$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b09624de-0f56-32a0-b988-2e9dd543c200.roa File: b09624de-0f56-32a0-b988-2e9dd543c200.roa (raw, json) Hash identifier: xQ7BlawCU9dSOAWxiBIdBjkW6OniRfvggZkByaKSris= Subject key identifier: D9:0B:34:80:BD:33:C9:D4:1A:09:5D:48:12:D3:B3:88:31:29:36:43 Certificate issuer: /CN=b5a35588-73da-4090-8511-b646a21aaabf Certificate serial: 010D0C9F4328584D52433B7985AB3407F390A340 Authority key identifier: 22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b09624de-0f56-32a0-b988-2e9dd543c200.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 397006 IP address blocks: 2607:dfc0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:3b:79:85:ab:34:07:f3:90:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5a35588-73da-4090-8511-b646a21aaabf Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=7ecf0669-431b-49c2-abb7-4c6652ea9cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:58:b9:e6:1c:36:61:1b:bf:8e:0f:18:17: cd:de:76:3b:18:b4:c7:80:8a:f6:cb:ab:a5:9b:23: d2:c6:1b:4b:9a:7b:ec:65:61:df:e4:ee:e8:95:d3: 18:bd:cf:19:aa:e0:6e:6f:63:cd:3c:b1:50:d4:50: 95:c6:4c:e1:43:d0:51:4c:ae:33:66:07:cb:f9:0a: b0:b1:8f:09:50:da:1a:b5:5f:58:14:2d:82:62:2f: 25:32:a3:6a:0a:fc:3d:ca:be:3e:0c:1e:66:df:61: 4f:3b:17:4e:7e:5b:a0:2b:ec:a2:40:65:c2:ba:67: 04:82:8f:22:0c:24:e3:2d:17:b2:f8:0b:ea:17:c7: b5:d2:d2:05:7f:a7:93:32:49:84:cd:90:d9:99:c7: 85:af:6d:07:1f:1d:6a:c0:5d:24:9a:d8:89:ea:3a: 7c:f8:5d:d4:0d:a5:38:92:5a:22:4a:32:93:0a:b8: 96:5a:ff:ab:c2:b5:97:0d:a8:b1:35:28:73:da:d5: fc:49:19:90:6e:b9:06:74:f2:06:2c:05:7f:01:26: 47:f5:10:4e:43:9d:af:36:53:2e:47:c5:56:e5:c9: 22:3f:25:ed:64:2a:93:44:f5:bc:03:72:6a:7f:3c: 28:44:15:f4:6d:9e:6b:06:70:d0:85:00:9e:12:27: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0B:34:80:BD:33:C9:D4:1A:09:5D:48:12:D3:B3:88:31:29:36:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b09624de-0f56-32a0-b988-2e9dd543c200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf/b5a35588-73da-4090-8511-b646a21aaabf.crl X509v3 Authority Key Identifier: keyid:22:8C:36:7A:C8:9D:4F:4F:06:7A:3B:6D:02:EC:51:FA:0B:23:C1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b5a35588-73da-4090-8511-b646a21aaabf.cer sbgp-ipAddrBlock: critical IPv6: 2607:dfc0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5d:3c:38:84:e0:d6:e8:1d:40:3d:c0:85:85:f7:b2:3b:45: 12:2f:92:39:cf:13:a8:65:2a:3a:bb:93:d6:aa:2b:ff:ee:78: 94:5b:f1:85:62:c6:f5:e1:0d:32:7b:76:7b:bd:81:74:3d:d4: 79:0e:e8:de:9f:e2:b6:46:68:93:56:24:28:dc:f1:c3:f6:4e: 73:7a:20:6b:58:55:95:7f:a2:3e:a4:68:f3:e9:e7:1d:6b:4a: 03:64:2c:ce:fe:d2:aa:3b:ea:38:74:2a:a7:49:f7:78:af:ce: 95:c4:57:35:9c:b1:e9:03:7e:54:f8:5e:50:d6:49:52:f6:17: 8f:f2:b4:b7:3d:25:4d:82:a6:1b:44:c3:12:3e:fe:8a:86:27: b2:3b:fc:d5:4a:52:44:9f:a2:6e:2d:a3:b2:78:44:61:c7:3f: e6:48:dd:34:8c:05:4e:30:d7:04:79:06:35:0d:a1:88:16:8c: 20:aa:1b:99:10:f3:43:4b:69:40:ce:10:40:33:55:13:6b:ed: c9:0d:ba:7b:ce:15:39:0c:28:07:75:2f:7d:1a:d7:99:0e:91: 70:3e:71:9c:2b:75:a7:96:64:18:1f:b5:6c:d5:ab:43:8f:8b: 07:50:7c:d2:19:2e:e1:ca:0d:0c:af:d2:41:05:05:6e:aa:4a: fe:56:ca:8a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1SQzt5has0B/OQo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVhMzU1ODgtNzNkYS00MDkwLTg1MTEtYjY0NmEyMWFh YWJmMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk N2VjZjA2NjktNDMxYi00OWMyLWFiYjctNGM2NjUyZWE5Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqhYueYcNmEbv44PGBfN3nY7GLTHgIr2y6ul myPSxhtLmnvsZWHf5O7oldMYvc8ZquBub2PNPLFQ1FCVxkzhQ9BRTK4zZgfL+Qqw sY8JUNoatV9YFC2CYi8lMqNqCvw9yr4+DB5m32FPOxdOflugK+yiQGXCumcEgo8i DCTjLRey+AvqF8e10tIFf6eTMkmEzZDZmceFr20HHx1qwF0kmtiJ6jp8+F3UDaU4 kloiSjKTCriWWv+rwrWXDaixNShz2tX8SRmQbrkGdPIGLAV/ASZH9RBOQ52vNlMu R8VW5ckiPyXtZCqTRPW8A3JqfzwoRBX0bZ5rBnDQhQCeEifIXQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNkLNIC9M8nUGgldSBLTs4gxKTZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEz NTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2YTIxYWFhYmYvYjA5NjI0ZGUtMGY1Ni0z MmEwLWI5ODgtMmU5ZGQ1NDNjMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjVhMzU1ODgtNzNkYS00MDkwLTg1 MTEtYjY0NmEyMWFhYWJmL2I1YTM1NTg4LTczZGEtNDA5MC04NTExLWI2NDZhMjFh YWFiZi5jcmwwHwYDVR0jBBgwFoAUIow2esidT08GejttAuxR+gsjwSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNWEzNTU4OC03M2RhLTQwOTAtODUxMS1iNjQ2 YTIxYWFhYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgffwAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATl08OITg1ugdQD3AhYX3sjtFEi+SOc8TqGUqOruT1qor/+54lFvx hWLG9eENMnt2e72BdD3UeQ7o3p/itkZok1YkKNzxw/ZOc3oga1hVlX+iPqRo8+nn HWtKA2Qszv7SqjvqOHQqp0n3eK/OlcRXNZyx6QN+VPheUNZJUvYXj/K0tz0lTYKm G0TDEj7+ioYnsjv81UpSRJ+ibi2jsnhEYcc/5kjdNIwFTjDXBHkGNQ2hiBaMIKob mRDzQ0tpQM4QQDNVE2vtyQ26e84VOQwoB3UvfRrXmQ6RcD5xnCt1p5ZkGB+1bNWr Q4+LB1B80hku4coNDK/SQQUFbqpK/lbKig== -----END CERTIFICATE-----Generated at Thu Apr 9 21:39:31 2026 by rpki-client