$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/82825bb3-3280-3a44-8d80-575cc9eb1155.roa File: 82825bb3-3280-3a44-8d80-575cc9eb1155.roa (raw, json) Hash identifier: ++wXpoB2sS/tiN/BqZ+wB4/0cIoy3Ku3AUmSkrnUQwA= Subject key identifier: 9E:E9:51:3A:84:95:58:FB:0A:F9:74:95:2B:35:CA:E8:63:BF:33:B7 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D8EF573485500150B31128780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/82825bb3-3280-3a44-8d80-575cc9eb1155.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 2914 IP address blocks: 2001:418:9808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:73:48:55:00:15:0b:31:12:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=69b10b30-c15d-48f9-b0b9-c8ed44d054aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:0b:ba:a0:f1:73:a7:7b:6a:00:43:92:b1: 78:70:e2:30:0c:e9:25:2e:d2:48:7a:68:42:5a:66: 5f:17:db:cc:10:b8:28:e4:63:a5:90:c4:da:68:58: b8:9b:bb:c1:5a:61:66:47:f7:95:86:86:81:d0:d4: 9a:00:f9:c0:fa:27:a2:d9:32:7c:c9:7f:4f:b1:a3: 16:27:90:3b:79:c3:08:e1:04:54:22:7f:5e:fd:f6: d7:00:82:30:93:c3:b2:31:4b:0b:e3:69:a9:5c:2b: d3:3a:bf:f0:b6:51:e0:a5:0d:27:dc:e2:d6:90:85: c0:45:df:74:09:ea:35:a9:a5:f8:27:c7:37:1e:2b: 45:9b:87:41:1c:09:13:09:1a:58:50:43:32:0d:bd: a4:b3:16:53:b0:b1:7d:0b:4a:e5:81:0f:8c:d1:c4: 08:fc:88:c9:dc:6e:50:23:9e:c1:80:af:6c:4a:d3: 01:ac:64:26:a3:a5:7b:20:5b:a7:9f:7f:2c:3a:04: 1d:45:f9:cc:31:ca:b6:2c:fc:5e:34:c9:75:df:15: 99:03:6a:4b:f7:1a:ff:a8:25:da:8f:63:2b:18:0f: cc:ea:54:80:31:7d:c1:27:9a:a9:27:93:35:49:9b: 25:c0:c7:4b:08:a0:69:88:16:84:4d:89:fe:3b:ac: e4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:51:3A:84:95:58:FB:0A:F9:74:95:2B:35:CA:E8:63:BF:33:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/82825bb3-3280-3a44-8d80-575cc9eb1155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:9808::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:79:48:46:0b:f8:71:6b:3c:95:d3:55:44:92:53:24:e1:41: 29:c9:b7:5d:39:9a:a7:72:5d:04:d3:98:6f:45:9a:d6:ce:b3: ad:55:b7:4a:98:e1:25:b1:4e:cd:58:75:c2:1e:3a:71:2c:63: b4:d8:67:9a:ae:5e:10:06:8c:53:50:60:f7:fd:cc:79:a8:9e: b6:b9:61:4c:3d:c8:eb:b4:df:2a:91:c7:ef:a8:fd:b8:54:06: 01:00:8e:fc:d3:13:04:5f:04:5c:0b:fe:2b:8b:05:4d:00:78: 69:9d:bf:a8:d8:63:96:72:65:73:e1:3d:db:4c:e0:b5:31:77: e1:be:30:a0:21:26:cc:b0:e3:29:4f:1d:1d:f0:e7:f8:c7:6e: 1b:40:6f:61:90:7f:2a:9f:77:05:6b:e2:61:5b:4c:80:d1:bd: 5a:17:3f:9d:8f:2e:40:e6:5c:6c:ba:ef:70:e5:4a:5e:77:2f: 87:20:78:01:0f:20:32:c6:f7:f2:15:5a:a4:9a:14:db:60:74: cc:09:8c:82:4b:a5:39:d3:64:b7:b1:cd:99:ba:75:02:0d:05: 25:03:19:be:3b:24:c8:aa:c2:aa:17:b7:dd:93:f5:e1:07:5e: 37:35:97:f1:50:6c:4c:0f:ae:d4:a7:f9:b9:ad:1c:d2:4c:4b: 88:b2:42:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9XNIVQAVCzESh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjliMTBiMzAtYzE1ZC00OGY5LWIwYjktYzhlZDQ0ZDA1NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkMLuqDxc6d7agBDkrF4cOIwDOklLtJIemhC WmZfF9vMELgo5GOlkMTaaFi4m7vBWmFmR/eVhoaB0NSaAPnA+iei2TJ8yX9PsaMW J5A7ecMI4QRUIn9e/fbXAIIwk8OyMUsL42mpXCvTOr/wtlHgpQ0n3OLWkIXARd90 Ceo1qaX4J8c3HitFm4dBHAkTCRpYUEMyDb2ksxZTsLF9C0rlgQ+M0cQI/IjJ3G5Q I57BgK9sStMBrGQmo6V7IFunn38sOgQdRfnMMcq2LPxeNMl13xWZA2pL9xr/qCXa j2MrGA/M6lSAMX3BJ5qpJ5M1SZslwMdLCKBpiBaETYn+O6zkCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7pUTqElVj7Cvl0lSs1yuhjvzO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODI4MjViYjMtMzI4MC0z YTQ0LThkODAtNTc1Y2M5ZWIxMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGJgI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACB5SEYL+HFrPJXTVUSSUyThQSnJt105mqdyXQTTmG9FmtbOs61V t0qY4SWxTs1YdcIeOnEsY7TYZ5quXhAGjFNQYPf9zHmonra5YUw9yOu03yqRx++o /bhUBgEAjvzTEwRfBFwL/iuLBU0AeGmdv6jYY5ZyZXPhPdtM4LUxd+G+MKAhJsyw 4ylPHR3w5/jHbhtAb2GQfyqfdwVr4mFbTIDRvVoXP52PLkDmXGy673DlSl53L4cg eAEPIDLG9/IVWqSaFNtgdMwJjIJLpTnTZLexzZm6dQINBSUDGb47JMiqwqoXt92T 9eEHXjc1l/FQbEwPrtSn+bmtHNJMS4iyQik= -----END CERTIFICATE-----Generated at Wed Apr 22 14:00:57 2026 by rpki-client