$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa File: da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa (raw, json) Hash identifier: 6ypp3B/N0qoaYgFZ1Xgy1jeUoISrR75FcA57x/hBU10= Subject key identifier: 24:82:77:19:89:2F:A8:19:DA:BB:68:61:1D:5B:38:31:4D:2A:23:85 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584D91C0031B8DC494FFFDCF7880 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 14263 IP address blocks: 2607:f578::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:1b:8d:c4:94:ff:fd:cf:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1ce1954d-7950-4788-b332-41cd18758387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:84:f2:3e:ad:02:6c:cd:bc:c6:e8:b9:2c: 3c:87:09:85:02:22:3b:2b:68:b1:63:d1:d0:7a:80: 9c:ed:cb:c4:c3:74:86:a7:5b:ab:4c:4a:c8:bc:bb: 2a:36:7d:2c:10:06:9e:04:f9:8d:05:25:38:c2:3d: 47:4f:68:4e:45:cc:93:c3:73:77:c8:93:1c:ce:f7: 02:b2:72:98:dd:1b:46:82:f7:46:71:ac:19:5d:ca: 63:df:98:e0:a3:60:85:e4:2b:41:a5:08:6a:de:ea: c0:3c:be:fe:53:ca:62:2b:61:b5:b3:94:c6:c4:1d: 3a:4b:ec:c1:29:9a:3d:58:53:65:3f:60:c8:e3:9f: 09:e8:a6:03:34:c2:7f:f2:60:fd:e2:7a:e7:9f:cd: 98:0b:d5:d3:82:69:1e:95:48:66:e5:ac:c3:91:05: 3f:df:5b:4a:dc:cf:79:0f:b8:12:f1:25:0a:24:2d: 18:59:d3:12:99:0a:76:8d:11:1b:5d:ab:18:06:f2: ec:24:24:53:46:70:bb:d2:c5:98:a3:40:c3:7c:0d: c0:28:5c:38:53:10:6a:29:01:50:f6:df:d0:9b:92: c3:3e:60:4a:4c:61:27:03:16:1f:75:f3:3b:3d:21: 09:2e:66:22:10:8c:51:09:7d:c3:5f:3a:3e:5c:f1: 08:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:82:77:19:89:2F:A8:19:DA:BB:68:61:1D:5B:38:31:4D:2A:23:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv6: 2607:f578::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5a:89:30:11:4f:03:e9:d4:ef:52:9c:ab:dc:8d:66:99:a6: cc:3a:dd:c2:ea:b5:b1:f0:86:1b:b2:40:fd:b5:9f:29:92:6a: 7a:50:30:09:74:f1:6c:83:38:aa:82:55:ee:a9:65:1a:95:d3: 56:d8:85:4a:dc:67:37:9c:ef:c6:6f:7c:a1:63:dd:71:b8:8a: fc:83:ff:21:ac:f1:e2:4d:22:9d:53:ce:30:42:25:8d:31:94: 74:fc:04:8e:af:b9:92:a8:23:22:ef:27:07:a8:42:c7:b7:94: 4f:20:8b:ff:e3:af:d6:43:b8:da:e8:e3:81:12:7d:19:62:93: e1:35:c4:22:d9:70:21:cd:e7:cd:2b:b5:2a:3e:2d:5c:c4:2d: 2a:f2:32:d9:a9:ed:ff:e5:aa:f4:b0:67:39:c1:ca:4d:d5:ac: 6e:26:af:90:a9:7a:dc:f5:8a:89:19:e5:60:a3:78:ab:74:90: 98:2c:2e:b6:b5:9b:b4:ea:1b:34:1d:c4:28:dd:01:bb:d1:06: 6d:0b:25:4f:17:ea:ae:51:07:b3:a4:9c:ac:4a:f5:10:b3:da: 7f:21:67:8e:15:14:ac:5f:05:cb:59:9e:9e:d8:c3:e4:49:2b: cd:7e:9a:fb:33:25:a0:11:e2:c2:fa:09:16:9c:f2:7f:05:3b: 61:54:90:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwAMbjcSU//3PeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWNlMTk1NGQtNzk1MC00Nzg4LWIzMzItNDFjZDE4NzU4Mzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk6E8j6tAmzNvMbouSw8hwmFAiI7K2ixY9HQ eoCc7cvEw3SGp1urTErIvLsqNn0sEAaeBPmNBSU4wj1HT2hORcyTw3N3yJMczvcC snKY3RtGgvdGcawZXcpj35jgo2CF5CtBpQhq3urAPL7+U8piK2G1s5TGxB06S+zB KZo9WFNlP2DI458J6KYDNMJ/8mD94nrnn82YC9XTgmkelUhm5azDkQU/31tK3M95 D7gS8SUKJC0YWdMSmQp2jREbXasYBvLsJCRTRnC70sWYo0DDfA3AKFw4UxBqKQFQ 9t/Qm5LDPmBKTGEnAxYfdfM7PSEJLmYiEIxRCX3DXzo+XPEIkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCSCdxmJL6gZ2rtoYR1bODFNKiOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvZGEyZTk1NDAtZjEwNi0z ZmVmLWE1MTgtM2EyYWE5YjFmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1eDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBWokwEU8D6dTvUpyr3I1mmabMOt3C6rWx8IYbskD9tZ8pkmp6UDAJ dPFsgziqglXuqWUaldNW2IVK3Gc3nO/Gb3yhY91xuIr8g/8hrPHiTSKdU84wQiWN MZR0/ASOr7mSqCMi7ycHqELHt5RPIIv/46/WQ7ja6OOBEn0ZYpPhNcQi2XAhzefN K7UqPi1cxC0q8jLZqe3/5ar0sGc5wcpN1axuJq+QqXrc9YqJGeVgo3irdJCYLC62 tZu06hs0HcQo3QG70QZtCyVPF+quUQezpJysSvUQs9p/IWeOFRSsXwXLWZ6e2MPk SSvNfpr7MyWgEeLC+gkWnPJ/BTthVJCV -----END CERTIFICATE-----Generated at Wed Apr 22 10:42:19 2026 by rpki-client