$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa File: c06a09fc-2584-35b2-be4c-9069314d842e.roa (raw, json) Hash identifier: OrTwx52lB7R4UrrAfJ7y7DNP3zlM+ZGfEkSkRJo9meI= Subject key identifier: C0:36:21:72:CA:D1:56:6B:97:52:24:77:0F:24:7D:F8:71:12:47:1A Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584D8C2A96FEE75A724527F13EC0 Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 40021 IP address blocks: 2607:4740::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:96:fe:e7:5a:72:45:27:f1:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=11598b17-ba8c-4d02-9483-d1f3300917dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:bf:8f:ef:64:84:2c:1a:3f:a3:a7:fc:7f: 49:15:4c:d9:ea:5d:88:e4:a8:ff:74:1b:d7:ac:2d: 0f:30:c5:12:f8:eb:2f:14:e9:62:55:2e:d0:99:4a: c1:57:45:48:97:a8:7d:b9:8f:b6:75:cf:3d:ee:00: 3e:3a:8d:b5:9e:1c:12:88:ff:95:9f:ef:66:9c:ba: d8:40:9b:50:46:6a:6c:c1:b2:6e:86:dc:4c:7c:d5: 75:29:c3:88:bb:4d:e2:35:c9:3d:9c:ec:ed:e6:f8: 78:96:b5:c3:20:3b:44:7d:2b:6e:86:53:06:7f:50: 97:97:42:1e:07:83:e2:b6:3d:04:12:23:14:d3:c3: e3:c6:cd:42:60:1f:40:56:21:b3:b9:ca:ce:1a:db: 45:c5:ba:c8:de:9c:48:33:4b:ee:7c:ea:c3:b2:da: 51:c4:72:06:23:c6:b7:be:2e:b9:ad:2a:d6:cb:c2: af:5d:0d:89:56:81:8f:db:be:99:a5:31:96:94:a1: f5:7c:07:c8:f0:41:c4:7a:4f:05:95:f6:92:90:d1: 57:d9:eb:16:2d:6a:75:22:fc:50:9d:ca:4c:3e:98: 9c:ab:2f:fb:98:91:72:04:84:f1:b7:83:07:3d:c3: 75:6d:e1:32:02:cb:11:d9:33:58:2a:8c:f2:b9:de: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:36:21:72:CA:D1:56:6B:97:52:24:77:0F:24:7D:F8:71:12:47:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/c06a09fc-2584-35b2-be4c-9069314d842e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv6: 2607:4740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e6:d9:dc:a9:fc:61:0a:cb:5d:3b:fc:f7:ac:28:d9:e7:f6: 73:6a:76:76:d9:d5:2d:ca:16:57:97:7d:d4:6c:86:99:2c:f4: 6e:0d:7b:eb:5d:05:b5:2b:bf:2a:25:d5:3d:4a:f3:81:12:9a: 3b:0c:15:40:64:6d:52:7f:e1:9f:6d:aa:3b:e3:fa:46:83:40: 5f:e2:53:9f:08:ba:07:16:1a:e7:67:71:6b:95:b5:38:d4:be: 3c:ba:00:ff:fd:c9:9e:81:cf:01:f6:a6:a3:d4:05:3b:ae:03: 23:a4:ed:5a:5e:d1:96:66:6b:fd:fd:30:2f:67:c9:31:86:08: bc:4e:a0:c8:97:36:37:b4:96:c4:3d:40:5c:2a:3a:ee:ac:71: 46:c5:e0:6c:10:9e:ca:e4:46:69:38:12:94:fd:71:a0:03:e2: dd:b8:84:8f:1f:84:ad:98:23:36:14:aa:09:a3:e9:d5:a7:de: ef:85:36:a8:df:1c:16:63:c4:b4:a9:0c:0c:cc:b2:05:dc:8e: 8b:e5:23:56:77:9c:bf:9e:7e:3b:00:8a:69:ef:30:5d:df:3c: 2f:11:de:ea:f5:ed:25:d3:86:6c:7d:70:81:78:ab:43:f9:80: 4e:96:fd:36:40:a1:46:b4:72:82:89:49:41:9e:66:1a:d7:26: 0f:d2:43:86 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2MKpb+51pyRSfxPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MTE1OThiMTctYmE4Yy00ZDAyLTk0ODMtZDFmMzMwMDkxN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/G/j+9khCwaP6On/H9JFUzZ6l2I5Kj/dBvX rC0PMMUS+OsvFOliVS7QmUrBV0VIl6h9uY+2dc897gA+Oo21nhwSiP+Vn+9mnLrY QJtQRmpswbJuhtxMfNV1KcOIu03iNck9nOzt5vh4lrXDIDtEfStuhlMGf1CXl0Ie B4Pitj0EEiMU08Pjxs1CYB9AViGzucrOGttFxbrI3pxIM0vufOrDstpRxHIGI8a3 vi65rSrWy8KvXQ2JVoGP276ZpTGWlKH1fAfI8EHEek8FlfaSkNFX2esWLWp1IvxQ ncpMPpicqy/7mJFyBITxt4MHPcN1beEyAssR2TNYKozyud5/XwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMA2IXLK0VZrl1Ikdw8kffhxEkcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYzA2YTA5ZmMtMjU4NC0z NWIyLWJlNGMtOTA2OTMxNGQ4NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCq5tncqfxhCstdO/z3rCjZ5/ZzanZ22dUtyhZXl33UbIaZLPRuDXvr XQW1K78qJdU9SvOBEpo7DBVAZG1Sf+Gfbao74/pGg0Bf4lOfCLoHFhrnZ3FrlbU4 1L48ugD//cmegc8B9qaj1AU7rgMjpO1aXtGWZmv9/TAvZ8kxhgi8TqDIlzY3tJbE PUBcKjrurHFGxeBsEJ7K5EZpOBKU/XGgA+LduISPH4StmCM2FKoJo+nVp97vhTao 3xwWY8S0qQwMzLIF3I6L5SNWd5y/nn47AIpp7zBd3zwvEd7q9e0l04ZsfXCBeKtD +YBOlv02QKFGtHKCiUlBnmYa1yYP0kOG -----END CERTIFICATE-----Generated at Mon Apr 20 01:54:02 2026 by rpki-client