$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa File: 2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa (raw, json) Hash identifier: BfI1Ju4C2qldvFJlb95hq4QyhtoEh+ifV9VZv3pKsWA= Subject key identifier: FD:26:0D:61:1E:DE:15:D8:2E:91:59:A0:D3:73:C2:BE:D3:AE:AD:93 Certificate issuer: /CN=4a595a80-2106-455a-be91-2aa623280126 Certificate serial: 010D0C9F4328584D4D5A4121C43E2031DB483AC0 Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 2604:11a0:1000::/40 maxlen: 48 2604:11a0:1100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:41:21:c4:3e:20:31:db:48:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a595a80-2106-455a-be91-2aa623280126 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ab18d9ed-fccd-4928-86c3-b44e41673bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:99:94:11:48:80:33:82:1f:b3:94:1f:18: 5f:88:78:d2:d5:c2:f9:7a:e7:f7:2a:99:b6:0e:0c: 36:18:03:07:23:44:56:54:4e:34:59:86:2d:35:39: 9b:b0:25:f0:d6:c0:cf:0c:e9:9c:14:99:df:f9:8e: 4d:a3:a7:83:46:7a:86:b0:ef:85:e0:b5:ef:ae:45: 4f:47:dc:00:4f:f8:52:90:66:c4:7e:a3:12:db:bb: 97:ce:87:70:ed:f3:69:f0:7e:d9:2f:5d:79:20:68: b4:f0:9b:e9:fb:cb:fe:d4:91:66:86:36:2f:46:d1: 11:6f:19:49:f3:f7:f6:19:a1:93:08:e5:f2:2f:ec: 67:7d:ef:2f:95:16:a7:6d:2e:4f:49:e8:e8:6e:98: 65:32:e8:24:dd:b6:d8:43:6b:94:1e:00:ed:6b:2b: fb:1e:56:2b:2f:7d:94:74:4c:6b:6b:05:fe:5c:d5: 54:9f:ad:67:37:6a:f0:e3:28:07:0c:a2:35:1f:2c: 45:97:6e:b1:5d:0e:2c:89:68:80:9f:a2:47:5e:41: b1:c1:82:d0:c5:d3:36:ca:f5:a9:50:a2:c7:2a:e8: 73:c0:1b:74:f2:d4:44:c5:9a:aa:3a:be:bf:9b:51: ca:95:ff:a9:94:ce:5b:be:c8:ed:b2:73:f6:b6:71: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:0D:61:1E:DE:15:D8:2E:91:59:A0:D3:73:C2:BE:D3:AE:AD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/2a4adbc6-c997-3d2f-be8d-1314e8a44713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl X509v3 Authority Key Identifier: keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer sbgp-ipAddrBlock: critical IPv6: 2604:11a0:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c2:b7:26:05:da:0d:a6:de:92:e0:2f:a6:ff:f8:db:46:18: b0:f6:ea:00:1c:36:40:58:5d:91:0b:d9:86:4d:ba:4a:62:1d: e3:ad:db:52:ea:c7:58:df:e5:7b:98:0d:99:27:9a:a1:94:ba: 0f:7b:09:5b:f2:f7:09:a0:a5:d9:10:db:5e:99:de:14:c8:43: 80:95:f3:dc:c9:8f:63:bb:63:e2:36:e3:91:eb:a4:7f:28:5c: 7e:26:b6:bd:6c:0b:23:de:4b:34:04:89:b7:3f:ae:34:34:5a: 0e:e4:08:40:32:1a:02:06:bb:cc:d0:ca:c2:a8:1a:63:86:ac: 75:2c:70:fc:f4:7c:8c:2e:85:ca:ba:66:7a:a0:c4:20:97:9b: 1d:e0:a8:28:24:75:83:c8:32:e8:ac:c3:42:07:e5:b1:88:41: 43:18:3b:c7:65:56:55:50:ba:ba:12:50:78:b9:2a:74:33:07: 9f:68:fd:c3:cc:a0:0e:90:21:e5:35:1b:b0:ce:ee:4f:a1:e6: ab:78:bb:6a:ef:1d:95:f1:cb:a2:51:ae:db:fb:30:be:13:2a: 9b:2f:05:e3:b4:1c:e8:4f:21:75:72:eb:33:2b:be:68:0e:64: 9a:3a:72:d7:ab:55:d4:fb:b3:d4:e0:38:1e:24:9a:31:47:cd: 94:f7:ca:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1NWkEhxD4gMdtIOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgw MTI2MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWIxOGQ5ZWQtZmNjZC00OTI4LTg2YzMtYjQ0ZTQxNjczYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/qZlBFIgDOCH7OUHxhfiHjS1cL5euf3Kpm2 Dgw2GAMHI0RWVE40WYYtNTmbsCXw1sDPDOmcFJnf+Y5No6eDRnqGsO+F4LXvrkVP R9wAT/hSkGbEfqMS27uXzodw7fNp8H7ZL115IGi08Jvp+8v+1JFmhjYvRtERbxlJ 8/f2GaGTCOXyL+xnfe8vlRanbS5PSejobphlMugk3bbYQ2uUHgDtayv7HlYrL32U dExrawX+XNVUn61nN2rw4ygHDKI1HyxFl26xXQ4siWiAn6JHXkGxwYLQxdM2yvWp UKLHKuhzwBt08tRExZqqOr6/m1HKlf+plM5bvsjtsnP2tnFzdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP0mDWEe3hXYLpFZoNNzwr7Trq2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5 NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvMmE0YWRiYzYtYzk5Ny0z ZDJmLWJlOGQtMTMxNGU4YTQ0NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGE1OTVhODAtMjEwNi00NTVhLWJl OTEtMmFhNjIzMjgwMTI2LzRhNTk1YTgwLTIxMDYtNDU1YS1iZTkxLTJhYTYyMzI4 MDEyNi5jcmwwHwYDVR0jBBgwFoAUUtbV5rISIADa5K6P/GUha7XbT7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2 MjMyODAxMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgQRoBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWMK3JgXaDabekuAvpv/420YYsPbqABw2QFhdkQvZhk26SmId463b UurHWN/le5gNmSeaoZS6D3sJW/L3CaCl2RDbXpneFMhDgJXz3MmPY7tj4jbjkeuk fyhcfia2vWwLI95LNASJtz+uNDRaDuQIQDIaAga7zNDKwqgaY4asdSxw/PR8jC6F yrpmeqDEIJebHeCoKCR1g8gy6KzDQgflsYhBQxg7x2VWVVC6uhJQeLkqdDMHn2j9 w8ygDpAh5TUbsM7uT6Hmq3i7au8dlfHLolGu2/swvhMqmy8F47Qc6E8hdXLrMyu+ aA5kmjpy16tV1Puz1OA4HiSaMUfNlPfKIw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:38:17 2026 by rpki-client