$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa File: d55e0fe8-e623-358e-8724-18bd483855d9.roa (raw, json) Hash identifier: /nOzJeSjjkApzuuEAGTHZPFeP02B8XOoT7F4+UHOmeU= Subject key identifier: 11:F5:1C:1D:A3:CD:DF:AC:60:57:83:40:0B:D7:17:51:12:FA:74:49 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584D9A200F812C88834279B11300 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 16509 IP address blocks: 2620:133:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:0f:81:2c:88:83:42:79:b1:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=47229ce8-d0b9-4a6a-993a-3a76f6ccbdda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:1b:3a:f2:33:d6:0d:f0:e2:85:11:dc:54: dd:96:86:90:17:03:e7:3e:c8:92:0f:cd:2a:b1:0a: 10:9b:14:9a:e4:03:5f:a0:d7:63:a0:5a:22:cc:8b: 57:bf:16:79:3b:3e:a4:55:cb:30:32:73:ac:33:70: 57:ac:99:a2:4a:6d:db:7b:06:b2:8c:3d:15:92:1a: ae:f3:96:75:58:5e:d7:dd:44:4e:3c:1c:b6:53:bd: 52:ef:6d:99:be:b3:a3:ae:60:57:5a:ba:57:73:e3: 0c:d2:75:0e:2b:b1:1d:bb:d2:a4:7e:b7:4e:00:33: 5e:16:4b:19:11:e3:91:7c:3c:3b:e3:6f:10:f2:eb: 9d:ba:ee:1d:bc:9b:51:d2:ee:11:84:c7:56:82:3d: c6:9e:86:b2:2e:21:41:82:5a:19:b9:4b:01:75:50: b2:8a:b2:63:5b:59:68:e6:de:ad:88:60:46:a8:3b: 92:92:30:ad:af:97:9f:ed:80:6f:0a:08:22:37:bc: 41:b5:b1:a7:0b:54:02:e0:f7:8d:2c:a6:07:7f:18: af:5a:7a:5c:d8:09:89:58:f6:cb:ec:ca:ad:5c:22: 8e:66:56:f5:c5:25:a4:18:25:ee:59:5e:8c:45:39: 94:a1:5f:ec:a5:07:a0:00:17:fa:f7:be:af:2b:7c: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:1C:1D:A3:CD:DF:AC:60:57:83:40:0B:D7:17:51:12:FA:74:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d55e0fe8-e623-358e-8724-18bd483855d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv6: 2620:133:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:4b:7c:56:c2:f7:4f:4a:c3:41:9e:f9:a8:a1:62:31:c6:54: b9:b6:ed:c6:33:77:46:9d:7f:51:25:01:56:ed:ff:43:ff:70: 35:01:f3:c8:ac:bb:17:c7:b7:e6:a4:98:33:b4:80:a8:30:b6: 8f:ab:95:cd:4d:11:6c:c0:ef:bc:31:08:62:22:e2:29:59:03: f8:1a:4c:3c:c6:ec:bf:27:f8:d3:ba:ab:6b:bc:1f:41:69:b8: 9f:8d:9e:a2:43:d7:82:41:7a:92:89:41:af:6c:0c:6b:6c:2a: ae:d9:5d:99:b2:04:d9:ab:50:ff:89:9c:c1:4b:c9:a0:d2:39: 18:61:1f:99:88:85:0f:ed:ea:d3:2e:3b:c0:77:04:0b:c3:0d: a5:e7:60:40:74:5f:59:b7:c0:63:0f:2b:80:06:d1:53:38:c6: ea:ba:b2:fe:36:8e:42:21:24:bf:95:09:b5:a9:d2:7e:fe:f6: 91:5b:fd:f4:80:d7:33:ce:f7:e8:2b:ab:69:8b:60:83:ee:7f: dc:87:41:8e:d5:6e:fd:08:95:a6:4e:44:88:2e:d9:75:f8:51: 28:ea:6a:57:08:19:00:b1:76:d3:94:47:47:24:7f:81:f8:66: 7e:97:13:93:c2:60:cd:4a:df:02:55:26:48:c6:2d:60:6c:d4: f1:25:9b:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIA+BLIiDQnmxEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NDcyMjljZTgtZDBiOS00YTZhLTk5M2EtM2E3NmY2Y2NiZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6obOvIz1g3w4oUR3FTdloaQFwPnPsiSD80q sQoQmxSa5ANfoNdjoFoizItXvxZ5Oz6kVcswMnOsM3BXrJmiSm3bewayjD0Vkhqu 85Z1WF7X3UROPBy2U71S722ZvrOjrmBXWrpXc+MM0nUOK7Edu9KkfrdOADNeFksZ EeORfDw7428Q8uuduu4dvJtR0u4RhMdWgj3GnoayLiFBgloZuUsBdVCyirJjW1lo 5t6tiGBGqDuSkjCtr5ef7YBvCggiN7xBtbGnC1QC4PeNLKYHfxivWnpc2AmJWPbL 7MqtXCKOZlb1xSWkGCXuWV6MRTmUoV/spQegABf6976vK3z4FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBH1HB2jzd+sYFeDQAvXF1ES+nRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDU1ZTBmZTgtZTYyMy0z NThlLTg3MjQtMThiZDQ4Mzg1NWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABM8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMtLfFbC909Kw0Ge+aihYjHGVLm27cYzd0adf1ElAVbt/0P/cDUB 88isuxfHt+akmDO0gKgwto+rlc1NEWzA77wxCGIi4ilZA/gaTDzG7L8n+NO6q2u8 H0FpuJ+NnqJD14JBepKJQa9sDGtsKq7ZXZmyBNmrUP+JnMFLyaDSORhhH5mIhQ/t 6tMuO8B3BAvDDaXnYEB0X1m3wGMPK4AG0VM4xuq6sv42jkIhJL+VCbWp0n7+9pFb /fSA1zPO9+grq2mLYIPuf9yHQY7Vbv0IlaZORIgu2XX4USjqalcIGQCxdtOUR0ck f4H4Zn6XE5PCYM1K3wJVJkjGLWBs1PElm+E= -----END CERTIFICATE-----Generated at Sun May 3 15:32:38 2026 by rpki-client