$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa File: 9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json) Hash identifier: mqM/d+AsB/cZayv0/vhVyVLwmMFmd2CcjFVW/goryvg= Subject key identifier: DE:52:C9:12:25:9F:1F:71:33:BA:07:81:73:EE:63:40:EB:51:5F:04 Certificate issuer: /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554 Certificate serial: 010D0C9F4328584D59EA72A4DB86C9D885A33480 Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 27419 IP address blocks: 2606:2f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:72:a4:db:86:c9:d8:85:a3:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=4ccd4bf5-370d-40dd-a3a5-f8e16cead6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:94:6d:79:82:b1:fa:41:32:cc:13:14:9e: 04:8e:6d:22:bb:ba:76:92:45:87:65:cd:ac:77:6a: fb:b2:20:e2:23:76:a0:51:93:4f:5e:0f:18:8d:61: b3:4c:b3:98:a4:60:66:b8:2d:03:72:bb:28:5b:3b: bb:4f:24:1e:3b:42:f0:7b:c8:67:95:6a:58:96:c7: 39:5b:9d:40:71:11:15:76:28:70:c9:fe:56:74:5e: 91:b0:fe:22:93:42:8a:fd:db:78:9a:ce:db:8f:88: 1a:21:06:2a:90:cf:c9:40:16:c9:8a:cf:01:7a:f3: 67:68:4e:82:3c:b9:a1:16:9f:cf:e5:e2:5b:f3:52: 11:2c:ec:1e:29:17:db:15:51:52:93:08:f7:5f:64: ad:ea:41:9b:1e:db:6f:72:0a:f4:65:cc:47:b8:ba: af:fc:fc:ad:8b:44:96:5f:b0:22:10:1c:5c:97:8f: 14:ca:45:67:4b:e4:5a:d1:00:64:48:3d:cd:08:1d: 3c:e9:bf:e5:a0:31:ab:e8:c7:de:7a:8c:32:55:4d: 97:0e:c8:fb:bf:38:f1:19:38:11:25:21:ee:81:fc: 2c:de:4f:67:67:29:64:70:ae:43:b9:4d:3e:fc:40: 72:52:31:e1:d1:02:dc:9a:bb:9d:9b:4d:b0:70:b4: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:52:C9:12:25:9F:1F:71:33:BA:07:81:73:EE:63:40:EB:51:5F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl X509v3 Authority Key Identifier: keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer sbgp-ipAddrBlock: critical IPv6: 2606:2f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f9:89:4d:42:92:56:10:4f:de:c8:fb:f4:4f:ec:b3:e5:fb: 36:2c:b4:0d:83:d7:1c:b5:bf:07:91:bc:cc:f8:20:98:5d:3f: 5b:4a:d3:1a:42:5c:cf:bd:9e:47:ab:b6:0a:94:66:e6:80:9c: d2:b5:58:63:bb:09:88:81:6c:25:e6:1c:bd:f4:46:f0:3a:e2: 81:63:55:26:52:fc:3d:08:c7:98:f6:c8:c3:98:67:8b:9f:25: 9b:fa:a8:65:76:71:a2:c6:83:2a:70:76:42:95:d9:e9:9b:fe: 96:9b:45:95:2c:5d:d8:ee:de:6c:83:0d:89:94:7d:b2:4a:f8: 91:2b:52:e1:0c:9c:53:b4:73:b7:d3:8c:9e:53:2b:2e:7f:bd: 1d:29:6b:95:df:ef:13:57:bf:d9:69:57:39:16:98:e7:2f:7a: 5c:fc:1d:ea:a9:a6:fc:bb:ee:ed:32:34:5c:14:b5:f4:36:55: d6:11:aa:37:28:1b:42:4c:dc:da:e9:2a:5d:26:03:d5:88:24: c3:9f:6b:ae:3f:bb:d6:36:1d:df:b4:3b:c3:bd:81:bf:0a:31: 15:6b:cc:47:45:d9:fc:1e:35:e7:9b:0b:3e:50:73:26:59:4f: c7:95:d5:35:c4:50:e0:fa:87:64:a2:4e:43:2f:a6:11:b2:36: 79:c6:36:8c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Z6nKk24bJ2IWjNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExMmZjYmUtYjY5MS00YWMzLWIwZGItOGRiMGMyN2Yz NTU0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NGNjZDRiZjUtMzcwZC00MGRkLWEzYTUtZjhlMTZjZWFkNmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXWUbXmCsfpBMswTFJ4Ejm0iu7p2kkWHZc2s d2r7siDiI3agUZNPXg8YjWGzTLOYpGBmuC0DcrsoWzu7TyQeO0Lwe8hnlWpYlsc5 W51AcREVdihwyf5WdF6RsP4ik0KK/dt4ms7bj4gaIQYqkM/JQBbJis8BevNnaE6C PLmhFp/P5eJb81IRLOweKRfbFVFSkwj3X2St6kGbHttvcgr0ZcxHuLqv/Pyti0SW X7AiEBxcl48UykVnS+Ra0QBkSD3NCB086b/loDGr6MfeeowyVU2XDsj7vzjxGTgR JSHugfws3k9nZylkcK5DuU0+/EByUjHh0QLcmrudm02wcLQ5cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN5SyRIlnx9xM7oHgXPuY0DrUV8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEy ZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIwYzI3ZjM1NTQvOTg5NzY3M2ItZGEzMC0z NDJlLWEyYWUtYTA2MTFjZGNkM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2ExMmZjYmUtYjY5MS00YWMzLWIw ZGItOGRiMGMyN2YzNTU0LzdhMTJmY2JlLWI2OTEtNGFjMy1iMGRiLThkYjBjMjdm MzU1NC5jcmwwHwYDVR0jBBgwFoAU5khlibUjHC90BBrO+czt6CORtRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEyZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIw YzI3ZjM1NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYvADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAT+YlNQpJWEE/eyPv0T+yz5fs2LLQNg9cctb8HkbzM+CCYXT9bStMa QlzPvZ5Hq7YKlGbmgJzStVhjuwmIgWwl5hy99EbwOuKBY1UmUvw9CMeY9sjDmGeL nyWb+qhldnGixoMqcHZCldnpm/6Wm0WVLF3Y7t5sgw2JlH2ySviRK1LhDJxTtHO3 04yeUysuf70dKWuV3+8TV7/ZaVc5FpjnL3pc/B3qqab8u+7tMjRcFLX0NlXWEao3 KBtCTNza6SpdJgPViCTDn2uuP7vWNh3ftDvDvYG/CjEVa8xHRdn8HjXnmws+UHMm WU/HldU1xFDg+odkok5DL6YRsjZ5xjaM -----END CERTIFICATE-----Generated at Fri Apr 17 16:40:53 2026 by rpki-client