$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/522a13a1-bbba-3141-b45a-bf367198f0b9.roa File: 522a13a1-bbba-3141-b45a-bf367198f0b9.roa (raw, json) Hash identifier: WMV6Z/7h7cZV0UYFahA4ia4y1I+bhfbPhA27vH52o28= Subject key identifier: 5C:40:5F:2F:78:94:E1:CB:2D:EA:B9:CD:C2:FD:BF:6D:99:04:65:E6 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584D6E7177EA0FB46D7ED0BB7B80 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/522a13a1-bbba-3141-b45a-bf367198f0b9.roa Signing time: Tue 07 Apr 2026 21:29:07 +0000 ROA not before: Tue 07 Apr 2026 21:29:07 +0000 ROA not after: Mon 06 Jul 2026 21:29:07 +0000 asID: 396982 IP address blocks: 2620:147:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:71:77:ea:0f:b4:6d:7e:d0:bb:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Apr 7 21:29:07 2026 GMT Not After : Jul 6 21:29:07 2026 GMT Subject: CN=6d834fc7-0715-45bc-bafa-35de68d6a615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a6:4f:43:8d:b1:1a:01:7a:5b:10:30:30:86: 11:ed:9b:d0:51:f7:cf:92:5f:fc:f7:61:e8:de:e0: 73:57:b8:eb:ef:d5:97:ee:cc:da:6d:a1:9c:e9:90: 7a:4f:b0:73:7c:21:53:d8:96:79:88:6e:56:1c:cf: 91:4f:2a:3c:68:91:a8:b6:24:0c:1e:b1:66:25:fc: 7a:cf:ce:6e:73:97:f6:fa:58:18:f7:4e:39:a9:e4: 70:9f:8e:02:50:59:1b:99:ef:c4:a1:8f:3d:02:9b: 8c:3e:9b:69:d7:d7:c2:33:f3:77:85:94:8d:86:ad: 7e:0f:8d:b5:86:2e:e1:69:02:e9:78:be:98:db:b2: 9e:c7:f6:24:ad:84:2d:7d:4e:05:be:d2:1a:e0:39: 38:ab:95:c0:3d:fa:dd:9e:3c:47:58:86:8b:11:e6: d7:5f:0f:34:98:c3:1d:f3:30:e4:d3:0e:93:07:9b: f5:7e:4f:c7:44:40:a9:01:ed:01:88:21:f5:b3:d2: 21:df:c4:e7:44:e8:77:bf:24:f6:35:5c:b5:f9:74: 8c:29:61:88:26:eb:00:1c:d5:10:ec:22:17:0c:ac: 8f:b5:0d:87:f2:8f:0b:02:19:d4:f4:8a:76:7e:4e: 45:87:e2:42:9f:08:82:c5:52:40:67:63:09:85:3f: 8a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:40:5F:2F:78:94:E1:CB:2D:EA:B9:CD:C2:FD:BF:6D:99:04:65:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/522a13a1-bbba-3141-b45a-bf367198f0b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:96:dc:35:68:bf:7a:8a:eb:08:15:5d:52:a0:52:d2:35:83: 3e:d8:fa:b4:5f:8a:62:f2:08:c1:d4:aa:bf:26:f6:e2:06:e1: 17:ca:a7:bb:93:29:a9:8f:a5:ed:5d:61:c1:b6:74:a7:af:33: 15:86:38:58:0c:01:b7:84:52:d8:bb:12:59:ea:30:cd:3a:d5: 72:5f:e1:84:d9:05:d0:da:52:20:90:e8:8f:81:aa:e8:10:d3: d2:6b:dc:81:25:d2:38:b5:fb:ec:68:be:68:ec:df:68:b9:51: 7a:15:8f:15:06:23:8b:68:3f:72:b1:7a:e3:14:6d:7d:b5:eb: f0:67:55:57:01:e9:c4:df:9a:96:32:f9:b6:ce:54:a9:09:78: 14:94:d5:e2:cf:94:1e:92:c3:84:16:d0:85:3c:bc:f4:d8:ed: fd:5a:12:d5:42:73:87:6b:8d:33:36:75:84:06:a6:0e:12:e8: a2:4c:c9:55:3b:2a:ad:7a:5d:0f:d1:b3:ae:9e:b0:48:75:22: ac:bb:bc:ff:8f:2d:7d:5b:85:a3:ef:ca:f9:66:3e:da:22:2f: 8d:ce:ca:ba:e7:5e:ac:ea:0b:65:8d:34:f7:09:12:35:ff:13: 7c:86:00:a7:1b:e6:01:df:ec:aa:96:81:72:2d:04:13:e0:40: 0d:30:63:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1ucXfqD7RtftC7e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDQwNzIxMjkwN1oXDTI2MDcwNjIxMjkwN1owLzEtMCsGA1UEAxMk NmQ4MzRmYzctMDcxNS00NWJjLWJhZmEtMzVkZTY4ZDZhNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaZPQ42xGgF6WxAwMIYR7ZvQUffPkl/892Ho 3uBzV7jr79WX7szabaGc6ZB6T7BzfCFT2JZ5iG5WHM+RTyo8aJGotiQMHrFmJfx6 z85uc5f2+lgY9045qeRwn44CUFkbme/EoY89ApuMPptp19fCM/N3hZSNhq1+D421 hi7haQLpeL6Y27Kex/YkrYQtfU4FvtIa4Dk4q5XAPfrdnjxHWIaLEebXXw80mMMd 8zDk0w6TB5v1fk/HRECpAe0BiCH1s9Ih38TnROh3vyT2NVy1+XSMKWGIJusAHNUQ 7CIXDKyPtQ2H8o8LAhnU9Ip2fk5Fh+JCnwiCxVJAZ2MJhT+KOQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFxAXy94lOHLLeq5zcL9v22ZBGXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNTIyYTEzYTEtYmJiYS0z MTQxLWI0NWEtYmYzNjcxOThmMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABRwMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAppbcNWi/eorrCBVdUqBS0jWDPtj6tF+KYvIIwdSqvyb24gbhF8qn u5MpqY+l7V1hwbZ0p68zFYY4WAwBt4RS2LsSWeowzTrVcl/hhNkF0NpSIJDoj4Gq 6BDT0mvcgSXSOLX77Gi+aOzfaLlRehWPFQYji2g/crF64xRtfbXr8GdVVwHpxN+a ljL5ts5UqQl4FJTV4s+UHpLDhBbQhTy89Njt/VoS1UJzh2uNMzZ1hAamDhLookzJ VTsqrXpdD9Gzrp6wSHUirLu8/48tfVuFo+/K+WY+2iIvjc7KuuderOoLZY009wkS Nf8TfIYApxvmAd/sqpaBci0EE+BADTBjXA== -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:09 2026 by rpki-client