$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa File: db07585b-020b-33f3-a0f7-688ba5615a1b.roa (raw, json) Hash identifier: XQ5W5X2iygR2UZJWHGr9ipjb4tMSSOuEBx6dDgXKFTI= Subject key identifier: 2A:8C:1C:3D:25:9C:42:84:97:1E:E4:B5:62:C8:DE:8C:71:BA:65:A0 Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Certificate serial: 010D0C9F4328584DA11AB112BC4E3C6C9EC54480 Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 14618 IP address blocks: 2620:121:5040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b1:12:bc:4e:3c:6c:9e:c5:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=f6d6965b-a806-4b3e-bf96-acd418f6997b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:0d:a9:57:50:18:ce:eb:2e:f6:61:ed:bb: 07:39:65:c1:94:78:bd:7b:a0:09:69:2a:ce:e3:9a: 68:e4:03:79:17:9a:35:99:a0:51:80:28:4a:b7:8d: 96:44:9a:cc:4e:4a:78:78:21:81:ef:bc:11:76:1c: 0d:5e:91:57:ec:61:f6:20:25:f8:b5:01:dd:8f:7c: ca:57:0d:7e:50:ab:7c:4a:9d:24:c3:99:1a:90:70: 79:29:60:8f:cb:a1:5b:63:e7:ed:c7:2b:67:42:05: 1b:39:6f:7e:88:1c:91:d3:8c:79:01:42:f0:c8:7d: 95:ad:60:72:7a:ae:6a:05:88:a5:3c:88:14:86:d5: ef:86:21:f5:32:b1:1c:07:8f:df:4a:2c:a9:07:2d: de:81:2d:44:96:3b:0e:61:c5:90:b4:9f:b9:6a:9a: ad:8d:9b:8b:bb:54:db:87:5e:a0:03:7e:ce:d3:44: f0:e9:49:78:04:cb:8c:c6:af:65:f6:f1:f3:8f:9e: fa:a4:88:ba:50:01:03:73:7f:1e:02:9a:09:90:01: d1:59:8b:2f:f0:ba:b0:5f:d8:43:bb:6c:0d:a9:a3: 23:51:f9:ed:b2:8a:22:78:60:e8:c4:1f:82:84:59: f6:a6:d0:d8:ee:61:6e:3f:6e:68:6f:e6:b4:93:ac: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8C:1C:3D:25:9C:42:84:97:1E:E4:B5:62:C8:DE:8C:71:BA:65:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/db07585b-020b-33f3-a0f7-688ba5615a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl X509v3 Authority Key Identifier: keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer sbgp-ipAddrBlock: critical IPv6: 2620:121:5040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:43:11:37:9c:e1:b5:1d:e2:02:6f:d4:8a:62:71:15:33:6d: a2:d6:13:5e:f7:73:c1:50:a3:c0:66:fa:e5:2b:91:17:09:2f: 6b:02:00:9f:e0:d7:cf:8a:cf:82:68:eb:7f:6e:30:c4:66:ae: 54:3c:b1:04:3f:b0:66:77:e6:e5:0a:a5:90:5f:8d:2b:4c:d3: ed:a8:f3:b1:e5:d7:91:51:7a:d3:ba:37:aa:e0:67:26:35:4c: da:ca:3a:72:b6:7c:67:17:67:e2:7b:91:49:05:94:f6:53:e5: a8:0b:30:8e:37:db:03:2e:3e:ae:f2:5e:ee:b1:c1:1d:5d:7b: 9c:ee:cc:48:0c:ab:0c:d5:70:99:d1:66:60:bf:7d:29:2f:24: 53:73:5f:b2:bd:ea:f2:73:7e:76:f1:54:71:d1:8a:5c:bb:95: 1c:c4:d4:b1:12:8e:ef:88:f8:30:1f:d6:2b:17:b8:0b:45:7e: 1d:01:52:f3:84:c4:3e:3d:ff:56:2b:a0:57:f8:be:3d:d0:6b: a4:28:fd:65:36:c9:99:50:d4:99:4a:59:7a:51:3b:da:4c:2f: 3e:ab:91:b2:e7:32:0d:34:7c:d9:1b:03:fe:53:c0:83:e6:a1: db:13:15:59:a4:b5:e0:81:3e:bf:43:b6:6c:3d:dd:b6:e9:3d: f6:ec:81:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGrESvE48bJ7FRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4 MDhjMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjZkNjk2NWItYTgwNi00YjNlLWJmOTYtYWNkNDE4ZjY5OTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE0NqVdQGM7rLvZh7bsHOWXBlHi9e6AJaSrO 45po5AN5F5o1maBRgChKt42WRJrMTkp4eCGB77wRdhwNXpFX7GH2ICX4tQHdj3zK Vw1+UKt8Sp0kw5kakHB5KWCPy6FbY+ftxytnQgUbOW9+iByR04x5AULwyH2VrWBy eq5qBYilPIgUhtXvhiH1MrEcB4/fSiypBy3egS1EljsOYcWQtJ+5apqtjZuLu1Tb h16gA37O00Tw6Ul4BMuMxq9l9vHzj576pIi6UAEDc38eApoJkAHRWYsv8LqwX9hD u2wNqaMjUfntsooieGDoxB+ChFn2ptDY7mFuP25ob+a0k6yhfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCqMHD0lnEKElx7ktWLI3oxxumWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvZGIwNzU4NWItMDIwYi0z M2YzLWEwZjctNjg4YmE1NjE1YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIVBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALdDETec4bUd4gJv1IpicRUzbaLWE173c8FQo8Bm+uUrkRcJL2sC AJ/g18+Kz4Jo639uMMRmrlQ8sQQ/sGZ35uUKpZBfjStM0+2o87Hl15FRetO6N6rg ZyY1TNrKOnK2fGcXZ+J7kUkFlPZT5agLMI432wMuPq7yXu6xwR1de5zuzEgMqwzV cJnRZmC/fSkvJFNzX7K96vJzfnbxVHHRily7lRzE1LESju+I+DAf1isXuAtFfh0B UvOExD49/1YroFf4vj3Qa6Qo/WU2yZlQ1JlKWXpRO9pMLz6rkbLnMg00fNkbA/5T wIPmodsTFVmkteCBPr9Dtmw93bbpPfbsgVw= -----END CERTIFICATE-----Generated at Wed May 13 11:28:41 2026 by rpki-client