$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d857b64-f3b7-372f-b0f2-13da2809eb1d.roa File: 5d857b64-f3b7-372f-b0f2-13da2809eb1d.roa (raw, json) Hash identifier: Mnw+zkD9WX8OB7woXJZER6QMRuONZJw2+pFVdgkTIB8= Subject key identifier: CC:46:43:0A:37:6A:95:5C:1E:83:75:C9:55:D6:55:03:0E:8D:A1:0A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584DAAE02D4996391306E5A29600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d857b64-f3b7-372f-b0f2-13da2809eb1d.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:112::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2d:49:96:39:13:06:e5:a2:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=6224bc0d-e9a2-4cdd-a8ea-b3c2da1ae89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:6a:e1:d3:19:68:9e:3c:af:36:b7:b2:02: d3:58:59:e2:48:07:0c:5a:c7:3f:3b:8e:ec:6e:74: 51:b1:43:91:4c:d9:3a:6a:20:77:e5:56:6f:9f:ca: 33:66:60:61:2c:69:1e:97:6a:b6:a7:b7:9d:a7:16: 87:a0:11:d9:f0:36:b7:19:90:c0:c8:1d:be:39:b7: e5:ca:2b:a9:74:3a:fc:d8:37:ba:ea:f5:99:7e:3e: ea:0d:f5:ec:6f:4c:f8:0b:af:83:82:b1:59:05:34: 5a:00:92:ac:8f:02:8a:83:f8:eb:fd:ec:e7:66:59: d0:94:2c:f8:28:fa:ee:10:70:9d:c1:0c:8e:66:4b: d2:1d:a7:3e:96:09:c1:59:91:cb:bc:af:fa:c8:ae: e1:29:0d:2a:1a:9e:4e:b4:90:c3:b6:db:ca:82:a8: f6:a3:a3:d1:c8:ec:03:ed:81:7f:84:4a:7d:38:3f: 21:52:03:00:88:96:5e:3b:ce:c7:30:1f:65:ca:94: 52:48:62:12:c9:4a:47:21:10:b1:b5:33:12:8d:db: 75:cb:a5:75:7a:c8:4b:90:21:8d:b6:57:a9:1f:43: 21:09:76:39:dc:98:38:cb:93:75:e4:8f:7d:55:ef: 96:76:bf:a1:45:0d:7d:e5:39:72:2c:3a:cd:a0:5a: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:43:0A:37:6A:95:5C:1E:83:75:C9:55:D6:55:03:0E:8D:A1:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d857b64-f3b7-372f-b0f2-13da2809eb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:112::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:80:8c:87:27:21:17:7e:f9:ca:e7:3e:bc:36:97:25:51:0a: fd:74:62:80:70:c3:3b:60:38:bf:b6:09:14:3f:51:de:45:6a: 9b:fc:eb:05:4d:a1:9b:ff:47:82:cb:2d:be:ec:7f:1b:86:e6: cb:61:80:11:88:44:3d:c6:06:87:74:cc:34:f3:cd:a7:1f:33: 69:06:13:cc:92:dd:84:4b:d0:48:af:ef:58:19:dc:62:ff:97: c6:d1:30:53:1e:e6:fc:8a:be:68:7e:b5:97:c2:77:7a:f2:cd: cf:6f:41:c8:63:cc:a7:f5:c9:f8:88:78:5e:70:7c:93:59:84: ff:1d:98:89:53:bd:26:03:fa:20:2a:d8:fd:d8:ff:93:64:1a: 6c:d7:0b:cf:75:c1:40:b9:19:cb:16:77:f9:7d:5d:de:6e:3e: be:44:c5:37:70:a4:b3:ef:7e:8f:7c:9d:33:8c:2a:89:68:e6: a1:98:94:5b:9e:c4:4d:64:0b:d3:70:26:31:c5:21:e4:2d:f4: f8:c7:c0:5b:41:ee:61:05:f3:56:fe:40:4f:cc:68:81:b1:95: 0d:f6:5f:1e:02:68:15:b2:21:2e:4e:87:71:c7:6d:85:a0:34: ac:12:d6:03:5b:95:c9:c7:0b:d6:75:1a:02:2d:67:b9:5a:bf: ce:1a:26:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4C1JljkTBuWilgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NjIyNGJjMGQtZTlhMi00Y2RkLWE4ZWEtYjNjMmRhMWFlODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopBq4dMZaJ48rza3sgLTWFniSAcMWsc/O47s bnRRsUORTNk6aiB35VZvn8ozZmBhLGkel2q2p7edpxaHoBHZ8Da3GZDAyB2+Obfl yiupdDr82De66vWZfj7qDfXsb0z4C6+DgrFZBTRaAJKsjwKKg/jr/eznZlnQlCz4 KPruEHCdwQyOZkvSHac+lgnBWZHLvK/6yK7hKQ0qGp5OtJDDttvKgqj2o6PRyOwD 7YF/hEp9OD8hUgMAiJZeO87HMB9lypRSSGISyUpHIRCxtTMSjdt1y6V1eshLkCGN tlepH0MhCXY53Jg4y5N15I99Ve+Wdr+hRQ195TlyLDrNoFqYKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxGQwo3apVcHoN1yVXWVQMOjaEKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWQ4NTdiNjQtZjNiNy0z NzJmLWIwZjItMTNkYTI4MDllYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAES MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHqAjIcnIRd++crnPrw2lyVRCv10YoBwwztgOL+2CRQ/Ud5Fapv8 6wVNoZv/R4LLLb7sfxuG5sthgBGIRD3GBod0zDTzzacfM2kGE8yS3YRL0Eiv71gZ 3GL/l8bRMFMe5vyKvmh+tZfCd3ryzc9vQchjzKf1yfiIeF5wfJNZhP8dmIlTvSYD +iAq2P3Y/5NkGmzXC891wUC5GcsWd/l9Xd5uPr5ExTdwpLPvfo98nTOMKolo5qGY lFuexE1kC9NwJjHFIeQt9PjHwFtB7mEF81b+QE/MaIGxlQ32Xx4CaBWyIS5Oh3HH bYWgNKwS1gNblcnHC9Z1GgItZ7lav84aJns= -----END CERTIFICATE-----Generated at Sat May 9 08:14:16 2026 by rpki-client