$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa File: e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa (raw, json) Hash identifier: pIUkwK/Hg+DP8Dp+eH328tPxy2BVZX+hDKv/E8t564k= Subject key identifier: 3C:E1:FF:FA:4A:D3:3F:F2:44:5D:74:BA:9F:C2:93:4E:8C:A9:21:E4 Certificate issuer: /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f Certificate serial: 010D0C9F4328584D91C00F5CAA2D5A6D17C69430 Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 394195 IP address blocks: 2606:b640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0f:5c:aa:2d:5a:6d:17:c6:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=0dae2098-a6d5-4a77-b301-41d981271e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a5:e0:6d:31:02:16:0a:29:84:ea:3e:73:c3: 85:f9:a3:e8:79:74:85:06:e4:ec:91:cf:75:8b:60: 9e:34:57:1d:03:5e:b5:af:a0:81:f0:41:42:d2:16: 45:c8:10:f3:dc:f5:1c:ca:ec:0b:73:ed:82:86:5b: fc:53:71:bd:e8:b7:ac:f0:82:05:6c:5d:ea:4a:39: 6c:da:08:10:20:de:f7:80:41:62:5c:40:29:c6:9d: aa:84:b7:9b:f4:aa:4b:c5:28:21:03:8c:2c:31:be: 9e:23:9a:a6:ef:00:83:3c:85:03:3b:2b:c3:61:66: dd:bc:f2:08:1d:8d:ba:73:8e:fe:3a:a3:48:9f:7d: c9:84:a4:ca:ee:52:36:b7:b3:71:18:9f:ec:ce:1d: e3:c9:9a:a6:b1:b1:6d:bb:06:26:08:82:3b:c2:ee: 58:54:61:85:ec:c9:41:5d:0d:5d:24:e4:a9:9d:36: 82:b4:8d:e1:a7:4b:cd:a3:2b:53:31:d7:72:79:94: ca:2c:2c:37:52:60:ec:3f:26:88:b6:7e:5a:b2:ea: 58:e1:40:5c:fb:93:0c:63:b1:52:b8:54:af:a1:07: c2:f7:c0:1f:12:64:fe:17:a7:78:0e:a1:a8:59:81: 36:7b:fa:d0:13:fc:13:43:08:88:da:67:dc:f1:79: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E1:FF:FA:4A:D3:3F:F2:44:5D:74:BA:9F:C2:93:4E:8C:A9:21:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/e87f877b-6f56-3dad-bd7c-cacd9045cfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl X509v3 Authority Key Identifier: keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer sbgp-ipAddrBlock: critical IPv6: 2606:b640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9f:4c:13:9a:4a:ae:1e:f9:8d:ce:62:02:05:dc:3c:2d:7a: 76:21:90:04:50:9e:22:5a:32:24:67:32:ad:1a:5b:c0:8b:24: d5:48:83:65:c2:be:0f:f1:8f:8e:5e:b9:17:4d:e9:48:ce:8d: a0:6f:02:08:ee:ef:97:41:b2:eb:bf:6a:a9:7a:5f:bb:c4:1f: 9f:a7:7c:88:f8:21:7c:e7:5c:fa:27:76:85:76:05:6a:cf:78: d7:de:73:57:8c:ce:dd:df:ed:0f:6d:29:8b:f1:cf:5c:a5:f4: a5:3b:e2:26:3d:69:a5:8a:dd:42:a8:9e:cc:bf:53:a8:06:50: 18:82:bf:b4:ff:59:cf:78:32:c5:60:a8:07:70:13:df:5e:6c: 99:d3:9b:ad:56:5e:cf:64:72:ad:f6:e1:50:b4:dc:e0:72:5b: 6f:c1:45:17:0a:91:29:09:17:e0:f4:16:33:a9:00:87:4c:59: 18:89:2e:ca:41:9a:7a:7e:9e:df:71:05:92:88:95:b5:dc:2b: fd:02:74:27:c0:35:1e:24:55:22:46:d0:01:fd:c5:6a:41:56: 6c:68:00:fe:ec:03:fa:e2:ba:cc:6f:a0:0c:b3:c8:11:da:37: de:37:d5:a3:84:bc:be:d3:09:52:c8:a4:37:e3:6e:e1:2b:94: 12:50:f8:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2RwA9cqi1abRfGlDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdjNmQzMDEtZjJiOC00Y2ExLWEwZWUtZGU4MTQ0MDlj NTVmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MGRhZTIwOTgtYTZkNS00YTc3LWIzMDEtNDFkOTgxMjcxZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaXgbTECFgophOo+c8OF+aPoeXSFBuTskc91 i2CeNFcdA161r6CB8EFC0hZFyBDz3PUcyuwLc+2Chlv8U3G96Les8IIFbF3qSjls 2ggQIN73gEFiXEApxp2qhLeb9KpLxSghA4wsMb6eI5qm7wCDPIUDOyvDYWbdvPII HY26c47+OqNIn33JhKTK7lI2t7NxGJ/szh3jyZqmsbFtuwYmCII7wu5YVGGF7MlB XQ1dJOSpnTaCtI3hp0vNoytTMddyeZTKLCw3UmDsPyaItn5asupY4UBc+5MMY7FS uFSvoQfC98AfEmT+F6d4DqGoWYE2e/rQE/wTQwiI2mfc8XlGQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDzh//pK0z/yRF10up/Ck06MqSHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2M2 ZDMwMS1mMmI4LTRjYTEtYTBlZS1kZTgxNDQwOWM1NWYvZTg3Zjg3N2ItNmY1Ni0z ZGFkLWJkN2MtY2FjZDkwNDVjZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdjNmQzMDEtZjJiOC00Y2ExLWEw ZWUtZGU4MTQ0MDljNTVmLzQ3YzZkMzAxLWYyYjgtNGNhMS1hMGVlLWRlODE0NDA5 YzU1Zi5jcmwwHwYDVR0jBBgwFoAUuJo2/OUSmkrhCtwAhiyt1dz/bawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2M2ZDMwMS1mMmI4LTRjYTEtYTBlZS1kZTgx NDQwOWM1NWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJga2QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBin0wTmkquHvmNzmICBdw8LXp2IZAEUJ4iWjIkZzKtGlvAiyTVSINl wr4P8Y+OXrkXTelIzo2gbwII7u+XQbLrv2qpel+7xB+fp3yI+CF851z6J3aFdgVq z3jX3nNXjM7d3+0PbSmL8c9cpfSlO+ImPWmlit1CqJ7Mv1OoBlAYgr+0/1nPeDLF YKgHcBPfXmyZ05utVl7PZHKt9uFQtNzgcltvwUUXCpEpCRfg9BYzqQCHTFkYiS7K QZp6fp7fcQWSiJW13Cv9AnQnwDUeJFUiRtAB/cVqQVZsaAD+7AP64rrMb6AMs8gR 2jfeN9WjhLy+0wlSyKQ3427hK5QSUPgz -----END CERTIFICATE-----Generated at Wed May 13 11:20:20 2026 by rpki-client