$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa File: 20be478e-0aab-34ed-9839-01e6439a77d5.roa (raw, json) Hash identifier: kQKCsak2tl4Yu/BEkpJ83z8ii3OCt5C9zH5/MMOhDmc= Subject key identifier: B0:6F:4F:5D:E9:1A:46:C7:70:BC:1D:A5:EC:78:2D:9E:56:A5:83:C9 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D74700B44CD36ABC57C8A0F40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397214 IP address blocks: 2001:500:3682::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:0b:44:cd:36:ab:c5:7c:8a:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=24c8d88d-0cf1-46d3-8764-3c53cff19a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:47:a7:48:d3:07:b7:3d:8a:6a:3c:37:f1: ae:ba:cf:ad:ad:81:76:92:16:90:55:d5:82:07:3f: ab:dc:50:d9:86:01:14:a2:1d:43:b9:76:34:de:ff: 63:c1:48:ed:5b:50:9c:56:ad:97:38:4e:00:4c:5a: 61:ba:50:f2:6f:8d:b1:8a:ce:0d:89:83:ab:2a:03: 27:13:bc:88:4b:6e:05:28:f1:16:fd:8c:0b:e9:d7: 07:ba:48:be:7c:27:5b:58:91:4e:f9:2d:44:30:c5: 14:74:26:08:6f:a5:0c:5f:49:73:d7:0d:ff:e9:f1: 26:d5:27:6c:ae:60:a2:48:85:c5:ba:db:55:f0:c4: de:d2:3b:ab:04:8f:72:d1:30:d6:ee:a5:fa:7b:71: fc:b2:52:99:9b:1a:fb:a3:b2:76:21:0d:15:9f:10: e6:8c:cd:0d:0f:c7:2a:e0:1f:9d:6f:78:15:97:74: de:3d:e9:57:87:0c:d2:61:b6:7b:70:84:0d:13:a1: 94:32:b7:a7:bc:ea:b2:6e:ea:13:ef:50:ca:8a:a3: fa:61:48:d2:ad:9b:37:86:4c:00:0b:64:a7:35:7c: ca:9c:5f:5b:6a:50:c6:c5:42:71:67:15:03:19:b5: b3:c8:da:0c:07:d8:b4:44:78:44:8e:4a:60:fb:0b: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6F:4F:5D:E9:1A:46:C7:70:BC:1D:A5:EC:78:2D:9E:56:A5:83:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/20be478e-0aab-34ed-9839-01e6439a77d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:3682::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5d:52:de:3e:38:ba:43:be:a7:d3:d5:02:e8:5a:62:45:53: 93:31:17:eb:a5:be:9f:62:c5:cc:93:3c:98:59:bb:92:87:85: 6d:e5:87:ff:3b:de:17:21:f9:d4:f2:36:c3:cd:90:1b:fc:f5: d3:66:78:f1:90:d1:60:f8:07:b9:0a:4a:38:34:ab:da:56:a3: 0d:d1:46:5a:78:12:7e:4f:d5:ea:4c:29:9c:57:7e:a1:d7:96: ad:72:fe:53:13:13:9a:9b:2e:84:1a:6b:da:d1:84:f7:7c:ad: 6a:1a:3f:93:68:fd:74:88:58:c9:38:1b:52:b9:cd:00:3e:04: bc:d7:c0:75:6a:c9:e6:af:2b:3f:3d:cf:84:7a:a9:8e:1c:73: 4b:50:0d:62:72:3c:9a:07:a7:e1:8d:27:9b:61:8b:58:89:80: 6b:ad:a2:6f:d3:c6:fd:f3:47:e9:3e:4b:37:c0:74:b1:2f:1e: 12:b5:ad:a1:04:04:31:2e:85:c1:9f:db:d3:aa:fc:9e:8b:8e: d3:15:b0:1e:dd:98:0b:65:0f:36:57:bc:bb:95:e9:35:95:72: 17:d3:ca:85:f8:5b:5d:6a:c1:5f:7c:75:15:ec:78:f5:f7:5e: 62:f8:57:3b:1d:36:d6:24:6e:7d:ce:6b:cb:b7:d2:ff:e1:e5: e0:84:6e:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cAtEzTarxXyKD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjRjOGQ4OGQtMGNmMS00NmQzLTg3NjQtM2M1M2NmZjE5YTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqENHp0jTB7c9imo8N/Guus+trYF2khaQVdWC Bz+r3FDZhgEUoh1DuXY03v9jwUjtW1CcVq2XOE4ATFphulDyb42xis4NiYOrKgMn E7yIS24FKPEW/YwL6dcHuki+fCdbWJFO+S1EMMUUdCYIb6UMX0lz1w3/6fEm1Sds rmCiSIXFuttV8MTe0jurBI9y0TDW7qX6e3H8slKZmxr7o7J2IQ0VnxDmjM0ND8cq 4B+db3gVl3TePelXhwzSYbZ7cIQNE6GUMrenvOqybuoT71DKiqP6YUjSrZs3hkwA C2SnNXzKnF9balDGxUJxZxUDGbWzyNoMB9i0RHhEjkpg+wvoBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLBvT13pGkbHcLwdpex4LZ5WpYPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjBiZTQ3OGUtMGFhYi0z NGVkLTk4MzktMDFlNjQzOWE3N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFADaC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1dUt4+OLpDvqfT1QLoWmJFU5MxF+ulvp9ixcyTPJhZu5KHhW3l h/873hch+dTyNsPNkBv89dNmePGQ0WD4B7kKSjg0q9pWow3RRlp4En5P1epMKZxX fqHXlq1y/lMTE5qbLoQaa9rRhPd8rWoaP5No/XSIWMk4G1K5zQA+BLzXwHVqyeav Kz89z4R6qY4cc0tQDWJyPJoHp+GNJ5thi1iJgGutom/Txv3zR+k+SzfAdLEvHhK1 raEEBDEuhcGf29Oq/J6LjtMVsB7dmAtlDzZXvLuV6TWVchfTyoX4W11qwV98dRXs ePX3XmL4VzsdNtYkbn3Oa8u30v/h5eCEbjs= -----END CERTIFICATE-----Generated at Sun Apr 12 08:10:37 2026 by rpki-client