$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa File: 57fa0ca6-1715-3f75-9307-19d735520956.roa (raw, json) Hash identifier: PaCxsQxHIQQ4HWToQ2/tBncKbiHpt/oh891Do4UcnW0= Subject key identifier: 26:D8:3E:5B:BA:74:4B:35:7C:62:EB:AE:2D:4F:E8:05:7B:23:54:BD Certificate issuer: /CN=0a387fbb-813d-452e-8a43-3425e95bbecc Certificate serial: 010D0C9F4328584D75D51F178C8691AFC4143EE0 Authority key identifier: D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 401333 IP address blocks: 2607:d4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:1f:17:8c:86:91:af:c4:14:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a387fbb-813d-452e-8a43-3425e95bbecc Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=1be4ed0d-ca83-47a6-8398-53aa9ed4d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:fc:94:50:54:e7:ff:aa:39:2e:c0:11:ac: 31:aa:99:bb:f1:de:79:f1:91:30:9a:09:03:7f:22: b6:0a:6c:e9:df:b2:4c:85:32:98:35:a1:0f:44:67: 9b:56:21:f7:88:f2:4b:b2:cf:c6:ac:22:2a:92:34: 97:4a:a1:2d:f7:c2:46:8a:a8:e3:08:2b:c7:28:bd: d2:19:f4:aa:70:80:22:ea:ae:80:04:52:52:4c:af: c9:b7:7d:15:39:f2:43:64:9a:05:ea:9b:d5:3b:1a: 84:c0:ca:78:eb:01:e3:28:0e:22:c2:cc:19:6e:7e: ad:e0:2f:4f:02:e2:a3:72:c9:54:15:ff:05:85:6a: de:dc:ad:54:68:1f:c8:6e:b6:97:66:62:60:61:dd: fd:6d:ed:d1:bc:21:d6:59:59:17:f0:c9:c2:02:45: 0a:6d:38:d2:0f:0b:e6:a8:67:43:3d:bd:a3:31:86: ad:5e:9f:f4:d8:5b:4e:75:15:dc:52:2f:0b:b6:eb: 76:1a:7b:32:f4:eb:03:18:96:50:f7:94:3a:d2:70: 7e:b0:22:43:7f:a6:2c:a6:4c:22:e1:40:7b:5e:52: ac:8a:87:3a:4e:28:a6:9d:0c:4e:88:4f:af:13:6b: dd:e9:6e:d5:fb:06:aa:18:5a:61:19:19:c5:67:51: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D8:3E:5B:BA:74:4B:35:7C:62:EB:AE:2D:4F:E8:05:7B:23:54:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/57fa0ca6-1715-3f75-9307-19d735520956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc/0a387fbb-813d-452e-8a43-3425e95bbecc.crl X509v3 Authority Key Identifier: keyid:D1:83:DE:EF:38:12:40:E0:92:E9:E5:D8:51:DB:FB:04:61:05:A3:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a387fbb-813d-452e-8a43-3425e95bbecc.cer sbgp-ipAddrBlock: critical IPv6: 2607:d4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f2:30:04:4b:b3:94:2f:d3:8a:3f:99:ce:b1:39:c3:6e:ee: cd:7b:ce:23:1f:1b:d0:9d:74:a2:a9:0c:6d:27:50:5a:99:7b: 26:92:4c:f7:9a:39:e7:ea:40:f4:41:65:65:3d:da:24:f6:40: fe:97:93:4a:b3:ca:ad:c0:ff:46:dc:9a:60:f2:89:c2:08:d8: 80:7e:6b:f9:84:e3:9d:b1:c2:d7:08:54:df:be:29:34:a0:5b: 62:60:ad:34:1f:e6:7b:a0:de:c4:3a:b4:fd:44:70:69:b5:5b: a0:27:40:f7:c1:c0:83:bf:1c:b4:81:c3:5b:11:2a:9f:10:20: a3:02:c2:76:21:4a:f1:a3:0b:8b:6f:1b:b9:77:f8:82:e5:43: 26:37:8f:99:3d:5b:90:30:73:0c:58:e1:e8:3d:0f:6c:e6:56: ac:0f:47:ac:16:1a:21:63:2d:43:18:56:ed:dc:4c:d9:92:1d: a4:f4:23:57:67:88:dd:36:aa:59:48:9d:8f:91:5b:a5:87:24: 3d:0c:0e:ae:9a:56:25:53:86:d1:7b:52:1c:6e:1b:85:d4:3a: 03:6f:04:09:ec:fd:e8:83:56:1f:e0:30:62:b1:ef:43:e1:1c: 5a:80:35:5a:c2:3b:3b:d8:3c:3a:01:73:93:50:27:1a:34:4c: 67:ac:37:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE111R8XjIaRr8QUPuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEzODdmYmItODEzZC00NTJlLThhNDMtMzQyNWU5NWJi ZWNjMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk MWJlNGVkMGQtY2E4My00N2E2LTgzOTgtNTNhYTllZDRkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrv8lFBU5/+qOS7AEawxqpm78d558ZEwmgkD fyK2Cmzp37JMhTKYNaEPRGebViH3iPJLss/GrCIqkjSXSqEt98JGiqjjCCvHKL3S GfSqcIAi6q6ABFJSTK/Jt30VOfJDZJoF6pvVOxqEwMp46wHjKA4iwswZbn6t4C9P AuKjcslUFf8FhWre3K1UaB/IbraXZmJgYd39be3RvCHWWVkX8MnCAkUKbTjSDwvm qGdDPb2jMYatXp/02FtOdRXcUi8Ltut2Gnsy9OsDGJZQ95Q60nB+sCJDf6Yspkwi 4UB7XlKsioc6TiimnQxOiE+vE2vd6W7V+waqGFphGRnFZ1H2BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCbYPlu6dEs1fGLrri1P6AV7I1S9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4 N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1ZTk1YmJlY2MvNTdmYTBjYTYtMTcxNS0z Zjc1LTkzMDctMTlkNzM1NTIwOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGEzODdmYmItODEzZC00NTJlLThh NDMtMzQyNWU5NWJiZWNjLzBhMzg3ZmJiLTgxM2QtNDUyZS04YTQzLTM0MjVlOTVi YmVjYy5jcmwwHwYDVR0jBBgwFoAU0YPe7zgSQOCS6eXYUdv7BGEFo9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTM4N2ZiYi04MTNkLTQ1MmUtOGE0My0zNDI1 ZTk1YmJlY2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAq8jAES7OUL9OKP5nOsTnDbu7Ne84jHxvQnXSiqQxtJ1BamXsmkkz3 mjnn6kD0QWVlPdok9kD+l5NKs8qtwP9G3Jpg8onCCNiAfmv5hOOdscLXCFTfvik0 oFtiYK00H+Z7oN7EOrT9RHBptVugJ0D3wcCDvxy0gcNbESqfECCjAsJ2IUrxowuL bxu5d/iC5UMmN4+ZPVuQMHMMWOHoPQ9s5lasD0esFhohYy1DGFbt3EzZkh2k9CNX Z4jdNqpZSJ2PkVulhyQ9DA6umlYlU4bRe1IcbhuF1DoDbwQJ7P3og1Yf4DBise9D 4RxagDVawjs72Dw6AXOTUCcaNExnrDeY -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:11 2026 by rpki-client