$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa File: e6841681-39a3-3335-b302-5e7c1c57cd46.roa (raw, json) Hash identifier: W5Z2hkdKojq5BXE4xXYMJ5j4mvsrF2JQZ9Urf/b5k4I= Subject key identifier: 25:EC:97:E5:88:80:22:72:AE:3B:AC:9D:AE:97:6C:32:4B:B9:5E:B8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584D5A31E6A8C735CA0996D96940 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa Signing time: Tue 31 Mar 2026 15:24:52 +0000 ROA not before: Tue 31 Mar 2026 15:24:52 +0000 ROA not after: Mon 29 Jun 2026 15:24:52 +0000 asID: 3356 IP address blocks: 2620:11b:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:31:e6:a8:c7:35:ca:09:96:d9:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 31 15:24:52 2026 GMT Not After : Jun 29 15:24:52 2026 GMT Subject: CN=dbc451f0-7063-40f8-93ce-47e9977b48b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:6e:5a:8a:37:cc:9d:be:df:4e:fd:9e:69: 20:0d:e5:86:bd:eb:c6:55:49:56:2e:29:73:f8:cd: 5b:f8:91:99:f5:09:72:77:8a:aa:80:54:cc:1d:06: 54:85:c0:39:e4:38:51:5e:64:f6:20:11:00:d2:d5: c9:1e:46:aa:80:c4:4b:d5:09:5a:30:80:4e:60:6c: 2a:49:e3:37:08:fc:c1:96:ba:5b:3c:d2:3a:49:c6: 5a:90:a6:d5:b0:f8:fd:cc:a6:84:12:80:53:47:00: 73:42:e4:4a:aa:c3:e1:bf:af:3e:58:bc:88:c1:aa: 6a:d8:cb:2f:44:57:02:16:5d:60:0b:24:b7:be:5e: 0c:9b:e3:12:e3:6c:41:46:c4:65:6a:b1:1b:e9:f2: 18:74:0e:92:56:f6:52:21:90:da:b5:f8:6a:4f:62: e0:6e:44:45:85:1a:26:66:5c:74:c7:12:e7:a4:46: 5b:fe:4f:5a:77:55:9d:97:e2:34:32:57:56:4f:ae: e3:a9:eb:ac:e0:4f:15:80:6c:06:ba:af:28:ca:66: 1e:2f:95:23:f1:09:fd:79:db:33:b5:d6:1a:42:e4: 00:a1:9d:5f:5f:bc:66:45:78:6a:36:e2:4b:39:7a: 2e:33:83:c9:60:7a:29:a8:b7:b6:6d:18:b9:5a:14: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EC:97:E5:88:80:22:72:AE:3B:AC:9D:AE:97:6C:32:4B:B9:5E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e6841681-39a3-3335-b302-5e7c1c57cd46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv6: 2620:11b:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:49:9c:ad:68:d5:50:ef:29:5f:b3:99:61:45:ad:00:79:42: 33:ae:c4:e5:27:c5:ee:f9:cc:57:d1:9d:70:a5:27:52:39:b6: 05:35:71:e6:e7:11:28:cb:63:0e:59:9b:ae:27:a9:ad:09:db: cc:23:59:99:65:f2:d7:59:88:1f:8b:13:de:30:9d:cd:e8:0d: 79:b2:72:9a:0b:91:47:47:51:88:0f:4a:d5:11:59:ae:e8:7b: 63:45:32:7d:57:0d:9e:1e:85:4f:9e:9c:83:25:f1:7e:6c:0f: 6c:a4:8e:70:b3:de:38:de:42:f5:b0:af:ab:cd:b2:43:18:43: a5:0e:4d:e4:13:e5:b1:3b:35:76:08:5c:f8:13:9a:87:76:34: b6:8e:84:89:b6:ae:96:ea:02:e3:77:1f:dd:69:89:2f:3c:25: 08:e4:30:ab:e0:64:eb:2c:89:37:93:ac:48:b0:94:ad:5e:df: 1b:1b:aa:93:f0:bc:26:bc:1b:96:f6:78:a2:5e:b9:eb:ec:2f: e4:92:3b:04:60:2d:d9:dd:b6:90:45:9b:59:bd:be:17:76:04: 57:96:7b:69:46:13:3f:c5:c1:84:1c:11:fc:93:15:5f:60:51: 23:1c:cf:44:f1:6b:9f:0a:d4:d2:7a:b6:07:6f:51:2f:de:1d: 07:29:d6:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1aMeaoxzXKCZbZaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDMzMTE1MjQ1MloXDTI2MDYyOTE1MjQ1MlowLzEtMCsGA1UEAxMk ZGJjNDUxZjAtNzA2My00MGY4LTkzY2UtNDdlOTk3N2I0OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzghuWoo3zJ2+3079nmkgDeWGvevGVUlWLilz +M1b+JGZ9Qlyd4qqgFTMHQZUhcA55DhRXmT2IBEA0tXJHkaqgMRL1QlaMIBOYGwq SeM3CPzBlrpbPNI6ScZakKbVsPj9zKaEEoBTRwBzQuRKqsPhv68+WLyIwapq2Msv RFcCFl1gCyS3vl4Mm+MS42xBRsRlarEb6fIYdA6SVvZSIZDatfhqT2LgbkRFhRom Zlx0xxLnpEZb/k9ad1Wdl+I0MldWT67jqeus4E8VgGwGuq8oymYeL5Uj8Qn9edsz tdYaQuQAoZ1fX7xmRXhqNuJLOXouM4PJYHopqLe2bRi5WhRRWQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCXsl+WIgCJyrjusna6XbDJLuV64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZTY4NDE2ODEtMzlhMy0z MzM1LWIzMDItNWU3YzFjNTdjZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABG+Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoEmcrWjVUO8pX7OZYUWtAHlCM67E5SfF7vnMV9GdcKUnUjm2BTVx 5ucRKMtjDlmbrieprQnbzCNZmWXy11mIH4sT3jCdzegNebJymguRR0dRiA9K1RFZ ruh7Y0UyfVcNnh6FT56cgyXxfmwPbKSOcLPeON5C9bCvq82yQxhDpQ5N5BPlsTs1 dghc+BOah3Y0to6EibauluoC43cf3WmJLzwlCOQwq+Bk6yyJN5OsSLCUrV7fGxuq k/C8JrwblvZ4ol656+wv5JI7BGAt2d22kEWbWb2+F3YEV5Z7aUYTP8XBhBwR/JMV X2BRIxzPRPFrnwrU0nq2B29RL94dBynWcg== -----END CERTIFICATE-----Generated at Tue Apr 7 22:03:50 2026 by rpki-client