$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa File: d08c84e2-cf05-324f-9e29-a1020bf31620.roa (raw, json) Hash identifier: jG9LM9ctuYuyWYjy5lxFlhvov+sxBM0c2ykaQ0AlsdQ= Subject key identifier: 36:6C:90:13:37:8D:6C:83:D6:A0:E3:7F:52:74:5C:E5:7E:22:1E:D3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584D95F00BBCB34C7F2B6C70D480 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 22781 IP address blocks: 2606:b300:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0b:bc:b3:4c:7f:2b:6c:70:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=8e6581ea-2ab8-4539-9914-2f94d663bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:ae:42:1c:09:ac:d9:64:c3:5e:4c:11:43: a1:40:9e:ff:9c:26:74:ca:58:4d:13:9f:54:8b:99: 92:14:14:26:0d:a9:68:9c:25:06:c8:f5:69:53:62: 87:3d:ed:5b:0c:30:bd:21:aa:81:8b:51:a1:52:c6: 70:e5:07:a0:76:a5:db:e5:0e:b5:a8:92:ad:8c:fb: 9c:a5:5b:27:3b:89:fb:98:7b:68:ea:bc:d9:cf:11: ba:5d:44:0c:fe:46:bc:da:e1:e0:ba:c7:0f:1b:9f: 73:4c:b9:ef:69:a1:16:35:d7:4e:4f:cd:39:96:a4: 8e:8b:f3:1f:02:fc:29:b5:8e:60:8c:1c:c7:d3:74: d7:ab:a9:84:50:25:00:89:51:13:7c:d7:ec:cf:72: 40:a0:f6:78:d8:71:d3:85:2c:89:ac:b0:ab:3e:c3: 23:2a:5e:db:d2:04:52:de:e7:77:a8:29:b6:b2:e3: 10:0b:e9:ee:c6:00:36:1b:25:b2:86:cd:cf:cc:ac: bd:b3:36:6f:57:95:b4:05:80:8b:05:0c:82:3d:88: 9f:88:e3:66:9d:2e:a4:e9:e4:fe:58:e5:9e:ad:43: 79:94:45:5e:e5:b9:b6:d8:da:d0:c3:60:f7:ab:ec: 90:2c:37:28:b3:20:3f:66:c7:be:f0:3a:5f:24:16: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6C:90:13:37:8D:6C:83:D6:A0:E3:7F:52:74:5C:E5:7E:22:1E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2606:b300:8100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d4:f6:2b:f1:b8:10:70:64:3e:35:bd:60:c3:f0:5f:42:a7: 89:3b:9c:31:8d:0b:97:c0:be:d8:fc:c3:3f:51:d3:88:04:57: d3:b0:1b:95:9c:ea:17:10:94:65:40:eb:a8:3c:63:40:01:fc: 13:ae:bf:1d:bf:81:37:ca:13:76:89:47:6b:13:dd:a8:61:a9: 5b:28:4e:91:de:72:55:d9:6e:94:f4:b2:37:5b:3f:1c:34:3e: 0a:81:80:36:01:eb:9c:e1:ee:8c:a2:57:f5:28:25:a7:75:40: 92:7f:58:31:9d:64:c6:5c:71:dd:a8:c9:f5:92:dc:01:ac:db: 8b:c3:6e:06:27:05:ff:06:90:38:da:e2:f3:78:7f:e9:4c:4b: 43:21:2c:68:2b:43:35:2c:04:3a:4e:b6:05:d6:c9:a5:c3:9a: 86:89:98:5e:78:74:a6:49:1c:e1:f9:ae:f8:be:47:ad:e3:3c: d0:e8:78:aa:d8:dc:99:01:46:4b:7b:65:c8:84:0c:cf:7c:68: ea:08:03:98:dc:27:42:ef:b6:ce:8e:c6:ab:69:02:82:28:91: 6c:68:77:ff:0e:bb:24:9e:39:5c:b0:6f:7e:c8:7a:c8:b3:ea: 6a:c9:f0:d9:87:ad:57:86:8a:0a:85:bd:b1:20:ed:bc:96:2e: 4a:d8:c4:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2V8Au8s0x/K2xw1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OGU2NTgxZWEtMmFiOC00NTM5LTk5MTQtMmY5NGQ2NjNiZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGWuQhwJrNlkw15MEUOhQJ7/nCZ0ylhNE59U i5mSFBQmDalonCUGyPVpU2KHPe1bDDC9IaqBi1GhUsZw5QegdqXb5Q61qJKtjPuc pVsnO4n7mHto6rzZzxG6XUQM/ka82uHguscPG59zTLnvaaEWNddOT805lqSOi/Mf AvwptY5gjBzH03TXq6mEUCUAiVETfNfsz3JAoPZ42HHThSyJrLCrPsMjKl7b0gRS 3ud3qCm2suMQC+nuxgA2GyWyhs3PzKy9szZvV5W0BYCLBQyCPYifiONmnS6k6eT+ WOWerUN5lEVe5bm22NrQw2D3q+yQLDcosyA/Zse+8DpfJBY+1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDZskBM3jWyD1qDjf1J0XOV+Ih7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDA4Yzg0ZTItY2YwNS0z MjRmLTllMjktYTEwMjBiZjMxNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgazAIEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfdT2K/G4EHBkPjW9YMPwX0KniTucMY0Ll8C+2PzDP1HTiARX07Ab lZzqFxCUZUDrqDxjQAH8E66/Hb+BN8oTdolHaxPdqGGpWyhOkd5yVdlulPSyN1s/ HDQ+CoGANgHrnOHujKJX9Sglp3VAkn9YMZ1kxlxx3ajJ9ZLcAazbi8NuBicF/waQ ONri83h/6UxLQyEsaCtDNSwEOk62BdbJpcOahomYXnh0pkkc4fmu+L5HreM80Oh4 qtjcmQFGS3tlyIQMz3xo6ggDmNwnQu+2zo7Gq2kCgiiRbGh3/w67JJ45XLBvfsh6 yLPqasnw2YetV4aKCoW9sSDtvJYuStjEDA== -----END CERTIFICATE-----Generated at Wed Apr 22 07:07:13 2026 by rpki-client