$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa File: 2153f012-918f-3df3-b502-a1f6d458aa6a.roa (raw, json) Hash identifier: /cmkjfa9J6p01ESWyUpMi1l2OBZkUrxszC2fsmYUN3c= Subject key identifier: 93:FB:48:82:B4:B8:3A:63:67:8C:31:F3:45:BF:6F:0B:AC:1E:21:04 Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F4328584D9F48A78561C21144B403554E Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa Signing time: Sat 25 Apr 2026 09:21:30 +0000 ROA not before: Sat 25 Apr 2026 09:21:30 +0000 ROA not after: Fri 24 Jul 2026 09:21:30 +0000 asID: 402387 IP address blocks: 2602:f9f6:460::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:48:a7:85:61:c2:11:44:b4:03:55:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Apr 25 09:21:30 2026 GMT Not After : Jul 24 09:21:30 2026 GMT Subject: CN=b119ea3e-c221-4369-b418-62db0f1f1ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:00:7b:9b:99:76:bb:87:b3:54:35:24:9d: b4:01:0b:e3:d3:cd:c8:56:85:6a:bd:1e:0c:8c:f5: 8a:3c:ab:e5:1f:87:64:30:9b:16:8c:34:df:4f:7a: 3a:d9:ef:bb:34:dc:dc:ab:7f:c1:d5:e2:1b:e6:a2: c7:e5:b6:59:64:34:80:a1:c5:68:8f:eb:a7:bf:25: 31:09:c8:8f:a5:a7:1b:5a:d1:38:9a:b4:0f:f3:43: 23:a8:27:c6:d7:12:c1:fe:0a:a1:d3:3c:2e:58:b5: a9:0a:14:7f:f6:64:c9:b0:07:e4:f4:bb:97:7e:3b: d8:1d:ab:3f:7e:a6:d7:04:93:87:1b:e2:60:42:e5: 33:7b:3a:a7:8e:8f:23:c2:c0:c5:4c:4c:56:c7:b3: a0:db:06:1f:5f:5e:db:1f:5c:40:c7:70:bc:0e:ec: a5:f0:55:c2:e7:cd:7b:71:e1:10:ca:31:61:3a:da: 17:ed:64:58:92:e3:36:00:67:6d:5a:34:6c:c0:06: ad:ab:5b:0a:5f:cd:0d:13:cf:a2:cd:89:ec:7d:92: e0:f7:7d:e6:cc:4b:a3:df:8f:7a:9b:c6:6f:35:8a: 96:cb:c3:5d:c3:4e:38:5e:17:87:de:4d:9c:fc:99: e5:25:a4:18:8a:80:9c:42:ba:cd:45:a5:30:14:8e: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:48:82:B4:B8:3A:63:67:8C:31:F3:45:BF:6F:0B:AC:1E:21:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f6:460::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:85:ae:36:6d:98:95:a2:35:6b:e7:ca:2f:61:1e:48:bc:a1: 20:ce:8c:e2:86:f4:4a:67:2d:64:db:3f:bb:52:57:e2:aa:a4: 68:69:1c:0c:0f:96:f5:9a:d6:eb:38:7a:c0:12:64:db:d5:e3: b9:c1:14:06:91:2d:86:82:ab:01:3f:03:01:f4:44:19:37:7f: 76:1c:5c:fe:8c:6f:30:b9:d8:ef:a2:97:2b:93:0e:44:a9:6d: 08:83:c8:fa:f7:1d:43:c9:52:ef:52:bf:5d:64:c8:8d:8f:df: fd:3d:b7:d6:02:f6:1d:13:22:52:25:ed:19:8f:58:b3:11:0c: 42:7a:ad:a0:67:7b:2a:35:7c:92:bc:da:42:2b:f7:78:d9:5d: d6:4a:1b:9e:1b:4d:81:8f:be:1d:42:50:57:24:e1:06:c5:be: 75:6e:da:f7:96:7a:57:2e:08:4a:a0:44:ca:b1:77:9b:97:29: 4b:62:20:4e:11:fc:37:0e:76:34:bf:c6:37:2d:f7:91:b2:1a: ac:98:6a:2e:e5:f6:1b:ee:a4:87:28:88:d9:25:39:d8:60:20: dd:9f:18:80:c7:ce:f6:90:a6:b0:1c:39:f2:d8:30:46:c1:35: 18:40:e0:ff:7a:78:9d:24:f9:97:17:8a:2e:1a:85:99:d0:95: 3d:b6:04:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2fSKeFYcIRRLQDVU4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI2MDQyNTA5MjEzMFoXDTI2MDcyNDA5MjEzMFowLzEtMCsGA1UEAxMk YjExOWVhM2UtYzIyMS00MzY5LWI0MTgtNjJkYjBmMWYxZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC8Ae5uZdruHs1Q1JJ20AQvj083IVoVqvR4M jPWKPKvlH4dkMJsWjDTfT3o62e+7NNzcq3/B1eIb5qLH5bZZZDSAocVoj+unvyUx CciPpacbWtE4mrQP80MjqCfG1xLB/gqh0zwuWLWpChR/9mTJsAfk9LuXfjvYHas/ fqbXBJOHG+JgQuUzezqnjo8jwsDFTExWx7Og2wYfX17bH1xAx3C8Duyl8FXC5817 ceEQyjFhOtoX7WRYkuM2AGdtWjRswAatq1sKX80NE8+izYnsfZLg933mzEuj3496 m8ZvNYqWy8Ndw044XheH3k2c/JnlJaQYioCcQrrNRaUwFI5bsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJP7SIK0uDpjZ4wx80W/bwusHiEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMjE1M2YwMTItOTE4Zi0z ZGYzLWI1MDItYTFmNmQ0NThhYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gRg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6FrjZtmJWiNWvnyi9hHki8oSDOjOKG9EpnLWTbP7tSV+KqpGhp HAwPlvWa1us4esASZNvV47nBFAaRLYaCqwE/AwH0RBk3f3YcXP6MbzC52O+ilyuT DkSpbQiDyPr3HUPJUu9Sv11kyI2P3/09t9YC9h0TIlIl7RmPWLMRDEJ6raBneyo1 fJK82kIr93jZXdZKG54bTYGPvh1CUFck4QbFvnVu2veWelcuCEqgRMqxd5uXKUti IE4R/DcOdjS/xjct95GyGqyYai7l9hvupIcoiNklOdhgIN2fGIDHzvaQprAcOfLY MEbBNRhA4P96eJ0k+ZcXii4ahZnQlT22BE4= -----END CERTIFICATE-----Generated at Mon Apr 27 14:03:15 2026 by rpki-client