$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa File: 42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa (raw, json) Hash identifier: XYl2W5oNSjyQCU914WMqmBDqy30o+gEIgNpvi1SWuno= Subject key identifier: D9:84:E3:C5:67:C6:61:31:9E:28:DF:CD:28:57:67:79:66:E6:19:53 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A594A065BB32104492CD80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 2620:11a:c045::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:94:a0:65:bb:32:10:44:92:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=b38566c4-fc67-4614-b139-246ae45eabf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:8f:fb:3a:ba:1a:f9:0b:04:63:0e:a7:91: b3:35:57:e5:f2:c5:fc:56:a8:83:c3:06:29:6f:01: fb:e2:4b:75:ca:a3:bb:ac:46:e4:4f:c7:80:84:34: f0:26:9f:12:06:f9:36:3f:60:3e:7e:84:22:84:ef: 42:39:3c:4b:6d:cc:2f:90:ff:e6:1b:a1:70:0a:80: 3e:21:a1:c6:cd:36:2d:9b:12:c1:a1:12:f7:cf:e2: 17:82:54:b7:cd:11:e2:c3:46:54:f7:a4:06:29:87: 59:ff:c1:6e:b2:9f:13:c8:e8:71:47:e3:ad:57:f5: 0b:74:df:da:a0:d5:07:6b:f6:37:28:a9:91:96:8d: 20:a2:b2:ff:6c:2f:90:15:c5:d0:72:08:b5:c9:27: de:1d:75:2e:93:4d:85:7f:9b:4d:cc:4b:0f:24:a3: 17:63:42:16:8f:14:03:78:77:61:02:c8:10:ea:43: 68:06:60:f9:05:c7:75:3e:ce:49:6a:f9:4a:64:11: 18:91:10:ae:42:a2:d1:f8:b6:e6:04:b2:c5:cd:c5: 5f:d0:7c:0e:36:fc:e9:60:50:b8:d3:2f:15:5e:68: 2f:42:7b:bb:f7:b2:75:30:8d:5b:a5:bb:d8:4a:fd: f7:2a:91:99:fc:09:03:ba:69:35:76:e9:08:26:4d: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:84:E3:C5:67:C6:61:31:9E:28:DF:CD:28:57:67:79:66:E6:19:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c045::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:e2:c3:42:6e:6e:73:e1:3a:73:50:09:7a:b2:03:81:35:24: 29:a2:ed:ec:e5:4f:8a:4d:14:e3:5d:4d:67:f7:ae:16:9c:cf: ce:d0:90:e4:2a:6c:b1:e4:87:f0:37:01:0d:3c:48:aa:5a:a3: 97:fe:49:e6:20:1c:23:df:2d:0c:9c:72:ef:c7:88:7e:ed:b2: 39:eb:a6:4c:27:76:2b:c9:59:31:62:bc:b0:96:99:20:76:fc: 62:73:8e:76:8f:8d:e8:45:bd:47:d9:48:0e:f6:f2:c4:57:f8: 87:1c:e5:a2:3c:79:79:4d:10:ff:ec:55:16:67:7d:3a:3b:06: 0c:af:d0:94:66:42:03:c3:96:ec:4d:6c:88:40:07:fb:dd:1a: 29:b6:7f:4d:9c:ed:81:15:9f:31:2e:e8:95:b4:a7:60:34:df: 8c:5c:64:89:e8:9c:5a:41:46:68:7a:2b:32:f0:5c:85:1c:7b: 02:c5:40:00:2d:21:27:19:f6:24:f8:76:02:ce:6f:6d:a6:bb: 62:86:75:7b:f2:3f:72:96:b9:5f:28:91:7e:3b:51:65:11:9c: 7d:f7:31:04:b4:34:e8:d0:38:02:33:5a:a0:0d:ca:91:55:54: a1:d9:a0:b1:d2:74:20:9c:9a:a8:09:7f:84:84:9c:e7:f1:08: cb:d0:b7:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE20pZSgZbsyEESSzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjM4NTY2YzQtZmM2Ny00NjE0LWIxMzktMjQ2YWU0NWVhYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAeP+zq6GvkLBGMOp5GzNVfl8sX8VqiDwwYp bwH74kt1yqO7rEbkT8eAhDTwJp8SBvk2P2A+foQihO9COTxLbcwvkP/mG6FwCoA+ IaHGzTYtmxLBoRL3z+IXglS3zRHiw0ZU96QGKYdZ/8Fusp8TyOhxR+OtV/ULdN/a oNUHa/Y3KKmRlo0gorL/bC+QFcXQcgi1ySfeHXUuk02Ff5tNzEsPJKMXY0IWjxQD eHdhAsgQ6kNoBmD5Bcd1Ps5JavlKZBEYkRCuQqLR+LbmBLLFzcVf0HwONvzpYFC4 0y8VXmgvQnu797J1MI1bpbvYSv33KpGZ/AkDumk1dukIJk3bMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmE48VnxmExnijfzShXZ3lm5hlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDJkMzM5MjItYTJkNi0z NWI2LTkwZDktODg1MGI0OWI0ZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsBF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFniw0JubnPhOnNQCXqyA4E1JCmi7ezlT4pNFONdTWf3rhacz87Q kOQqbLHkh/A3AQ08SKpao5f+SeYgHCPfLQyccu/HiH7tsjnrpkwndivJWTFivLCW mSB2/GJzjnaPjehFvUfZSA728sRX+Icc5aI8eXlNEP/sVRZnfTo7Bgyv0JRmQgPD luxNbIhAB/vdGim2f02c7YEVnzEu6JW0p2A034xcZInonFpBRmh6KzLwXIUcewLF QAAtIScZ9iT4dgLOb22mu2KGdXvyP3KWuV8okX47UWURnH33MQS0NOjQOAIzWqAN ypFVVKHZoLHSdCCcmqgJf4SEnOfxCMvQt/c= -----END CERTIFICATE-----Generated at Sun May 3 17:55:38 2026 by rpki-client