$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa File: d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa (raw, json) Hash identifier: JG4hLItf+E6254k5IYw7BD26TZvLepl/baB1Tapjcxs= Subject key identifier: 13:35:47:5A:24:AC:E4:75:0C:38:1B:3A:98:BB:CC:70:EB:3D:B5:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584D747014FEB84995C91004C300 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 397219 IP address blocks: 2001:502:f3ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:14:fe:b8:49:95:c9:10:04:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=986318f5-27e2-4ee4-baf8-951b5a903002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:8d:62:29:5e:eb:63:f3:de:01:e2:14:b4: 82:85:09:db:81:e8:a0:2f:25:bb:4a:42:fd:19:b2: 76:0a:61:fc:6d:29:ba:b3:a9:6c:be:f9:ea:30:d3: f9:ea:f5:0e:94:75:b6:72:12:46:cc:d0:53:bf:82: 88:7b:04:80:8c:52:9f:68:ba:26:b7:60:92:44:35: 72:5f:86:d1:6c:b6:9b:e8:c5:9a:5b:0b:e7:71:4e: 4e:bd:eb:ee:f0:44:82:29:f4:1f:45:8f:3f:bb:9c: 0a:26:00:1c:12:01:38:21:d9:9c:de:e3:3d:ea:25: 32:cc:48:c0:83:e0:b7:4e:07:49:93:1f:70:02:4d: d3:8d:c4:b2:ca:80:68:08:51:c6:6f:56:40:4d:d1: 45:9e:3f:ad:a9:7d:89:65:ed:89:c0:ad:b9:46:c4: 0a:77:ec:43:e7:ec:94:71:a8:9e:e3:e7:88:66:d3: ab:73:54:94:f7:3d:b7:21:e9:09:75:08:d2:19:d3: b6:0e:77:dd:69:b1:6e:95:fa:38:3b:b0:fa:8b:ad: c7:07:78:8c:11:7e:5b:af:11:11:1d:25:11:55:7f: ca:ca:13:f0:99:bd:b0:ab:f0:7f:ed:67:e8:4d:64: c4:9f:1a:75:9c:6e:08:d5:d3:86:f9:c4:02:bf:b0: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:35:47:5A:24:AC:E4:75:0C:38:1B:3A:98:BB:CC:70:EB:3D:B5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d398b9cb-7c97-3d8d-9259-4b2f174b4308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:f3ff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:31:77:92:9f:8f:06:cf:23:8e:12:0d:4e:7d:12:13:0a:9a: 0f:4b:06:c3:71:8f:0c:40:19:e7:2a:70:1a:79:48:e0:20:a8: bc:81:09:17:a8:4c:1d:cf:10:67:21:f1:c8:e9:cb:f3:37:f0: d2:7f:83:1c:b0:c7:86:d3:83:ce:e1:c1:0c:d7:a5:27:1a:dc: ab:c1:c8:91:5b:dd:59:4a:9e:68:36:9c:fa:d7:5d:30:7a:d4: ff:fb:d4:d7:c8:f4:2f:79:08:4b:bd:ab:5d:d6:24:35:97:d4: a3:d9:21:f9:05:e0:11:9a:8f:b2:1e:71:2c:6c:33:fa:fc:a7: 78:51:03:2e:d4:be:41:26:65:b8:45:30:33:75:c2:6f:bb:e8: 3b:f0:d6:92:54:e0:13:45:d9:bf:aa:5c:49:e7:7d:54:ba:be: be:a3:3c:5e:42:43:3e:70:2a:f8:89:c1:49:01:59:20:e4:72: 99:94:4e:5b:0c:b7:1e:97:b0:d8:e5:77:96:a8:d1:cc:1d:e9: 83:50:8d:b0:4c:20:3e:1c:ca:9c:52:72:cc:80:54:3b:64:44: 1c:15:81:7a:05:88:9c:3d:e6:ec:7a:7b:68:a7:3f:0e:bc:b7: 1c:7a:69:c0:e1:bc:20:dc:3d:62:61:d4:a9:0a:c6:83:8b:7e: b9:0e:e1:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBT+uEmVyRAEwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OTg2MzE4ZjUtMjdlMi00ZWU0LWJhZjgtOTUxYjVhOTAzMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6NYile62Pz3gHiFLSChQnbgeigLyW7SkL9 GbJ2CmH8bSm6s6lsvvnqMNP56vUOlHW2chJGzNBTv4KIewSAjFKfaLomt2CSRDVy X4bRbLab6MWaWwvncU5Ovevu8ESCKfQfRY8/u5wKJgAcEgE4Idmc3uM96iUyzEjA g+C3TgdJkx9wAk3TjcSyyoBoCFHGb1ZATdFFnj+tqX2JZe2JwK25RsQKd+xD5+yU caie4+eIZtOrc1SU9z23IekJdQjSGdO2DnfdabFulfo4O7D6i63HB3iMEX5brxER HSURVX/KyhPwmb2wq/B/7WfoTWTEnxp1nG4I1dOG+cQCv7C2YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBM1R1okrOR1DDgbOpi7zHDrPbX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDM5OGI5Y2ItN2M5Ny0z ZDhkLTkyNTktNGIyZjE3NGI0MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAvP/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC8xd5KfjwbPI44SDU59EhMKmg9LBsNxjwxAGecqcBp5SOAgqLyB CReoTB3PEGch8cjpy/M38NJ/gxywx4bTg87hwQzXpSca3KvByJFb3VlKnmg2nPrX XTB61P/71NfI9C95CEu9q13WJDWX1KPZIfkF4BGaj7IecSxsM/r8p3hRAy7UvkEm ZbhFMDN1wm+76Dvw1pJU4BNF2b+qXEnnfVS6vr6jPF5CQz5wKviJwUkBWSDkcpmU TlsMtx6XsNjld5ao0cwd6YNQjbBMID4cypxScsyAVDtkRBwVgXoFiJw95ux6e2in Pw68txx6acDhvCDcPWJh1KkKxoOLfrkO4VQ= -----END CERTIFICATE-----Generated at Sun Apr 12 08:09:23 2026 by rpki-client