$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa File: 02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa (raw, json) Hash identifier: xOcWT8hWxjzOlK7WRXZrPdRArXxcaIICdlK0tTYMmi0= Subject key identifier: 04:F5:12:7C:EA:75:EA:D6:65:E9:1E:49:9B:18:18:92:46:CB:18:87 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D747017F0320C3D00093136C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397215 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:17:f0:32:0c:3d:00:09:31:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=48d47599-1ab4-4b0a-9c95-ec842046a474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:b6:01:ea:57:95:83:db:ba:bd:d6:83:0d: aa:e4:15:54:05:1e:4f:92:b5:68:d9:e0:9b:2e:94: d5:ce:49:e8:2d:fe:16:2f:2b:62:09:5f:53:c4:6b: 97:c4:7c:73:72:de:2e:e2:99:52:0f:5b:93:26:af: 0c:71:02:4b:b8:4f:62:ac:fb:87:42:b2:08:09:c5: 71:b5:c2:8f:66:4c:ec:d8:ea:9e:0c:55:c9:a2:23: e4:11:a4:ce:bb:c7:54:7d:23:44:fa:b4:97:d8:55: 38:fa:03:fd:cd:3b:06:d5:d3:1c:80:ce:f2:9b:f3: b9:9e:a5:7a:c2:1a:27:ca:ec:c7:d1:97:48:11:d7: 9b:2c:d0:59:2f:42:bf:30:f3:cd:1a:03:72:4d:c7: da:41:42:bf:9c:e7:91:b7:f7:c5:00:74:ae:24:92: 46:2c:35:73:8e:5a:52:a8:b4:b9:32:c1:23:70:7c: 25:86:95:40:76:67:c5:28:79:1f:85:09:e3:27:08: 99:bf:a1:ee:5f:a6:6b:22:03:39:13:ee:4c:af:fb: 3f:cd:35:a5:9d:ca:8c:b6:dd:67:c0:89:83:17:10: b5:6a:0f:8d:42:3b:da:57:60:ce:4f:52:e9:43:82: 3a:2f:eb:dc:ba:2e:6c:cf:8f:d1:a0:46:c6:26:ae: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F5:12:7C:EA:75:EA:D6:65:E9:1E:49:9B:18:18:92:46:CB:18:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d2:eb:fb:00:cc:35:c5:da:2b:5b:ef:5d:35:22:3e:49:86: c0:5a:ff:e1:16:e2:73:7c:be:1d:5a:ae:a8:fb:7a:21:61:e3: 33:09:92:47:48:bb:ec:c3:65:34:bc:e7:eb:0f:3a:43:51:95: d3:69:ae:4f:26:9f:47:00:86:34:ac:04:4d:3c:a1:95:c5:c0: 3c:a7:8b:14:05:17:92:ae:88:03:90:1a:56:98:09:f1:01:c9: 14:43:28:cf:ab:e5:63:1b:7e:1f:b9:63:44:0a:b4:35:09:d7: d4:77:0d:f6:96:4f:02:c8:50:87:28:67:70:0a:0e:96:32:d7: 0f:77:85:6b:45:f4:2d:b2:23:78:ec:12:9a:b5:23:ad:3d:ca: bf:d5:8b:70:48:ca:c2:5a:f7:aa:83:94:e6:72:20:c2:4e:ac: 8d:62:68:e2:9b:b0:3c:47:ce:c4:13:3d:ba:0b:2b:93:18:27: f5:d9:eb:44:e0:d3:f0:51:f3:f4:78:1c:d1:17:3e:cb:8f:e7: 1a:9b:22:a3:09:ee:01:24:f2:9b:9d:a4:c2:13:7d:d9:fd:e7: 36:d7:43:b7:57:bb:f9:cc:0b:81:43:a2:f2:7b:87:47:57:6b: 74:21:fb:ed:3e:28:8f:88:fe:b1:0a:82:02:e2:3b:0f:4a:5b: c5:34:97:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBfwMgw9AAkxNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NDhkNDc1OTktMWFiNC00YjBhLTljOTUtZWM4NDIwNDZhNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIO2AepXlYPbur3Wgw2q5BVUBR5PkrVo2eCb LpTVzknoLf4WLytiCV9TxGuXxHxzct4u4plSD1uTJq8McQJLuE9irPuHQrIICcVx tcKPZkzs2OqeDFXJoiPkEaTOu8dUfSNE+rSX2FU4+gP9zTsG1dMcgM7ym/O5nqV6 whonyuzH0ZdIEdebLNBZL0K/MPPNGgNyTcfaQUK/nOeRt/fFAHSuJJJGLDVzjlpS qLS5MsEjcHwlhpVAdmfFKHkfhQnjJwiZv6HuX6ZrIgM5E+5Mr/s/zTWlncqMtt1n wImDFxC1ag+NQjvaV2DOT1LpQ4I6L+vcui5sz4/RoEbGJq6iTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAT1EnzqderWZekeSZsYGJJGyxiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDJhOWQ3NDctYjBkZi0z ZWY4LTlkNGEtOWE2NzM0MzYzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADzS6/sAzDXF2itb7101Ij5JhsBa/+EW4nN8vh1arqj7eiFh4zMJ kkdIu+zDZTS85+sPOkNRldNprk8mn0cAhjSsBE08oZXFwDynixQFF5KuiAOQGlaY CfEByRRDKM+r5WMbfh+5Y0QKtDUJ19R3DfaWTwLIUIcoZ3AKDpYy1w93hWtF9C2y I3jsEpq1I609yr/Vi3BIysJa96qDlOZyIMJOrI1iaOKbsDxHzsQTPboLK5MYJ/XZ 60Tg0/BR8/R4HNEXPsuP5xqbIqMJ7gEk8pudpMITfdn95zbXQ7dXu/nMC4FDovJ7 h0dXa3Qh++0+KI+I/rEKggLiOw9KW8U0lwI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:49:25 2026 by rpki-client