$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa File: 4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa (raw, json) Hash identifier: LDLmbtIq4hkAlRQyvds+8YHqCCc/y83fTRWJfSv9opE= Subject key identifier: 33:E7:64:09:4D:51:D5:75:34:10:8A:6C:D5:97:6A:45:9B:51:FC:12 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D7A052D6AF924ED9A5F939A00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 2604:b040:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2d:6a:f9:24:ed:9a:5f:93:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=c432f33d-6820-4675-942e-75765d6304e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:01:01:00:81:1c:6b:0e:cb:f1:25:50:99: 77:fa:c0:c9:c1:4b:1b:30:cb:88:e8:96:04:33:97: db:14:e9:e9:72:70:cf:bc:56:e6:aa:b9:6b:72:80: 1f:6a:d0:ad:c4:6d:2b:97:e3:03:3d:e7:da:b3:4b: 79:61:38:70:4b:46:4c:ab:f2:41:ee:81:ef:d0:1b: 47:9c:21:37:5e:8c:fe:35:6d:03:98:ad:27:e8:cc: a3:e6:73:b5:c2:5a:2f:26:40:93:59:e6:96:c4:73: 0d:47:5b:09:49:15:85:0f:22:f1:e0:05:96:85:7a: d0:06:7b:45:a1:eb:da:dd:02:1a:42:f0:7e:bd:42: 5d:55:ae:1d:00:7f:35:82:18:61:76:03:03:bc:2f: e6:6c:f5:41:9a:3f:8c:54:54:65:49:01:2f:2e:12: 3e:cd:d2:5c:67:77:8a:cd:ac:09:89:29:d0:f7:0a: 51:93:70:2c:51:7a:d2:de:a2:b7:31:d1:6a:9f:42: 5e:57:6b:46:81:3f:f2:a3:35:cd:f2:73:1e:8a:a8: c2:be:49:6b:bd:22:36:55:12:7f:e1:0d:18:a5:b2: a0:2b:d3:4c:eb:a2:bf:d3:20:d1:d3:98:1f:33:fb: 8c:75:dc:15:16:09:bb:f9:e6:19:39:7e:da:bf:1c: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E7:64:09:4D:51:D5:75:34:10:8A:6C:D5:97:6A:45:9B:51:FC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4c50cc90-add1-384c-a4d3-fe7c01a5d04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c2:16:df:14:e1:e9:5b:d9:c8:c5:33:ea:2f:08:aa:e8:4f: db:ae:b1:58:c0:1d:cd:ce:db:52:0f:4e:8f:26:88:2f:ad:3f: 68:47:9c:70:fd:b1:ac:fb:d9:a8:18:9b:ee:43:9b:1f:9d:53: 4e:cc:7f:66:f8:19:83:02:bf:0a:1d:a8:85:30:6b:c8:75:3a: 4c:74:cf:88:36:9a:4e:d6:3c:8f:bf:e6:d2:5f:ed:d1:96:a7: e0:61:5d:f0:85:a3:d8:ee:83:6e:e7:86:20:0c:5f:da:c4:82: ce:17:fb:86:69:d6:a7:4e:59:dc:5c:9e:bb:ef:8a:30:24:8d: 35:3d:70:7c:c5:d2:9a:99:64:12:4e:89:02:9e:6f:be:85:6d: 79:30:1e:5d:67:7f:a2:e1:5a:61:c5:16:b4:8e:f0:f0:01:f3: 64:8a:9c:32:33:ef:8d:4b:90:cf:46:e4:80:6f:4e:a5:b5:86: 4a:05:8a:57:4f:e0:db:a4:d0:59:a1:97:5a:bb:98:52:ce:64: dc:08:02:cb:7a:1d:cf:a8:46:c5:a3:18:18:30:ad:63:17:3a: 1d:67:24:8e:18:08:d8:f7:a5:3b:bb:aa:50:d4:d9:1f:3b:31: 4e:ba:3b:54:99:d3:56:a4:14:3a:70:c6:2e:80:ea:f6:04:eb: a5:c0:7b:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BS1q+STtml+TmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YzQzMmYzM2QtNjgyMC00Njc1LTk0MmUtNzU3NjVkNjMwNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNABAQCBHGsOy/ElUJl3+sDJwUsbMMuI6JYE M5fbFOnpcnDPvFbmqrlrcoAfatCtxG0rl+MDPefas0t5YThwS0ZMq/JB7oHv0BtH nCE3Xoz+NW0DmK0n6Myj5nO1wlovJkCTWeaWxHMNR1sJSRWFDyLx4AWWhXrQBntF oeva3QIaQvB+vUJdVa4dAH81ghhhdgMDvC/mbPVBmj+MVFRlSQEvLhI+zdJcZ3eK zawJiSnQ9wpRk3AsUXrS3qK3MdFqn0JeV2tGgT/yozXN8nMeiqjCvklrvSI2VRJ/ 4Q0YpbKgK9NM66K/0yDR05gfM/uMddwVFgm7+eYZOX7avxxeRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDPnZAlNUdV1NBCKbNWXakWbUfwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNGM1MGNjOTAtYWRkMS0z ODRjLWE0ZDMtZmU3YzAxYTVkMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSwQAAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAbCFt8U4elb2cjFM+ovCKroT9uusVjAHc3O21IPTo8miC+tP2hH nHD9saz72agYm+5Dmx+dU07Mf2b4GYMCvwodqIUwa8h1Okx0z4g2mk7WPI+/5tJf 7dGWp+BhXfCFo9jug27nhiAMX9rEgs4X+4Zp1qdOWdxcnrvvijAkjTU9cHzF0pqZ ZBJOiQKeb76FbXkwHl1nf6LhWmHFFrSO8PAB82SKnDIz741LkM9G5IBvTqW1hkoF ildP4Nuk0Fmhl1q7mFLOZNwIAst6Hc+oRsWjGBgwrWMXOh1nJI4YCNj3pTu7qlDU 2R87MU66O1SZ01akFDpwxi6A6vYE66XAe+U= -----END CERTIFICATE-----Generated at Fri Apr 17 18:20:22 2026 by rpki-client