$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa File: 9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json) Hash identifier: 3l+yZ5CZSRpwzuRvtdfnNeu165+JYmi8GHtOJ5XLosw= Subject key identifier: 79:25:EF:3B:7B:D7:8B:3E:F7:C1:8A:52:87:72:32:7E:C9:16:93:C0 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584D86955282A0ADC4683EE78280 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 2620:20:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:52:82:a0:ad:c4:68:3e:e7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e640e0cf-dc47-4cef-bb5c-55bc7542406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:b0:d6:ab:18:c3:5f:8d:dd:1b:33:7a:99: c8:46:f9:1a:7d:05:d2:e1:50:55:dc:ad:2e:a1:e1: 28:71:24:01:f1:12:84:46:41:e1:8c:dc:5d:23:9e: 95:78:4f:45:72:76:e5:9c:c7:c9:ac:0e:aa:b5:59: 31:44:1c:b6:b8:f1:8c:3f:76:ea:d3:ee:58:e8:60: 2f:f4:bc:b4:17:8d:91:7d:f3:b6:a8:bb:ba:73:56: ca:c6:15:8c:2c:56:ee:a0:9f:7e:40:fa:80:52:d6: 24:d7:e7:85:38:12:f0:29:03:c7:60:47:a4:61:a6: 99:65:3c:de:a9:3f:ef:3f:53:85:53:1a:f2:67:54: 1a:18:4f:f3:15:c1:4b:0d:d7:1e:2b:0c:11:c5:a9: bf:67:d7:30:1e:9d:b2:02:a0:5f:22:0e:76:c9:0c: b8:c5:13:ae:73:c3:be:e4:9a:6f:b2:aa:62:20:9d: f0:df:fd:12:1b:67:eb:25:0f:4c:1a:e1:35:94:26: 3c:c5:04:47:f0:45:50:6b:30:ae:f7:2e:2e:bf:a2: 8c:05:75:54:2e:14:99:b0:48:70:29:7b:9a:b5:b5: 23:c3:95:d9:fd:69:1c:8b:25:52:5e:e2:11:61:ac: 25:fe:12:c3:b7:e5:ca:87:13:86:0d:5e:e9:f4:32: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:EF:3B:7B:D7:8B:3E:F7:C1:8A:52:87:72:32:7E:C9:16:93:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:04:7f:04:5e:48:81:93:a7:c4:87:d9:71:ca:b8:5c:18:ce: f7:cb:fc:a8:e2:13:8a:c9:36:3f:c9:a6:3c:8b:68:44:41:2c: 41:41:6d:ec:3a:67:97:5d:67:41:0a:53:08:7a:97:75:66:86: 50:5a:83:02:b5:68:ea:b6:57:4a:d1:27:ba:db:94:30:88:9a: 91:85:f4:bd:11:0f:bd:53:56:1e:74:ee:6a:a0:86:e7:5a:41: 4a:0d:59:bb:22:3b:a1:81:9f:fc:47:ed:4f:5c:f5:7f:bf:9e: e9:53:cc:95:96:d2:c4:5f:09:38:26:96:50:a2:81:92:aa:cc: 96:a8:12:4e:62:d8:a0:60:b6:aa:34:8c:4f:1f:96:eb:e6:07: 20:74:c8:58:20:90:78:1e:61:61:3e:38:28:29:60:a8:07:df: 08:c3:55:50:11:bd:86:c8:59:12:ad:08:a7:b8:84:09:27:82: e0:22:c2:c5:17:a5:d5:29:f2:da:01:dd:0b:83:1a:1b:59:7d: fa:10:3d:cb:f8:11:9b:dd:21:2c:4d:90:26:63:61:db:a4:b8: c8:72:e2:e3:96:5f:e4:23:1f:2c:11:5a:b8:4a:be:ba:5e:c8: 4a:b2:98:fd:81:e6:49:93:bc:65:30:48:18:24:c7:01:12:fa: f2:e4:d2:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2GlVKCoK3EaD7ngoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTY0MGUwY2YtZGM0Ny00Y2VmLWJiNWMtNTViYzc1NDI0MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3aw1qsYw1+N3RszepnIRvkafQXS4VBV3K0u oeEocSQB8RKERkHhjNxdI56VeE9FcnblnMfJrA6qtVkxRBy2uPGMP3bq0+5Y6GAv 9Ly0F42RffO2qLu6c1bKxhWMLFbuoJ9+QPqAUtYk1+eFOBLwKQPHYEekYaaZZTze qT/vP1OFUxryZ1QaGE/zFcFLDdceKwwRxam/Z9cwHp2yAqBfIg52yQy4xROuc8O+ 5JpvsqpiIJ3w3/0SG2frJQ9MGuE1lCY8xQRH8EVQazCu9y4uv6KMBXVULhSZsEhw KXuatbUjw5XZ/WkciyVSXuIRYawl/hLDt+XKhxOGDV7p9DLapQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkl7zt714s+98GKUodyMn7JFpPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvOTAxMmVkNjMtODc4YS0z ODE0LWFiMzItZGI3ZDc1NzhiNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEEfwReSIGTp8SH2XHKuFwYzvfL/KjiE4rJNj/JpjyLaERBLEFB bew6Z5ddZ0EKUwh6l3VmhlBagwK1aOq2V0rRJ7rblDCImpGF9L0RD71TVh507mqg hudaQUoNWbsiO6GBn/xH7U9c9X+/nulTzJWW0sRfCTgmllCigZKqzJaoEk5i2KBg tqo0jE8fluvmByB0yFggkHgeYWE+OCgpYKgH3wjDVVARvYbIWRKtCKe4hAknguAi wsUXpdUp8toB3QuDGhtZffoQPcv4EZvdISxNkCZjYdukuMhy4uOWX+QjHywRWrhK vrpeyEqymP2B5kmTvGUwSBgkxwES+vLk0qs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:33 2026 by rpki-client