$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa File: 74acb797-d55a-3c16-8cd6-b06d7b903689.roa (raw, json) Hash identifier: gdK1XKF+V2SvYYa83VQiLc4nQwnwaKDxAVmWdv8eBEw= Subject key identifier: 6F:E2:04:98:22:8B:74:E3:2B:5C:9E:EA:10:C8:54:53:67:D6:CA:B3 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584DAC45740243AFFDE51A4C4000 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 237 IP address blocks: 2001:48a8:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:74:02:43:af:fd:e5:1a:4c:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=0709d6de-7a97-4cce-92c3-15fb652678f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:28:81:aa:b8:81:b0:c4:9c:ad:cd:8d:b2: 67:7a:0c:65:12:ce:54:80:e7:c1:a4:f6:ab:ab:b2: 38:f3:2e:08:c8:02:08:d1:19:99:64:72:e4:e3:e1: 6b:19:75:74:c3:4d:f6:a0:46:ec:48:03:43:d8:64: c3:51:6c:49:20:9e:24:84:a5:49:f2:af:50:3d:29: 14:ff:70:f6:80:be:b1:bc:2c:a2:2b:8a:77:a6:7a: 49:ca:1d:65:4b:0a:52:ce:03:4b:f7:84:0e:1f:77: cf:85:22:b4:f4:92:2b:f1:5f:0a:6d:da:50:06:c9: 3b:65:b9:39:b1:2b:81:33:6e:98:78:2d:38:ba:e3: ae:a2:58:c3:1d:90:ea:5b:84:a3:eb:b3:18:c4:d0: 3f:f0:e2:11:1f:ee:3e:29:b5:be:1f:f1:5e:97:95: 75:e9:cd:51:a8:0a:49:7c:09:76:e4:c2:88:f7:57: 6f:4a:a5:0b:3c:18:b4:e5:6e:57:bf:24:26:be:40: ac:a7:9d:46:fb:1b:ca:0e:e0:85:cc:e0:cf:c3:99: e8:02:9d:1b:7c:61:f6:18:58:23:49:89:c0:e2:c5: 31:ae:81:15:26:ae:77:25:ae:b6:96:b1:9a:e0:79: aa:86:a1:2f:fe:48:d3:9b:24:1c:1f:cf:83:26:0f: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E2:04:98:22:8B:74:E3:2B:5C:9E:EA:10:C8:54:53:67:D6:CA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/74acb797-d55a-3c16-8cd6-b06d7b903689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:98:6f:e0:03:22:c4:9c:a3:43:64:3e:8d:99:61:2e:bf:79: e4:e1:84:7e:14:7b:f3:1c:e3:e1:4c:f7:9f:a8:39:d7:0f:10: a5:46:86:5f:52:60:f2:35:04:06:18:04:d4:88:c8:5c:fb:f0: 62:74:07:a2:5a:43:78:e4:73:80:66:43:e9:a4:4c:6f:ff:b6: e6:19:0d:c9:c2:54:5e:f6:92:2b:c5:c9:b0:8c:27:e0:62:aa: 28:11:d0:85:84:d4:62:26:08:b9:4a:31:9c:18:2f:c4:37:29: a3:d7:90:fc:80:b2:e1:d6:bc:ab:fe:9a:61:24:62:49:ba:cf: 0b:50:3d:d9:bb:70:12:33:f4:c2:11:e8:b9:aa:a5:3a:5b:72: 04:0a:84:69:3b:5b:23:1a:68:5b:cb:fa:4b:b6:ba:4e:b5:04: 92:3e:96:d3:d8:f9:9e:a7:77:26:b9:6b:82:47:97:3e:a1:16: 9a:de:92:55:27:8e:2d:d2:ee:55:b9:35:11:f7:6f:d4:03:6f: ab:6c:68:64:c9:78:78:a9:a0:84:45:1d:2c:31:2d:c2:c2:e3: 12:de:e6:28:61:73:26:6f:ae:8d:41:b3:8d:c6:94:00:57:af: 2d:7f:d0:57:c4:5f:bb:1c:7a:5a:2d:9e:6f:0a:91:fc:bc:f9: a8:bd:a6:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2sRXQCQ6/95RpMQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MDcwOWQ2ZGUtN2E5Ny00Y2NlLTkyYzMtMTVmYjY1MjY3OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtUogaq4gbDEnK3NjbJnegxlEs5UgOfBpPar q7I48y4IyAII0RmZZHLk4+FrGXV0w032oEbsSAND2GTDUWxJIJ4khKVJ8q9QPSkU /3D2gL6xvCyiK4p3pnpJyh1lSwpSzgNL94QOH3fPhSK09JIr8V8KbdpQBsk7Zbk5 sSuBM26YeC04uuOuoljDHZDqW4Sj67MYxNA/8OIRH+4+KbW+H/Fel5V16c1RqApJ fAl25MKI91dvSqULPBi05W5XvyQmvkCsp51G+xvKDuCFzODPw5noAp0bfGH2GFgj SYnA4sUxroEVJq53Ja62lrGa4HmqhqEv/kjTmyQcH8+DJg/oiwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFG/iBJgii3TjK1ye6hDIVFNn1sqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvNzRhY2I3OTctZDU1YS0z YzE2LThjZDYtYjA2ZDdiOTAzNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAFIqAgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAD5hv4AMixJyjQ2Q+jZlhLr955OGEfhR78xzj4Uz3n6g51w8QpUaG X1Jg8jUEBhgE1IjIXPvwYnQHolpDeORzgGZD6aRMb/+25hkNycJUXvaSK8XJsIwn 4GKqKBHQhYTUYiYIuUoxnBgvxDcpo9eQ/ICy4da8q/6aYSRiSbrPC1A92btwEjP0 whHouaqlOltyBAqEaTtbIxpoW8v6S7a6TrUEkj6W09j5nqd3JrlrgkeXPqEWmt6S VSeOLdLuVbk1Efdv1ANvq2xoZMl4eKmghEUdLDEtwsLjEt7mKGFzJm+ujUGzjcaU AFevLX/QV8Rfuxx6Wi2ebwqR/Lz5qL2mSQ== -----END CERTIFICATE-----Generated at Wed May 13 12:04:19 2026 by rpki-client