$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa File: 0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json) Hash identifier: Vt3zPfhwm8b3E1pyNgiVwboGbGwbaDDttW3INQ73IqI= Subject key identifier: D0:E8:A0:B3:01:C4:9D:29:1C:0F:3C:69:98:57:B2:FF:57:2C:54:73 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584DAC457C9D5E0A3652DBD12E00 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 19782 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7c:9d:5e:0a:36:52:db:d1:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0a3de40f-e24c-4991-bd70-105a1ccf0d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:52:14:8f:dc:50:04:78:b2:98:72:3f:59:4f: d6:0d:3d:e9:54:d8:84:1f:41:10:b5:73:91:ac:a8: d6:82:4c:6e:9c:75:0c:1f:c6:e7:86:93:7c:2b:81: 04:9e:67:22:02:02:d6:63:52:e7:cf:55:00:49:e5: 07:1a:7f:97:ae:95:2e:13:e0:46:81:28:7c:1e:ae: 9e:59:4e:bc:ee:e9:b0:18:00:40:34:a0:9e:2a:0e: b0:eb:fa:9d:56:12:11:9a:f6:dc:25:e3:c2:0b:ff: cc:49:a3:b6:01:ce:85:62:2d:4e:1c:b3:fe:3d:02: 15:4b:f3:d0:7f:44:74:91:75:06:87:fa:54:08:38: e6:4f:83:cb:3e:a4:74:0c:a7:3a:19:87:e6:29:f8: 8e:5c:34:50:f4:2b:6f:3a:f2:f2:b2:11:55:5b:7d: c6:b7:6a:ba:b3:c8:08:7a:90:05:5c:07:7d:44:10: 57:87:c9:10:f7:82:6d:01:24:b8:41:0e:b7:d0:7f: 9c:de:c8:84:b1:b9:49:1f:a5:b3:d4:c7:c1:f4:52: 1f:fb:51:9f:25:95:db:99:95:0a:d1:de:b4:47:44: b5:08:d7:54:97:55:ad:ec:61:2c:10:73:e8:a7:fc: 1d:4d:53:05:d5:21:dd:4d:36:3a:6e:2a:f6:15:08: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:A0:B3:01:C4:9D:29:1C:0F:3C:69:98:57:B2:FF:57:2C:54:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:7c:c8:9f:33:d0:b7:51:af:4a:41:3d:21:9a:b5:f3:13:7f: 03:4a:fc:c1:74:c4:00:fa:2f:59:04:22:56:4e:54:91:ca:e1: 1f:4b:25:41:a5:dd:11:7d:52:09:be:36:62:1e:3c:54:58:37: 05:7c:49:18:e8:82:2b:0e:9f:f3:e9:19:2d:0f:f2:fa:ae:b4: 1b:30:b2:83:f8:7e:a3:c6:ce:6e:fa:93:a4:27:2a:e3:2b:9e: 84:b1:c7:ff:e9:20:d7:ce:7b:39:22:37:c5:8f:8b:46:85:77: c2:d1:2a:f1:27:46:5f:91:d4:db:62:19:81:68:34:f7:8e:e7: f6:7e:75:9d:b4:a0:64:cd:1d:a6:48:92:88:a4:39:99:8a:2d: df:79:06:48:1b:9a:f7:7c:bb:72:c1:c7:72:0a:e9:e7:4a:75: 84:3b:e7:6f:63:93:3d:33:85:34:c2:90:bb:8e:49:7a:c6:6e: f6:3c:93:c4:3d:c4:39:ee:8e:f4:b8:26:d8:a5:9e:9a:f4:9c: 6a:f1:5b:4f:79:21:b6:55:b8:73:01:13:a8:04:09:bf:35:14: f0:1d:a8:09:da:53:00:0e:90:d8:6b:99:fe:5c:60:14:dc:eb: 0c:4a:47:a9:8c:a4:df:9b:9f:9f:12:49:b3:94:c1:8c:18:8d: e3:56:92:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRXydXgo2UtvRLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MGEzZGU0MGYtZTI0Yy00OTkxLWJkNzAtMTA1YTFjY2YwZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1IUj9xQBHiymHI/WU/WDT3pVNiEH0EQtXOR rKjWgkxunHUMH8bnhpN8K4EEnmciAgLWY1Lnz1UASeUHGn+XrpUuE+BGgSh8Hq6e WU687umwGABANKCeKg6w6/qdVhIRmvbcJePCC//MSaO2Ac6FYi1OHLP+PQIVS/PQ f0R0kXUGh/pUCDjmT4PLPqR0DKc6GYfmKfiOXDRQ9CtvOvLyshFVW33Gt2q6s8gI epAFXAd9RBBXh8kQ94JtASS4QQ630H+c3siEsblJH6Wz1MfB9FIf+1GfJZXbmZUK 0d60R0S1CNdUl1Wt7GEsEHPop/wdTVMF1SHdTTY6bir2FQjnowIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNDooLMBxJ0pHA88aZhXsv9XLFRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvMGQzNmI5MGMtM2VlNS0z YjRkLThhODgtNGE1OGI3MDY4ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBfMifM9C3Ua9KQT0hmrXzE38DSvzBdMQA+i9ZBCJWTlSRyuEfSyVB pd0RfVIJvjZiHjxUWDcFfEkY6IIrDp/z6RktD/L6rrQbMLKD+H6jxs5u+pOkJyrj K56Escf/6SDXzns5IjfFj4tGhXfC0SrxJ0ZfkdTbYhmBaDT3juf2fnWdtKBkzR2m SJKIpDmZii3feQZIG5r3fLtywcdyCunnSnWEO+dvY5M9M4U0wpC7jkl6xm72PJPE PcQ57o70uCbYpZ6a9Jxq8VtPeSG2VbhzAROoBAm/NRTwHagJ2lMADpDYa5n+XGAU 3OsMSkepjKTfm5+fEkmzlMGMGI3jVpJ9 -----END CERTIFICATE-----Generated at Thu May 7 01:13:18 2026 by rpki-client