U2LWwzV5ujUf2Ou kWbkaFwGDqQ0ONPRHijS2r48tJBfq+nRJAfEjVAglnv2X2iglP8gEwxNL8oGdB7H t0Q940dcT4z9IkQL+IV3dUZCRsCXGpwh/GLvUngN0G+FxJ4LAwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJyxbqEAg2HwVRf4+KWTM8sOz2xGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTgx MjVmOS1lYzFkLTQ5ODgtYmQ5NC0xMWZiMzI3NGE0ZWQvNDUwODU5NDEtNTE2Ni0z NjQ5LTkyZGUtOGFkNDBiYWQ0YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk4MTI1ZjktZWMxZC00OTg4LWJk OTQtMTFmYjMyNzRhNGVkL2E5ODEyNWY5LWVjMWQtNDk4OC1iZDk0LTExZmIzMjc0 YTRlZC5jcmwwHwYDVR0jBBgwFoAUtj8TUfuy2d9gsIe4Ug9Wc9WjR7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTgxMjVmOS1lYzFkLTQ5ODgtYmQ5NC0xMWZi MzI3NGE0ZWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQd4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcT7VNt0O2BAIVWWBqWQSYzH39fmLQvUWjFnlt2AUqYAuxeUcScOu7 RZLzWM/zTJfJMhpIcE9ll3O7NEbdUQI4lv3PFikuxPcFJMTUWSsjr4A+9pmp6Jgm I/dOOEnDDSXsttAdRjEO0FKXWTQXdmmq2KmzcqiFuS4GPVcKe4YrmZNrGnAUQtv7 vf9dFwnB6yAia6AQI3VhXG1xgUQy1fdaqcWi0WZyIRCgyz4s7mP8PREC1YxVrH1T LbQCPtSfz36xpaaxuk5HYDfTT3UomweGAmA5cVVqX25uB6eeNDV+GkAuHVLOfTHE 57osbSmxG726Glt6qnqo9XTz3M1+aArx -----END CERTIFICATE-----Generated at Fri Apr 17 18:03:55 2026 by rpki-client