$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa File: aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa (raw, json) Hash identifier: 8ayhNlBohBV+RA7iO2daIhymjt/LAFN2JBcG5dfptWM= Subject key identifier: 2B:4F:4F:14:AE:2F:45:0B:FB:DE:AE:A5:47:AE:81:E3:21:6D:DA:9D Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D747018BF481CC65FD1759AA0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397232 IP address blocks: 2620:74:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:18:bf:48:1c:c6:5f:d1:75:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=31708bec-06cf-467d-afe2-a84e12611ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:12:0b:b5:21:30:40:0d:0f:ce:e7:b5:d8: 27:1b:a5:ae:1a:23:de:b5:4d:14:5c:5f:6c:e6:79: a9:bb:df:71:ac:fe:3b:dc:f0:78:3c:69:f5:15:67: 05:1b:d3:50:13:f7:d7:9d:5a:2b:6f:b0:64:de:4f: 4f:ef:86:c1:f1:d1:64:0d:35:8c:14:5e:ec:14:d6: 36:d3:98:22:d7:80:fc:47:a3:43:06:9b:77:98:f9: 63:12:f6:fd:00:c7:59:3b:4f:42:19:6d:c0:d8:67: aa:21:03:17:7a:82:3f:4a:26:49:a0:3e:37:2a:ff: c0:96:0e:1a:d3:30:01:68:14:76:c3:fc:16:b4:38: bd:35:f9:87:20:3e:ba:e0:6d:21:63:20:00:79:ca: ea:c7:ba:a8:69:5f:b1:dc:f0:cf:6f:ea:d5:57:04: 37:dd:ba:4d:2e:8f:75:b8:02:06:6c:97:06:0d:28: 90:bc:68:07:72:0b:e1:60:23:bf:23:a4:75:e8:a4: aa:81:26:bd:06:d7:fa:56:4b:be:c0:f9:d7:fc:93: f6:13:9b:97:34:cb:28:b1:b8:34:e0:00:75:40:8d: f1:4f:09:84:a9:22:1d:9a:d3:54:87:00:48:cb:06: 79:37:b6:1a:b3:db:1f:60:a8:c2:41:ec:5e:ae:0d: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:4F:14:AE:2F:45:0B:FB:DE:AE:A5:47:AE:81:E3:21:6D:DA:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/aa2aecad-9abe-3f36-8a1f-61992f732f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ed:e4:94:73:5e:71:7a:8e:82:3b:70:66:1b:64:5e:d6:81: b8:88:12:ee:c3:39:07:1c:ae:db:17:48:a0:c6:38:14:27:c2: 3b:9e:49:61:7e:e8:5d:18:70:d8:84:45:30:19:38:41:3e:3d: 20:d4:6b:c1:48:3d:b9:eb:e7:3c:2b:ee:a7:3a:97:4b:b3:30: 94:71:13:0c:0b:24:71:84:11:ed:0f:7f:77:4c:48:db:6f:a0: cd:3b:b2:c6:49:ef:cd:23:31:b3:b6:8a:d1:6b:e6:11:e0:0c: cd:04:d0:d6:ed:3a:c3:73:77:fe:31:44:63:63:e1:74:c6:f4: 90:40:a8:c5:04:d2:d0:41:3f:7e:22:4c:9e:34:76:f6:e0:57: c8:e0:62:e3:6c:ae:58:54:ed:86:48:01:ef:ed:98:7b:66:48: 19:e8:66:13:ac:52:d2:ea:50:9d:cf:df:76:ab:5b:2d:d1:c9: f6:63:6a:93:a5:09:c3:af:34:c9:68:57:b8:17:13:9a:98:19: 10:14:eb:78:10:51:f4:8c:b1:f5:23:cf:f2:68:96:02:d5:24: 40:a8:79:2d:c5:e9:be:37:95:d5:7c:f8:f6:3a:66:9a:ed:1a: 3f:84:34:f9:7e:21:de:1c:b2:be:b6:5e:51:cd:73:75:94:06: 30:90:e4:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBi/SBzGX9F1mqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MzE3MDhiZWMtMDZjZi00NjdkLWFmZTItYTg0ZTEyNjExYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryISC7UhMEAND87ntdgnG6WuGiPetU0UXF9s 5nmpu99xrP473PB4PGn1FWcFG9NQE/fXnVorb7Bk3k9P74bB8dFkDTWMFF7sFNY2 05gi14D8R6NDBpt3mPljEvb9AMdZO09CGW3A2GeqIQMXeoI/SiZJoD43Kv/Alg4a 0zABaBR2w/wWtDi9NfmHID664G0hYyAAecrqx7qoaV+x3PDPb+rVVwQ33bpNLo91 uAIGbJcGDSiQvGgHcgvhYCO/I6R16KSqgSa9Btf6Vku+wPnX/JP2E5uXNMsosbg0 4AB1QI3xTwmEqSIdmtNUhwBIywZ5N7Yas9sfYKjCQexerg2ORQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCtPTxSuL0UL+96upUeugeMhbdqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWEyYWVjYWQtOWFiZS0z ZjM2LThhMWYtNjE5OTJmNzMyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHt5JRzXnF6joI7cGYbZF7WgbiIEu7DOQccrtsXSKDGOBQnwjue SWF+6F0YcNiERTAZOEE+PSDUa8FIPbnr5zwr7qc6l0uzMJRxEwwLJHGEEe0Pf3dM SNtvoM07ssZJ780jMbO2itFr5hHgDM0E0NbtOsNzd/4xRGNj4XTG9JBAqMUE0tBB P34iTJ40dvbgV8jgYuNsrlhU7YZIAe/tmHtmSBnoZhOsUtLqUJ3P33arWy3RyfZj apOlCcOvNMloV7gXE5qYGRAU63gQUfSMsfUjz/JolgLVJECoeS3F6b43ldV8+PY6 ZprtGj+ENPl+Id4csr62XlHNc3WUBjCQ5FA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:55 2026 by rpki-client