$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa File: 861d8358-f133-3906-ac78-912037ba237c.roa (raw, json) Hash identifier: HEsJRXW6bcrKDzdpa/0YWs6Lvmpmkr9EYwcZLL/YCSE= Subject key identifier: 96:BE:AF:26:3A:9D:64:1B:76:66:0A:10:39:E9:DF:5C:69:F2:E8:18 Certificate issuer: /CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Certificate serial: 010D0C9F4328584D71BAB111A642566459D41000 Authority key identifier: 59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa Signing time: Thu 09 Apr 2026 01:44:05 +0000 ROA not before: Thu 09 Apr 2026 01:44:05 +0000 ROA not after: Wed 08 Jul 2026 01:40:17 +0000 asID: 215172 IP address blocks: 2602:f3ff::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:ba:b1:11:a6:42:56:64:59:d4:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d123245c-48a2-4727-a42f-d6f4b0ecd817 Validity Not Before: Apr 9 01:44:05 2026 GMT Not After : Jul 8 01:40:17 2026 GMT Subject: CN=f9ab41d1-05ea-482c-b5a1-a10a8ce04c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:53:89:0c:d2:88:44:7a:f9:5e:1d:34:04: 77:e3:cb:89:3f:b3:3b:27:08:c4:d3:66:b0:b5:c7: 35:48:9b:9b:de:97:bc:e1:59:7d:b2:c8:85:b6:c8: 86:ce:52:7b:95:bd:48:b5:74:92:4a:bc:71:c6:95: cc:7a:0c:36:ec:d1:a5:d0:2e:69:dc:be:f6:fd:00: bc:a6:b5:e1:ff:a9:89:f6:c8:03:10:98:ab:d1:26: d5:fd:61:9b:db:3d:a7:f2:4c:5b:eb:04:4b:e4:44: 45:a1:4f:c5:13:07:77:69:31:78:53:30:80:5f:71: a0:44:b5:d9:39:14:c6:16:f4:a5:83:16:74:42:2e: be:a5:f0:e3:4c:97:5e:ac:98:9d:45:7e:bc:27:38: e9:d1:ef:38:75:89:d0:66:9d:fe:6f:df:5d:68:4f: c5:31:52:b3:ef:b2:f4:b2:fb:33:55:8f:44:f4:cf: 4e:9f:8b:c9:89:33:10:5a:33:f4:65:d9:47:4e:f2: 38:f8:39:51:d7:c0:b3:6c:b6:d5:68:13:00:bc:a1: 6f:16:e5:5e:9a:80:c7:d3:47:72:56:1a:27:a7:c1: 2b:3e:97:63:2e:15:3d:4e:06:c6:b0:70:7f:02:16: b2:3b:d0:6a:27:69:a5:98:33:a3:02:fe:74:24:5a: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:AF:26:3A:9D:64:1B:76:66:0A:10:39:E9:DF:5C:69:F2:E8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/861d8358-f133-3906-ac78-912037ba237c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817/d123245c-48a2-4727-a42f-d6f4b0ecd817.crl X509v3 Authority Key Identifier: keyid:59:18:A8:33:D0:67:C4:C1:3B:9F:4F:85:6F:7C:65:7C:A4:29:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d123245c-48a2-4727-a42f-d6f4b0ecd817.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3ff::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:21:fe:b0:ef:e3:19:93:cf:ef:f6:a0:58:48:08:f4:14:f9: 37:1e:e6:3d:ce:85:cb:d9:50:5b:4a:63:61:e5:f7:83:d1:46: 20:e4:0e:f6:a0:ac:59:6e:4e:cb:7f:66:cf:ef:d6:9c:5b:de: 11:73:ea:5e:7b:2b:a3:50:d8:bd:b9:f7:43:c2:12:1c:a2:95: 3d:85:6d:97:57:c4:f9:ab:78:23:67:7d:2b:46:24:d8:20:73: c6:91:e9:38:34:8c:18:d2:58:e4:48:2e:94:c3:41:f4:58:ec: 9e:f5:39:e1:33:64:aa:81:1b:e4:f5:d6:61:2a:38:40:47:b3: 1d:48:37:43:2e:ff:b9:32:65:38:5b:b4:d5:bc:6d:24:f8:6a: b1:dd:31:c4:97:16:2a:42:de:e8:ba:5c:19:9c:ba:96:f4:78: aa:fd:a6:b7:e2:ee:88:2a:f1:12:92:32:b7:5b:34:80:c4:69: c8:09:ab:ed:84:a9:e8:cc:cd:1c:53:8c:64:e1:7f:a3:8d:97: 66:98:e4:92:0a:9a:dc:f6:f2:f4:df:88:e0:96:04:21:53:4d: a0:b6:55:8f:6c:8f:97:a9:12:13:60:d9:66:2a:bd:fc:65:a2: 84:41:26:a4:fb:9a:c1:04:17:0f:8e:8a:77:5f:b6:d1:14:76: b4:82:a1:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1xurERpkJWZFnUEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyMzI0NWMtNDhhMi00NzI3LWE0MmYtZDZmNGIwZWNk ODE3MB4XDTI2MDQwOTAxNDQwNVoXDTI2MDcwODAxNDAxN1owLzEtMCsGA1UEAxMk ZjlhYjQxZDEtMDVlYS00ODJjLWI1YTEtYTEwYThjZTA0YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIdTiQzSiER6+V4dNAR348uJP7M7JwjE02aw tcc1SJub3pe84Vl9ssiFtsiGzlJ7lb1ItXSSSrxxxpXMegw27NGl0C5p3L72/QC8 prXh/6mJ9sgDEJir0SbV/WGb2z2n8kxb6wRL5ERFoU/FEwd3aTF4UzCAX3GgRLXZ ORTGFvSlgxZ0Qi6+pfDjTJderJidRX68Jzjp0e84dYnQZp3+b99daE/FMVKz77L0 svszVY9E9M9On4vJiTMQWjP0ZdlHTvI4+DlR18CzbLbVaBMAvKFvFuVemoDH00dy Vhonp8ErPpdjLhU9TgbGsHB/AhayO9BqJ2mlmDOjAv50JFrQAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJa+ryY6nWQbdmYKEDnp31xp8ugYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIz MjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0YjBlY2Q4MTcvODYxZDgzNTgtZjEzMy0z OTA2LWFjNzgtOTEyMDM3YmEyMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDEyMzI0NWMtNDhhMi00NzI3LWE0 MmYtZDZmNGIwZWNkODE3L2QxMjMyNDVjLTQ4YTItNDcyNy1hNDJmLWQ2ZjRiMGVj ZDgxNy5jcmwwHwYDVR0jBBgwFoAUWRioM9BnxME7n0+Fb3xlfKQp7dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMTIzMjQ1Yy00OGEyLTQ3MjctYTQyZi1kNmY0 YjBlY2Q4MTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgLz/wAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAch/rDv4xmTz+/2oFhICPQU+Tce5j3OhcvZUFtKY2Hl94PRRiDk DvagrFluTst/Zs/v1pxb3hFz6l57K6NQ2L2590PCEhyilT2FbZdXxPmreCNnfStG JNggc8aR6Tg0jBjSWORILpTDQfRY7J71OeEzZKqBG+T11mEqOEBHsx1IN0Mu/7ky ZThbtNW8bST4arHdMcSXFipC3ui6XBmcupb0eKr9prfi7ogq8RKSMrdbNIDEacgJ q+2EqejMzRxTjGThf6ONl2aY5JIKmtz28vTfiOCWBCFTTaC2VY9sj5epEhNg2WYq vfxlooRBJqT7msEEFw+OindfttEUdrSCocM= -----END CERTIFICATE-----Generated at Tue Apr 14 23:43:07 2026 by rpki-client