$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa File: 396d499f-2ea7-3c33-ab89-036118ac5c6c.roa (raw, json) Hash identifier: n1iFHqVsyy1a9OdfxMjcqQU6uWVQuDdJXQGr5XN19lk= Subject key identifier: 02:BE:4B:CA:B1:15:49:97:97:D1:36:DD:41:DA:6D:C1:DD:2B:7C:A6 Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Certificate serial: 010D0C9F4328584D7A0532DEDFC0CDF331688C00 Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 2602:fdaa:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:32:de:df:c0:cd:f3:31:68:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=8ae6e28d-671d-4824-be61-0cc361926d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f0:c3:3e:31:88:dc:d5:8f:4f:42:52:a4:ce: 9c:76:42:4d:23:29:c4:85:75:a3:1d:d5:ba:dd:51: 23:6a:bc:11:bd:64:e4:4c:35:92:09:06:cd:8f:38: 46:b3:ec:c6:2c:38:35:1c:8a:4e:ee:58:4b:54:1f: 57:0e:d2:7a:16:ac:49:5b:5d:14:09:9f:f2:a5:b5: 6b:1b:98:86:05:0e:a6:e9:4b:8a:5c:c4:60:bd:2b: da:3e:8a:be:a1:5b:f6:c5:5f:6e:de:0d:82:5c:3d: f6:fe:e2:c8:9d:67:a1:5a:e5:9e:1b:c2:3c:70:db: 54:8b:6f:88:69:28:0b:38:4b:3c:88:92:a3:71:1a: fc:9b:84:42:09:fa:23:3f:18:c6:0d:a8:32:7f:42: 32:55:df:73:a8:64:db:6e:60:88:11:86:58:3b:23: 33:2a:50:35:a7:13:10:5d:83:f9:a7:a8:f1:46:22: 8f:5b:2f:5c:3d:b9:d9:52:7e:e8:5a:30:8f:17:f7: 8a:97:9d:bd:58:5a:38:c9:1e:fa:f9:74:d4:da:78: 33:6e:8c:a1:e1:56:33:22:54:56:7d:18:e3:41:fd: 7b:84:99:1a:c9:7b:4a:7c:3c:86:74:03:18:52:fa: 6f:c0:3e:46:0e:93:98:cd:df:4a:f9:d6:ba:72:ff: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BE:4B:CA:B1:15:49:97:97:D1:36:DD:41:DA:6D:C1:DD:2B:7C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/396d499f-2ea7-3c33-ab89-036118ac5c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl X509v3 Authority Key Identifier: keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdaa:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2f:bb:a7:18:53:be:c5:ad:aa:db:b8:b2:80:69:85:06:1e: fe:ec:43:ef:af:d4:26:59:ae:95:cc:ae:bd:ee:90:9c:3d:cb: 68:51:59:d8:70:88:2c:a8:df:0f:8b:df:73:2b:11:19:34:10: 0a:80:99:44:a0:47:aa:72:85:5c:a4:0a:b6:f0:6a:9d:15:ca: 03:96:b8:d2:24:a1:2d:84:2e:54:af:53:5e:0b:f5:8c:a9:f5: e9:42:fd:ad:d5:93:3b:b3:5c:2f:1a:9e:57:cc:1a:7c:8e:c0: 5c:bf:16:87:25:67:9f:a2:11:85:42:84:94:53:49:cc:a3:7e: 60:a9:f9:aa:c5:2a:5d:62:d5:6d:5a:68:6f:f1:e1:30:5c:61: d0:6f:11:44:c6:cd:1f:74:ac:ef:6a:c8:b7:b0:80:65:fc:de: af:6b:bd:b3:91:07:ae:f4:fe:b7:85:27:bb:4b:06:12:0f:06: e7:f8:12:9c:8a:b9:0b:56:51:d8:ed:90:a3:11:a4:66:22:b2: ff:65:0d:ce:1e:bc:20:c0:53:7d:69:6b:3f:be:e4:c0:7c:da: 5a:5c:e3:e1:52:fa:6e:cf:33:28:a9:e6:db:a8:46:4a:69:ce: 08:a7:44:a0:0b:9d:88:86:a1:d5:14:c2:6d:85:79:0f:26:ff: a2:2b:05:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE16BTLe38DN8zFojAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx ZDQxMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OGFlNmUyOGQtNjcxZC00ODI0LWJlNjEtMGNjMzYxOTI2ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/DDPjGI3NWPT0JSpM6cdkJNIynEhXWjHdW6 3VEjarwRvWTkTDWSCQbNjzhGs+zGLDg1HIpO7lhLVB9XDtJ6FqxJW10UCZ/ypbVr G5iGBQ6m6UuKXMRgvSvaPoq+oVv2xV9u3g2CXD32/uLInWehWuWeG8I8cNtUi2+I aSgLOEs8iJKjcRr8m4RCCfojPxjGDagyf0IyVd9zqGTbbmCIEYZYOyMzKlA1pxMQ XYP5p6jxRiKPWy9cPbnZUn7oWjCPF/eKl529WFo4yR76+XTU2ngzboyh4VYzIlRW fRjjQf17hJkayXtKfDyGdAMYUvpvwD5GDpOYzd9K+da6cv83MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAK+S8qxFUmXl9E23UHabcHdK3ymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2 ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMzk2ZDQ5OWYtMmVhNy0z YzMzLWFiODktMDM2MTE4YWM1YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2 NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl OGNlYzFkNDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9qgBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEovu6cYU77FrarbuLKAaYUGHv7sQ++v1CZZrpXMrr3ukJw9y2hR WdhwiCyo3w+L33MrERk0EAqAmUSgR6pyhVykCrbwap0VygOWuNIkoS2ELlSvU14L 9Yyp9elC/a3VkzuzXC8anlfMGnyOwFy/FoclZ5+iEYVChJRTScyjfmCp+arFKl1i 1W1aaG/x4TBcYdBvEUTGzR90rO9qyLewgGX83q9rvbORB670/reFJ7tLBhIPBuf4 EpyKuQtWUdjtkKMRpGYisv9lDc4evCDAU31paz++5MB82lpc4+FS+m7PMyip5tuo RkppzginRKALnYiGodUUwm2FeQ8m/6IrBT0= -----END CERTIFICATE-----Generated at Mon Apr 13 14:37:34 2026 by rpki-client