$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa File: f795707f-42b9-3e1c-9651-5bb7df87b841.roa (raw, json) Hash identifier: xgfhdANgrfFW9jK7B6nX5JbfNk2gtDpYnGirMn2YwlU= Subject key identifier: 43:37:EC:C2:C8:77:37:34:E6:22:10:5D:B9:D2:0B:99:F0:B4:7D:D2 Certificate issuer: /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7 Certificate serial: 010D0C9F4328584D571FB062F8E379D9898E4200 Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 32982 IP address blocks: 2607:f368:804::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b0:62:f8:e3:79:d9:89:8e:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=4fab2b99-80fb-46ab-85c4-436bad2cd973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:f9:7a:2b:15:9e:48:8b:49:c1:80:fe:58: 0d:88:d2:33:30:cc:fe:72:ae:bc:a9:90:04:6c:38: 45:99:b7:ea:be:1f:f3:21:35:40:44:70:49:5a:55: 14:a1:84:49:5f:f2:bf:ac:21:32:2e:91:5d:ba:d6: ef:92:eb:2c:00:67:48:3e:f0:36:c1:23:11:4c:bb: 24:01:23:b1:59:ab:18:7d:15:87:28:b5:0c:63:fd: 79:56:bb:46:2b:71:bb:90:b0:3c:6e:ab:1b:ab:a8: e4:59:cc:1a:1e:c5:4e:be:11:f4:69:0e:1f:38:21: 65:94:7a:a4:6d:b4:e6:7c:66:f4:80:f9:13:7f:55: c9:06:46:97:0c:53:e9:36:72:cd:50:8c:bf:68:c7: 91:11:74:62:dd:5e:1c:e6:7e:e9:52:83:9b:4e:46: 51:11:e5:77:5f:d0:9b:f1:5e:34:3f:15:8e:d1:8f: f6:98:e4:5e:c7:7c:78:e8:a0:f6:40:06:f1:d7:8b: fc:05:5a:97:16:df:ae:c8:1e:aa:d8:45:71:7d:1c: 73:95:17:ad:f8:5c:c3:11:14:28:22:d1:2b:dc:67: fa:5c:3c:98:e1:a1:15:3f:9a:d3:dd:e4:81:be:76: 5e:ed:a5:0b:21:4f:1b:67:c9:a4:1e:ac:14:9d:ff: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:EC:C2:C8:77:37:34:E6:22:10:5D:B9:D2:0B:99:F0:B4:7D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl X509v3 Authority Key Identifier: keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:f368:804::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:bc:1c:0f:06:9b:c5:6b:11:50:b6:14:71:07:b0:64:7e:6b: 9a:09:0a:68:5b:54:17:63:49:be:ec:d4:45:5c:1f:0c:26:bc: 37:a8:f7:5c:2c:09:9d:4d:e2:38:61:01:07:dd:96:64:2f:ad: f1:94:82:c9:08:53:55:6e:60:97:f9:f9:fe:cc:e9:b0:07:af: ea:1d:23:30:44:d4:3f:5a:89:1b:80:87:1a:5b:bd:df:5b:37: 3c:71:d6:7f:23:1e:4d:e4:78:57:04:8e:a2:9e:39:c2:c8:92: 37:7a:f2:1b:da:a6:1f:49:d7:4a:d7:c5:94:7b:ef:0b:67:cc: 03:75:36:39:2e:b3:04:60:7d:a5:15:c0:4a:2f:2b:b8:0b:a1: 2c:41:f0:c4:6d:8d:c8:15:26:d5:03:e8:03:0e:fa:5f:93:5e: 8c:8b:ce:ac:14:a4:f9:91:a7:9a:0a:66:b4:8f:ad:2d:ae:02: ee:e3:cc:3c:00:19:4c:b4:ed:69:98:5b:a3:17:1e:35:0c:9f: b7:77:57:a6:5a:0d:6a:34:eb:85:b5:4d:bb:e0:74:a8:87:c5: 06:b3:0c:e7:b2:dc:8f:e1:23:5a:49:09:62:f9:4b:61:77:dc: 93:1b:26:e0:e5:c1:72:db:3a:1c:04:80:3b:d7:b8:a8:dc:f4: a7:ac:03:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7Bi+ON52YmOQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk OWM3MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NGZhYjJiOTktODBmYi00NmFiLTg1YzQtNDM2YmFkMmNkOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSH5eisVnkiLScGA/lgNiNIzMMz+cq68qZAE bDhFmbfqvh/zITVARHBJWlUUoYRJX/K/rCEyLpFdutbvkussAGdIPvA2wSMRTLsk ASOxWasYfRWHKLUMY/15VrtGK3G7kLA8bqsbq6jkWcwaHsVOvhH0aQ4fOCFllHqk bbTmfGb0gPkTf1XJBkaXDFPpNnLNUIy/aMeREXRi3V4c5n7pUoObTkZREeV3X9Cb 8V40PxWO0Y/2mORex3x46KD2QAbx14v8BVqXFt+uyB6q2EVxfRxzlRet+FzDERQo ItEr3Gf6XDyY4aEVP5rT3eSBvnZe7aULIU8bZ8mkHqwUnf9AhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEM37MLIdzc05iIQXbnSC5nwtH3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvZjc5NTcwN2YtNDJiOS0z ZTFjLTk2NTEtNWJiN2RmODdiODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4 NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3 MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHO8HA8Gm8VrEVC2FHEHsGR+a5oJCmhbVBdjSb7s1EVcHwwmvDeo 91wsCZ1N4jhhAQfdlmQvrfGUgskIU1VuYJf5+f7M6bAHr+odIzBE1D9aiRuAhxpb vd9bNzxx1n8jHk3keFcEjqKeOcLIkjd68hvaph9J10rXxZR77wtnzAN1NjkuswRg faUVwEovK7gLoSxB8MRtjcgVJtUD6AMO+l+TXoyLzqwUpPmRp5oKZrSPrS2uAu7j zDwAGUy07WmYW6MXHjUMn7d3V6ZaDWo064W1TbvgdKiHxQazDOey3I/hI1pJCWL5 S2F33JMbJuDlwXLbOhwEgDvXuKjc9KesA0w= -----END CERTIFICATE-----Generated at Tue Apr 7 13:29:36 2026 by rpki-client