$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa File: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (raw, json) Hash identifier: 7R49yU9miZlYe9tAlofkH6r7wQSAsVeHmTuRf4sfI1I= Subject key identifier: E2:5A:8F:6C:74:D0:2B:D2:6F:A7:BB:35:31:48:61:CA:E0:9C:B5:C1 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584D91C00F1271B6EC3A1DBE5880 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 64236 IP address blocks: 2604:abc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0f:12:71:b6:ec:3a:1d:be:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=3e752a74-0c15-4f4a-9818-34385ba371d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:19:1c:dc:85:c0:91:ce:36:c4:f6:86:b1: d9:5c:7c:62:92:0d:37:1d:3f:94:6c:3a:5b:85:6d: b9:72:43:47:15:55:04:2b:10:06:62:90:c1:95:e9: e3:ad:f2:9a:32:61:bb:69:ef:1b:79:82:83:69:d8: a2:97:9b:ca:f7:c3:80:6f:31:72:6d:fb:31:8a:9c: a3:91:af:5e:ab:3e:b5:f3:bb:3a:43:c3:4e:19:51: 3b:c1:a5:a8:ff:ca:d4:0c:40:4d:93:9d:b7:ad:f2: 9e:1a:06:8b:82:46:25:6f:bc:fb:74:19:a7:27:55: 42:30:7b:08:da:ca:f9:86:8a:64:10:11:ec:a3:2d: 62:47:f4:70:ca:bf:4f:f7:66:50:fb:cb:af:ce:eb: 5c:13:ae:8c:f6:dc:f6:71:94:00:59:ac:de:20:ce: e0:9f:a9:0f:c6:bf:77:73:66:88:c9:33:45:5c:94: 4a:ec:0f:05:16:30:4a:53:36:78:08:7a:8b:0d:4c: 0b:ff:ea:7b:a0:69:fa:6f:e2:5b:1e:de:05:5f:2c: e2:a7:ba:a2:8b:10:61:f6:7b:89:29:6f:d5:b4:a4: 1f:3a:21:5f:49:3c:70:34:7a:1e:4d:5e:a5:1f:db: 46:63:38:c7:ec:0a:57:de:a9:3b:20:27:1f:d9:08: f9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:8F:6C:74:D0:2B:D2:6F:A7:BB:35:31:48:61:CA:E0:9C:B5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/155f4b9b-4ca3-3b31-bf72-238f854d820f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv6: 2604:abc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cc:ef:bc:69:13:28:f7:81:6b:5b:39:f1:81:37:e1:60:45: b7:0f:80:73:e8:b5:99:8f:1e:95:29:c5:f8:03:b5:2f:2e:2c: b2:e8:51:6b:86:62:9c:bd:3d:fc:9c:67:ee:2e:c9:fd:d3:a5: f9:c0:5f:3e:f3:01:01:2b:63:0e:81:48:7f:6d:e2:9a:85:16: ae:3f:76:f8:4a:f3:f7:c2:9c:5d:77:59:87:29:01:e1:b7:5c: ed:74:03:82:c7:64:75:3a:8b:a4:bc:25:b6:cf:fe:8f:06:ec: c4:9f:5b:8b:4e:dd:33:eb:c6:7f:5c:5f:98:b2:ce:49:85:55: 45:48:89:d1:82:71:68:14:dd:2d:9d:41:f3:e3:51:3f:f5:b0: cf:e6:24:a3:23:34:72:48:f7:e4:b7:18:f4:53:e6:79:ab:12: 70:01:4a:7c:cf:4d:93:09:77:a9:b7:0b:ec:7b:4b:09:12:47: b2:61:09:0f:21:6b:a3:74:8a:c3:5d:63:34:79:5a:85:ae:61: 2e:57:f5:a4:f0:7d:f1:0a:b8:eb:24:50:8d:16:2e:44:4f:0f: b8:01:7e:a1:16:58:6f:96:53:f8:8c:11:e5:6f:1d:0c:9b:85: fe:7d:e3:af:67:41:54:cc:f9:80:4a:79:8b:bb:1f:00:94:38: 62:b2:a4:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwA8ScbbsOh2+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk M2U3NTJhNzQtMGMxNS00ZjRhLTk4MTgtMzQzODViYTM3MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKkZHNyFwJHONsT2hrHZXHxikg03HT+UbDpb hW25ckNHFVUEKxAGYpDBlenjrfKaMmG7ae8beYKDadiil5vK98OAbzFybfsxipyj ka9eqz6187s6Q8NOGVE7waWo/8rUDEBNk523rfKeGgaLgkYlb7z7dBmnJ1VCMHsI 2sr5hopkEBHsoy1iR/Rwyr9P92ZQ+8uvzutcE66M9tz2cZQAWazeIM7gn6kPxr93 c2aIyTNFXJRK7A8FFjBKUzZ4CHqLDUwL/+p7oGn6b+JbHt4FXyzip7qiixBh9nuJ KW/VtKQfOiFfSTxwNHoeTV6lH9tGYzjH7ApX3qk7ICcf2Qj5owIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOJaj2x00CvSb6e7NTFIYcrgnLXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvMTU1ZjRiOWItNGNhMy0z YjMxLWJmNzItMjM4Zjg1NGQ4MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkzO+8aRMo94FrWznxgTfhYEW3D4Bz6LWZjx6VKcX4A7UvLiyy6FFr hmKcvT38nGfuLsn906X5wF8+8wEBK2MOgUh/beKahRauP3b4SvP3wpxdd1mHKQHh t1ztdAOCx2R1OoukvCW2z/6PBuzEn1uLTt0z68Z/XF+Yss5JhVVFSInRgnFoFN0t nUHz41E/9bDP5iSjIzRySPfktxj0U+Z5qxJwAUp8z02TCXeptwvse0sJEkeyYQkP IWujdIrDXWM0eVqFrmEuV/Wk8H3xCrjrJFCNFi5ETw+4AX6hFlhvllP4jBHlbx0M m4X+feOvZ0FUzPmASnmLux8AlDhisqSU -----END CERTIFICATE-----Generated at Mon Apr 27 13:54:14 2026 by rpki-client