$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json) Hash identifier: Q2jnFvN200ONRA7NQiEJerzclqjqa2fAsqTPpxNIGkM= Subject key identifier: 25:F9:3E:50:25:52:32:AE:F8:86:3D:86:DB:57:55:AE:7A:B8:FE:F7 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584D91C003EE6C255D515B93A240 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 36236 IP address blocks: 2620:49:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:ee:6c:25:5d:51:5b:93:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=f5a35009-54b0-41c7-bf26-c89ca844185f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:1e:c7:6b:33:40:42:ac:36:d2:22:1f:75: 96:b1:34:21:5d:36:ee:d8:c8:85:99:73:8b:a3:a4: 56:69:94:1e:32:48:e1:ba:74:36:15:08:d2:92:3c: f5:f7:3f:28:2c:67:5e:76:2e:0c:3f:de:da:68:d8: 7f:d3:31:93:15:62:be:4c:f3:fb:86:6c:ab:a5:2a: cf:1e:c5:f1:11:5d:a7:fa:e6:df:34:2e:a3:b3:26: d0:b2:a4:56:df:94:cf:ce:59:0a:29:17:42:20:0e: 1c:d0:4b:3f:54:5b:8d:a1:b5:38:a7:17:6e:71:fe: 2b:a4:2d:08:e2:c9:39:cf:a2:dc:4a:50:21:6b:ff: 42:1c:64:84:09:cd:eb:5d:1b:d0:ca:ff:13:41:ae: f5:e8:0a:30:aa:e6:46:cb:d1:60:83:60:fe:e8:88: fc:96:64:e2:42:d7:75:b9:06:74:d8:e7:69:c6:b5: 2e:0f:e7:f4:f7:7e:57:87:72:aa:9f:0e:72:fc:cf: 28:20:df:42:b9:34:bf:80:6a:fb:00:5d:d5:c1:8d: 71:b4:e7:9c:c8:48:97:22:bc:10:f8:b8:c9:e6:9b: 8b:07:ed:c7:f0:a9:48:6e:75:54:05:ea:9d:c6:2b: 5a:e7:aa:d1:18:56:dd:2c:68:ed:98:7e:5a:37:41: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:3E:50:25:52:32:AE:F8:86:3D:86:DB:57:55:AE:7A:B8:FE:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5b:d8:c0:d9:0c:f0:dd:3e:85:75:44:b4:3e:8f:23:88:38: 2f:47:61:cd:80:d3:3c:ab:07:a8:e4:7d:77:30:22:0d:27:ef: 38:7d:40:de:bf:59:67:5f:31:70:30:5d:cf:29:66:14:86:33: a9:5b:e4:84:69:d9:d4:ce:a9:a6:f4:89:e9:3a:9b:cd:3c:8d: 97:1c:ab:ea:8d:17:ee:bd:b7:ab:79:a8:88:8a:96:d8:c8:43: e8:78:b4:25:33:6a:e3:7b:f9:79:1d:64:cd:aa:77:6a:ad:63: f9:33:e6:67:5e:30:c2:f9:41:78:05:11:3a:ce:18:26:3d:ca: c7:01:02:08:4d:c9:6c:af:05:0b:0b:78:94:b0:39:d0:c0:d6: b6:f4:dc:6b:2e:d9:19:2e:f0:b3:d5:e6:e2:07:47:2f:68:75: 2e:25:1a:5e:12:27:b0:d0:ab:0e:92:1d:90:44:00:6c:47:e7: 84:de:ce:a9:3c:c8:0c:fb:bd:24:75:cf:61:b4:1b:e4:cf:ec: 5d:82:62:1b:2e:53:ce:76:f7:b8:b2:bd:7b:aa:70:3c:be:c6: 89:fe:ff:47:cc:77:89:dc:7a:6f:29:26:6f:17:7e:48:c8:e7: 16:c0:0a:68:c2:83:73:f4:27:78:7d:d3:fe:82:3b:05:bc:1a: 55:cd:b6:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAPubCVdUVuTokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZjVhMzUwMDktNTRiMC00MWM3LWJmMjYtYzg5Y2E4NDQxODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D0ex2szQEKsNtIiH3WWsTQhXTbu2MiFmXOL o6RWaZQeMkjhunQ2FQjSkjz19z8oLGdedi4MP97aaNh/0zGTFWK+TPP7hmyrpSrP HsXxEV2n+ubfNC6jsybQsqRW35TPzlkKKRdCIA4c0Es/VFuNobU4pxducf4rpC0I 4sk5z6LcSlAha/9CHGSECc3rXRvQyv8TQa716AowquZGy9Fgg2D+6Ij8lmTiQtd1 uQZ02OdpxrUuD+f0935Xh3Kqnw5y/M8oIN9CuTS/gGr7AF3VwY1xtOecyEiXIrwQ +LjJ5puLB+3H8KlIbnVUBeqdxita56rRGFbdLGjtmH5aN0HV1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCX5PlAlUjKu+IY9httXVa56uP73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZGY4N2JiNzItZGM1Mi0z NjM5LWEwYWYtZGNiYTM1MDliZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRb2MDZDPDdPoV1RLQ+jyOIOC9HYc2A0zyrB6jkfXcwIg0n7zh9 QN6/WWdfMXAwXc8pZhSGM6lb5IRp2dTOqab0iek6m808jZccq+qNF+69t6t5qIiK ltjIQ+h4tCUzauN7+XkdZM2qd2qtY/kz5mdeMML5QXgFETrOGCY9yscBAghNyWyv BQsLeJSwOdDA1rb03Gsu2Rku8LPV5uIHRy9odS4lGl4SJ7DQqw6SHZBEAGxH54Te zqk8yAz7vSR1z2G0G+TP7F2CYhsuU85297iyvXuqcDy+xon+/0fMd4ncem8pJm8X fkjI5xbACmjCg3P0J3h90/6COwW8GlXNtpk= -----END CERTIFICATE-----Generated at Wed May 13 06:31:48 2026 by rpki-client