$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa File: 10b14d09-bbe6-3825-990a-eede0fc019c2.roa (raw, json) Hash identifier: x+S7Ck0LH6RgUpvhcNLrtZRlW8K1em4SPTjc8uLCgWk= Subject key identifier: 55:78:08:45:9C:B9:CE:F2:3B:25:7A:16:C8:83:04:B3:D7:64:E3:3A Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D65152C18D41296E4E4214B70 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 396982 IP address blocks: 2602:800:2000::/40 maxlen: 40 2602:800:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2c:18:d4:12:96:e4:e4:21:4b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=8fece400-3ed8-4cd4-983b-647abca41b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:42:a2:83:f9:0b:c0:f9:65:4a:4c:94:05: 77:12:4c:70:8a:34:87:b2:fc:64:c8:2d:08:c3:3d: ac:82:52:44:7d:db:fc:23:7b:21:4f:b5:63:0e:80: 44:50:40:f7:de:7f:fa:32:b7:22:5f:27:d7:10:4c: 3b:8d:cb:97:45:23:e7:57:fe:e6:70:ed:ab:00:b3: 29:3f:5f:c0:a1:50:2e:53:a4:58:87:07:1f:68:80: 8b:9a:ff:57:fc:0c:e0:5f:f0:2c:08:b1:ae:ea:c2: 41:d5:85:c5:5d:b9:d3:2c:bc:06:33:b5:be:b7:b3: 8b:13:74:90:f9:0a:fa:1a:e8:62:fc:25:ad:8b:51: 6c:06:4b:13:74:ea:67:8b:fc:68:b3:7c:91:e7:38: 1a:f6:0d:0b:e5:11:79:bd:40:42:12:98:e0:01:d5: 66:da:7f:24:21:71:5f:f3:f1:4b:16:7c:6d:4a:c9: 37:12:1c:c5:71:83:01:32:8e:7d:db:75:ca:ab:cf: ca:f4:05:5e:47:d6:e3:7b:dc:cf:b3:fe:66:cd:34: 59:aa:42:8a:0f:47:2c:73:b5:e7:49:d5:26:7c:d3: 5d:0c:8b:46:0e:59:c4:94:65:74:9f:42:4b:68:b8: 79:36:6b:b5:33:0c:28:fa:8f:a0:49:d3:5f:14:4c: 67:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:78:08:45:9C:B9:CE:F2:3B:25:7A:16:C8:83:04:B3:D7:64:E3:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/10b14d09-bbe6-3825-990a-eede0fc019c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f9:85:53:47:04:03:84:54:dc:16:55:a1:f5:8d:be:49:a0: e9:88:fe:46:4b:80:1a:31:e5:fa:5e:0b:c5:69:15:03:34:58: f6:69:1c:03:4e:56:7a:f1:66:4d:51:a9:0d:69:6a:57:ef:8a: d6:34:3c:09:bc:e0:d7:f9:7f:54:12:a0:b6:87:fc:af:e2:2a: 13:4a:f4:8a:e1:68:cc:e0:22:ec:17:fa:26:e4:d5:af:ec:15: 0d:b0:ef:09:be:92:43:ae:96:8f:6c:77:f8:34:9c:0a:f4:1d: 9c:b1:14:6f:f8:61:f2:e5:21:d2:6e:75:dc:58:39:22:81:68: 10:77:d1:fb:f5:68:9c:76:4f:32:d6:78:a0:62:af:12:5a:1c: 6b:32:68:1d:63:13:a8:b2:19:e1:6b:83:eb:0f:5f:33:e9:65: c0:a8:5f:12:c7:e7:70:f0:d2:f2:82:50:21:c4:4f:8b:32:38: 81:18:aa:7b:27:f4:af:3d:1a:2c:d8:de:fe:0d:8a:27:70:fb: 3f:56:1c:52:6e:ab:84:bc:aa:ea:64:c9:59:15:5e:0b:37:00: ad:b7:a5:9e:56:ac:00:35:c7:e8:58:d7:62:9f:48:f1:f0:e2: 58:5a:b0:ff:b4:42:2c:8f:ad:4b:b0:b7:63:64:fd:43:05:ff: 67:28:45:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1lFSwY1BKW5OQhS3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OGZlY2U0MDAtM2VkOC00Y2Q0LTk4M2ItNjQ3YWJjYTQxYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj9CooP5C8D5ZUpMlAV3EkxwijSHsvxkyC0I wz2sglJEfdv8I3shT7VjDoBEUED33n/6MrciXyfXEEw7jcuXRSPnV/7mcO2rALMp P1/AoVAuU6RYhwcfaICLmv9X/AzgX/AsCLGu6sJB1YXFXbnTLLwGM7W+t7OLE3SQ +Qr6Guhi/CWti1FsBksTdOpni/xos3yR5zga9g0L5RF5vUBCEpjgAdVm2n8kIXFf 8/FLFnxtSsk3EhzFcYMBMo5923XKq8/K9AVeR9bje9zPs/5mzTRZqkKKD0csc7Xn SdUmfNNdDItGDlnElGV0n0JLaLh5Nmu1Mwwo+o+gSdNfFExnGwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFV4CEWcuc7yOyV6FsiDBLPXZOM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMTBiMTRkMDktYmJlNi0z ODI1LTk5MGEtZWVkZTBmYzAxOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKvmFU0cEA4RU3BZVofWNvkmg6Yj+RkuAGjHl+l4LxWkVAzRY9mkc A05WevFmTVGpDWlqV++K1jQ8Cbzg1/l/VBKgtof8r+IqE0r0iuFozOAi7Bf6JuTV r+wVDbDvCb6SQ66Wj2x3+DScCvQdnLEUb/hh8uUh0m513Fg5IoFoEHfR+/VonHZP MtZ4oGKvElocazJoHWMTqLIZ4WuD6w9fM+llwKhfEsfncPDS8oJQIcRPizI4gRiq eyf0rz0aLNje/g2KJ3D7P1YcUm6rhLyq6mTJWRVeCzcArbelnlasADXH6FjXYp9I 8fDiWFqw/7RCLI+tS7C3Y2T9QwX/ZyhF5g== -----END CERTIFICATE-----Generated at Fri Apr 17 18:27:06 2026 by rpki-client