$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa File: 8e38af23-8759-37a2-8925-b153597bacf4.roa (raw, json) Hash identifier: UXkC3gtnq28A4xWbAHbxh8ltD2ZWxr+xIQy7h6eG5i0= Subject key identifier: BF:2E:A4:BD:C7:E3:4B:E4:76:C6:6D:66:90:1B:61:86:FB:B0:3C:39 Certificate issuer: /CN=457522b0-cf44-4757-ac16-6215c2516e52 Certificate serial: 010D0C9F4328584D5B4FB004B72EBE5B3AC13500 Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 401890 IP address blocks: 2604:1a20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:b0:04:b7:2e:be:5b:3a:c1:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=6ddb4fec-507b-4d8a-bcba-31757b1ce287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:da:92:52:4f:90:37:3e:7c:35:17:c8:fc: 05:85:08:fb:c7:be:70:ae:cb:ab:5b:30:72:73:c2: c0:ce:2b:2a:f6:65:fc:64:f0:bc:ec:00:d5:65:b3: 19:51:53:39:3f:f0:76:96:e3:fc:17:fc:ad:90:20: 51:61:64:7f:82:ee:1b:f5:92:e5:2a:3c:cb:25:d4: 9a:ec:ba:d5:f7:a9:96:e1:20:93:22:f6:b2:75:bc: 02:93:4e:14:f6:b4:70:15:98:88:fd:3a:7b:76:f9: 29:6a:17:89:4a:aa:b3:bc:3a:9a:da:5f:d7:1e:c1: 44:5a:41:09:e1:6a:f2:18:6d:c9:a8:27:8c:e9:31: 8b:0a:06:d1:17:6f:8c:d5:6d:27:af:7f:1c:dc:9e: 40:87:c9:90:da:71:f7:e2:85:74:6b:83:9a:69:aa: 96:45:03:f9:12:36:08:c9:a9:72:fc:85:f0:c5:e1: 47:31:28:15:34:97:be:50:45:31:5b:ee:c2:27:1c: c1:72:c8:b0:c5:4d:85:5a:45:0b:a4:74:de:68:a4: f0:ac:42:d3:83:8f:58:ec:24:57:e6:04:dd:20:a4: c7:39:71:11:35:fd:68:2b:59:ef:40:f2:56:c5:12: 54:79:eb:1a:c3:11:79:15:64:df:01:3f:60:c4:60: 35:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:A4:BD:C7:E3:4B:E4:76:C6:6D:66:90:1B:61:86:FB:B0:3C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl X509v3 Authority Key Identifier: keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer sbgp-ipAddrBlock: critical IPv6: 2604:1a20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:56:d3:96:fe:bc:3f:b9:8f:29:58:80:d5:c0:04:a8:86: b5:62:79:26:5c:97:ac:8a:47:5c:c0:c5:49:bc:dc:64:57:77: 3c:dc:58:8a:0c:35:b1:95:45:53:b8:d9:04:59:ed:6e:cc:d4: 16:83:c2:ee:32:91:1b:53:40:bc:6f:af:13:da:0a:2c:73:c7: ac:2a:f1:1e:af:04:88:f1:b2:f4:20:b3:2d:23:70:09:12:8e: ea:b0:4e:01:41:0d:e7:9e:3d:9e:9a:b1:57:df:b3:5f:20:57: e0:c9:0e:e4:bd:58:8e:f1:d4:ad:71:ce:2c:a2:9a:da:38:e2: 63:b0:0c:9a:17:29:79:27:a9:fd:e6:79:ab:61:5f:90:a8:39: 6b:4e:94:a8:09:30:ec:bb:53:bf:69:31:4c:0f:32:b6:06:86: 74:fe:3e:0c:2e:6c:6e:bf:c5:ec:ea:68:4a:94:a5:13:04:e0: 57:88:28:a0:78:13:db:30:28:dc:13:13:f6:4c:ed:04:ee:70: 91:a8:99:1c:d9:f4:74:5f:da:b5:70:be:7c:a3:f8:53:e7:0c: c3:87:77:46:eb:df:17:da:9b:5a:03:7c:e8:39:0d:11:55:ba: f8:e1:b9:d4:ec:8a:48:61:12:9e:d3:9d:4c:f4:24:16:a7:9b: 41:39:7b:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1bT7AEty6+WzrBNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2 ZTUyMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NmRkYjRmZWMtNTA3Yi00ZDhhLWJjYmEtMzE3NTdiMWNlMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0HaklJPkDc+fDUXyPwFhQj7x75wrsurWzBy c8LAzisq9mX8ZPC87ADVZbMZUVM5P/B2luP8F/ytkCBRYWR/gu4b9ZLlKjzLJdSa 7LrV96mW4SCTIvaydbwCk04U9rRwFZiI/Tp7dvkpaheJSqqzvDqa2l/XHsFEWkEJ 4WryGG3JqCeM6TGLCgbRF2+M1W0nr38c3J5Ah8mQ2nH34oV0a4OaaaqWRQP5EjYI yaly/IXwxeFHMSgVNJe+UEUxW+7CJxzBcsiwxU2FWkULpHTeaKTwrELTg49Y7CRX 5gTdIKTHOXERNf1oK1nvQPJWxRJUeesawxF5FWTfAT9gxGA1LwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL8upL3H40vkdsZtZpAbYYb7sDw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1 MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvOGUzOGFmMjMtODc1OS0z N2EyLTg5MjUtYjE1MzU5N2JhY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1 YzI1MTZlNTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQaIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcS1bTlv68P7mPKViA1cAEqIa1YnkmXJesikdcwMVJvNxkV3c83FiK DDWxlUVTuNkEWe1uzNQWg8LuMpEbU0C8b68T2gosc8esKvEerwSI8bL0ILMtI3AJ Eo7qsE4BQQ3nnj2emrFX37NfIFfgyQ7kvViO8dStcc4sopraOOJjsAyaFyl5J6n9 5nmrYV+QqDlrTpSoCTDsu1O/aTFMDzK2BoZ0/j4MLmxuv8Xs6mhKlKUTBOBXiCig eBPbMCjcExP2TO0E7nCRqJkc2fR0X9q1cL58o/hT5wzDh3dG698X2ptaA3zoOQ0R Vbr44bnU7IpIYRKe051M9CQWp5tBOXvT -----END CERTIFICATE-----Generated at Tue Apr 7 16:34:07 2026 by rpki-client