$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/881c0b2f-d036-36ee-9f97-4dc27de0ab4b.roa File: 881c0b2f-d036-36ee-9f97-4dc27de0ab4b.roa (raw, json) Hash identifier: /gaNK8nHkrKrUGTO+fU0AsTTnQU+h6i2rpP8vg5etaE= Subject key identifier: B3:33:6E:75:A1:6A:3D:84:1F:06:77:82:B7:65:11:45:A2:E7:0F:BE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D932565C8809E5617EBBE99C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/881c0b2f-d036-36ee-9f97-4dc27de0ab4b.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 3938 IP address blocks: 2001:418:1401:af::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:65:c8:80:9e:56:17:eb:be:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=4f4b53f3-521f-4c7e-b2fb-1e6a194618fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:84:ab:b6:d8:40:e9:4b:3a:f1:6d:a8:03: 20:e1:30:0a:d1:58:fa:5f:d4:61:f9:df:83:69:8c: 30:24:3f:44:96:a0:3b:ce:71:6c:cb:4a:31:10:5a: cb:d6:27:94:f2:ff:e5:d8:87:b4:92:22:4f:fd:f0: 90:f2:34:60:7c:08:e5:88:af:a9:20:9f:04:39:fb: f1:58:97:42:d1:a5:b9:46:80:18:62:1d:07:79:df: c8:99:b9:e6:30:41:c9:c5:d1:4f:58:ff:1a:6c:7b: 09:0c:d1:33:74:e2:74:94:1a:0c:ba:57:83:93:a8: 7d:b4:58:76:1c:5a:8c:a8:4a:4f:dc:e6:99:ea:1e: e6:dd:95:03:42:d7:20:06:e5:ee:26:45:39:b6:e9: c2:0d:ef:9c:cf:9f:0c:51:ce:d3:5c:db:36:4b:d9: e7:a7:ca:c6:c8:16:ae:52:89:ea:ce:6a:8b:b7:48: cf:4a:c9:8e:b8:51:9b:b1:8c:67:93:d4:48:e6:d5: 0d:62:7a:87:ec:e1:46:d7:a5:cc:52:78:26:74:eb: d4:78:48:03:c1:c9:00:b2:11:fd:01:7e:59:48:18: c1:be:cd:41:ad:fb:ce:02:98:3b:75:5a:82:c6:01: 52:f5:45:ef:a9:57:1e:1f:32:28:d4:3f:b2:5a:9b: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:33:6E:75:A1:6A:3D:84:1F:06:77:82:B7:65:11:45:A2:E7:0F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/881c0b2f-d036-36ee-9f97-4dc27de0ab4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:af::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:de:29:e5:d5:e2:b0:95:04:58:45:83:3c:8c:53:2c:2e: 06:4f:8e:59:61:c9:76:50:f6:6e:91:1d:22:10:2a:8d:a9:91: 17:05:df:f8:7a:87:2d:58:13:3e:5b:67:d6:d7:d3:02:ca:9c: 99:39:49:32:51:40:aa:a2:7b:e9:18:a2:5b:7b:21:dc:d2:c5: db:7e:21:9f:c3:74:b1:bd:e3:27:80:bb:0a:d8:f9:b3:4e:99: 08:ce:1c:e3:0f:7f:96:2b:7b:ed:10:46:f4:ec:47:e0:01:47: bc:46:47:70:72:9b:67:83:4e:96:bb:44:bf:02:79:c8:a5:20: 27:3b:52:54:d5:30:b2:35:81:ef:3a:0c:03:8e:d0:47:9f:a7: c2:2e:83:65:24:63:d3:ce:3b:db:eb:be:ed:1e:44:2b:30:ef: c6:2a:ff:a6:e4:14:82:ea:4a:f9:bf:22:36:b9:40:24:35:08: 4e:bc:7d:fe:00:14:65:bd:32:07:dc:7e:bd:fb:a9:c2:a2:d7: 85:f0:5d:a8:56:74:eb:6b:2b:d0:1c:ec:d1:ec:28:a2:17:46: 83:83:8d:1c:e0:ee:84:d6:a7:2d:7e:aa:26:f0:8d:17:7b:97: bc:50:e5:0a:62:e2:da:94:99:23:01:17:1a:27:84:fb:7e:39: b2:f9:4b:71 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE2TJWXIgJ5WF+u+mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NGY0YjUzZjMtNTIxZi00YzdlLWIyZmItMWU2YTE5NDYxOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHWEq7bYQOlLOvFtqAMg4TAK0Vj6X9Rh+d+D aYwwJD9ElqA7znFsy0oxEFrL1ieU8v/l2Ie0kiJP/fCQ8jRgfAjliK+pIJ8EOfvx WJdC0aW5RoAYYh0Hed/ImbnmMEHJxdFPWP8abHsJDNEzdOJ0lBoMuleDk6h9tFh2 HFqMqEpP3OaZ6h7m3ZUDQtcgBuXuJkU5tunCDe+cz58MUc7TXNs2S9nnp8rGyBau UonqzmqLt0jPSsmOuFGbsYxnk9RI5tUNYnqH7OFG16XMUngmdOvUeEgDwckAshH9 AX5ZSBjBvs1BrfvOApg7dVqCxgFS9UXvqVceHzIo1D+yWpuu2QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLMzbnWhaj2EHwZ3grdlEUWi5w++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODgxYzBiMmYtZDAzNi0z NmVlLTlmOTctNGRjMjdkZTBhYjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AK8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEEzeKeXV4rCVBFhFgzyMUywuBk+OWWHJdlD2bpEdIhAqjamR FwXf+HqHLVgTPltn1tfTAsqcmTlJMlFAqqJ76RiiW3sh3NLF234hn8N0sb3jJ4C7 Ctj5s06ZCM4c4w9/lit77RBG9OxH4AFHvEZHcHKbZ4NOlrtEvwJ5yKUgJztSVNUw sjWB7zoMA47QR5+nwi6DZSRj08472+u+7R5EKzDvxir/puQUgupK+b8iNrlAJDUI Trx9/gAUZb0yB9x+vfupwqLXhfBdqFZ062sr0Bzs0ewoohdGg4ONHODuhNanLX6q JvCNF3uXvFDlCmLi2pSZIwEXGieE+345svlLcQ== -----END CERTIFICATE-----Generated at Wed Apr 22 13:58:12 2026 by rpki-client