$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa File: be35be49-c928-3787-b0ab-e6f4f232a893.roa (raw, json) Hash identifier: otIa2si5hOlMpihaFw5aPA66/+XuWCobvXvK+yDCJFA= Subject key identifier: 32:CD:34:D0:EA:08:E8:87:9A:A9:FF:A5:47:53:7B:65:7B:1B:D6:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5D9C4E848D6776C75B628 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 2601:8a:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:d9:c4:e8:48:d6:77:6c:75:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7af4e73a-345e-4dbd-9921-454e01ee8374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:69:88:f1:e9:5e:85:89:6e:4d:90:9f:03: e4:2e:63:57:32:e5:96:7c:1b:b2:a9:6b:6a:47:fc: c7:da:77:5f:4b:06:4a:0f:7f:40:d7:8a:7b:b4:84: b7:c3:43:bf:2f:86:3d:9b:ec:6c:f0:2e:c4:b8:0a: f5:c3:6a:c9:6a:c6:0c:f4:6f:e6:fb:aa:be:7c:cc: c6:1a:ef:99:47:19:d7:d2:7a:5a:2c:bb:42:0b:43: 73:b7:78:fb:83:9d:4d:1d:c0:05:d1:d8:6d:37:ea: 05:4a:5d:2c:1b:bc:13:bf:a7:d2:35:af:e7:72:83: b0:50:a5:9c:5c:4b:78:64:cd:bf:1e:26:ba:0e:40: 56:d9:ae:f4:e5:9c:f8:b5:08:af:8f:f4:af:42:3c: 21:d4:05:5c:e8:66:db:bd:2d:db:4b:9d:98:55:8c: aa:4e:68:19:1a:dd:1b:94:7c:4b:7e:0d:8d:b6:f0: 8f:63:18:2f:14:2a:f9:7c:20:50:71:19:f5:c8:66: 3d:ec:b1:c0:f1:cc:77:df:c3:2a:2b:94:1e:24:4a: f0:41:cb:2c:75:88:fa:35:91:06:ea:61:2f:33:72: fd:32:37:be:6c:36:76:58:ba:0f:54:5c:8f:9a:b7: 6a:76:68:4d:b3:d9:62:a1:c4:1e:65:22:cb:80:ab: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:34:D0:EA:08:E8:87:9A:A9:FF:A5:47:53:7B:65:7B:1B:D6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be35be49-c928-3787-b0ab-e6f4f232a893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:8a:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:e1:64:89:74:b8:ac:d2:0c:0f:88:de:f3:76:52:31:00:9e: 5b:53:66:ac:90:ba:ed:c2:06:41:e6:cc:42:a9:9e:1f:17:64: 48:76:ad:2b:be:2d:cc:13:63:94:92:66:c0:eb:b5:64:3c:0c: 8e:87:72:9d:7b:7e:8e:f3:26:bb:85:6e:5b:85:b2:b1:de:76: e4:2a:60:a4:7d:27:f4:1b:b6:61:c1:47:0b:bf:e4:c9:c6:d8: e0:6e:25:97:21:d6:08:b4:0e:ed:cb:b5:1a:b5:89:92:85:ce: 20:43:bc:2f:38:a2:f5:e5:69:74:0e:81:65:fc:64:8a:0d:ce: 34:cb:31:e7:4a:74:7f:a5:ad:31:31:59:60:1a:96:2e:bd:53: fc:f8:a9:00:4d:b1:78:e1:e4:22:55:08:aa:e0:11:11:d6:ad: 0a:cc:d8:ad:77:b3:df:05:e9:64:a2:67:d4:35:3b:fd:a8:9f: 3f:9c:8c:21:38:f6:29:c5:13:b3:f9:4f:a3:f1:6d:34:ad:23: 29:64:2c:24:0f:90:54:99:9c:66:5c:1e:c4:d6:f9:30:bc:c1: d2:91:5e:99:28:99:9e:76:a5:6d:15:be:49:47:e3:b4:5b:53: 36:69:af:e0:27:3c:c1:78:22:61:cf:28:18:bd:54:18:70:91: df:f9:e0:f8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9dnE6EjWd2x1tigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk N2FmNGU3M2EtMzQ1ZS00ZGJkLTk5MjEtNDU0ZTAxZWU4Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sZpiPHpXoWJbk2QnwPkLmNXMuWWfBuyqWtq R/zH2ndfSwZKD39A14p7tIS3w0O/L4Y9m+xs8C7EuAr1w2rJasYM9G/m+6q+fMzG Gu+ZRxnX0npaLLtCC0Nzt3j7g51NHcAF0dhtN+oFSl0sG7wTv6fSNa/ncoOwUKWc XEt4ZM2/Hia6DkBW2a705Zz4tQivj/SvQjwh1AVc6GbbvS3bS52YVYyqTmgZGt0b lHxLfg2NtvCPYxgvFCr5fCBQcRn1yGY97LHA8cx338MqK5QeJErwQcssdYj6NZEG 6mEvM3L9Mje+bDZ2WLoPVFyPmrdqdmhNs9liocQeZSLLgKuRVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDLNNNDqCOiHmqn/pUdTe2V7G9arMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmUzNWJlNDktYzkyOC0z Nzg3LWIwYWItZTZmNGYyMzJhODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAisAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwuFkiXS4rNIMD4je83ZSMQCeW1NmrJC67cIGQebMQqmeHxdkSHat K74tzBNjlJJmwOu1ZDwMjodynXt+jvMmu4VuW4Wysd525CpgpH0n9Bu2YcFHC7/k ycbY4G4llyHWCLQO7cu1GrWJkoXOIEO8Lzii9eVpdA6BZfxkig3ONMsx50p0f6Wt MTFZYBqWLr1T/PipAE2xeOHkIlUIquAREdatCszYrXez3wXpZKJn1DU7/aifP5yM ITj2KcUTs/lPo/FtNK0jKWQsJA+QVJmcZlwexNb5MLzB0pFemSiZnnalbRW+SUfj tFtTNmmv4Cc8wXgiYc8oGL1UGHCR3/ng+A== -----END CERTIFICATE-----Generated at Tue Apr 21 19:15:29 2026 by rpki-client