$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa File: 706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json) Hash identifier: OdfUsrIcle9HbF/80OSaM1zWwzhtNrfNDw4uFrAtcjE= Subject key identifier: 15:2A:1A:5D:01:E3:A0:5C:1E:49:FC:FF:5C:50:EC:4A:EB:9F:44:DD Certificate issuer: /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Certificate serial: 010D0C9F4328584D9E50061681661B1BB4BA5E00 Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 198949 IP address blocks: 2606:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:06:16:81:66:1b:1b:b4:ba:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=73f8bf9b-3913-47f6-981f-64da1e02463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:46:e9:30:20:3a:88:d0:15:21:da:99:c8: ec:6f:73:ee:51:53:59:63:a2:89:8a:67:50:55:f2: 57:f9:17:56:10:43:a0:5f:0a:9a:9e:e0:ca:dd:38: 3c:85:44:b6:ba:d2:76:d8:cc:bc:01:37:a5:b6:e5: 2f:2d:72:6b:51:26:8c:91:a7:3a:93:41:09:56:28: f0:65:b9:cd:a5:1b:8e:7c:64:0d:54:74:4f:03:08: 03:76:de:f8:10:4b:aa:c3:f9:86:80:f0:04:1a:8b: 65:59:3f:4e:93:ee:91:01:4a:8e:17:97:ae:ac:1a: bd:de:85:60:83:b7:24:d9:7e:85:c6:cb:54:25:7b: ea:9f:b6:ae:b8:d3:c9:e1:50:67:df:58:4c:ff:74: d2:b0:84:d6:71:e6:9c:b4:66:f8:19:cb:0d:18:c1: 84:08:83:f0:2f:89:a6:5d:38:24:b2:fc:fb:00:cc: 72:cb:f9:b3:24:d6:f1:5e:36:6b:93:9f:c3:f1:97: 9b:69:50:ee:b0:4f:ff:d7:9d:82:b0:03:27:b8:cd: 03:3f:6b:cc:21:a6:10:ae:e8:a3:80:27:1e:0f:dc: 4b:fb:f0:52:e4:f1:8a:94:99:aa:30:25:3e:df:33: 3a:a5:81:f5:96:02:48:96:1e:f2:c9:16:7a:ab:d1: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:1A:5D:01:E3:A0:5C:1E:49:FC:FF:5C:50:EC:4A:EB:9F:44:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl X509v3 Authority Key Identifier: keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:58:0d:57:16:48:c8:32:3b:22:52:5c:83:bb:26:3d:61:b6: 98:3b:ec:43:13:0b:4f:ae:aa:0b:e7:cf:8b:6f:68:ac:c3:c0: f4:7d:44:9a:be:95:3e:77:9e:0a:bc:1b:c7:00:2c:62:e0:f8: 9b:b0:45:5d:6a:7b:2b:fc:9e:21:86:bb:19:02:a0:e8:8b:a5: d8:3b:80:e8:a8:08:d6:61:69:1f:28:0a:0b:fd:31:f6:d5:c2: 36:ee:8d:55:67:23:b5:5b:96:1e:ff:ac:f5:36:5c:40:59:e7: 8b:a0:0c:e3:2d:be:92:9d:1c:c3:a9:d3:77:9b:61:43:d3:d7: 0e:2e:57:4e:0a:af:a7:b8:52:e0:13:6d:07:35:6f:3d:37:34: e1:07:a1:4c:20:46:16:d0:47:f0:3a:af:26:1f:b7:37:5e:9d: 39:0f:1e:65:32:f4:54:4c:16:4b:24:27:9e:ca:3f:a7:f5:48: e0:95:fb:30:2d:5d:7a:f3:b9:70:4c:57:ae:d3:ee:01:17:15: 26:89:94:f4:89:a4:9c:5f:d4:c1:87:75:aa:de:09:76:23:ad: 11:fb:1e:dd:4e:3a:22:2e:ec:0a:53:16:94:98:08:48:1e:34: dc:b0:ba:55:60:c7:30:96:eb:b7:97:1b:8b:8a:34:a9:7d:44: e5:5d:9c:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2eUAYWgWYbG7S6XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk NTlhMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NzNmOGJmOWItMzkxMy00N2Y2LTk4MWYtNjRkYTFlMDI0NjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn11G6TAgOojQFSHamcjsb3PuUVNZY6KJimdQ VfJX+RdWEEOgXwqanuDK3Tg8hUS2utJ22My8ATeltuUvLXJrUSaMkac6k0EJVijw ZbnNpRuOfGQNVHRPAwgDdt74EEuqw/mGgPAEGotlWT9Ok+6RAUqOF5eurBq93oVg g7ck2X6FxstUJXvqn7auuNPJ4VBn31hM/3TSsITWceactGb4GcsNGMGECIPwL4mm XTgksvz7AMxyy/mzJNbxXjZrk5/D8ZebaVDusE//152CsAMnuM0DP2vMIaYQruij gCceD9xL+/BS5PGKlJmqMCU+3zM6pYH1lgJIlh7yyRZ6q9FPpQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBUqGl0B46BcHkn8/1xQ7Errn0TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvNzA2YTk1NDItNWI5MC0z MTg2LWIyYWEtODZlMmU2YTE2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1 ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAWA1XFkjIMjsiUlyDuyY9YbaYO+xDEwtPrqoL58+Lb2isw8D0fUSa vpU+d54KvBvHACxi4PibsEVdansr/J4hhrsZAqDoi6XYO4DoqAjWYWkfKAoL/TH2 1cI27o1VZyO1W5Ye/6z1NlxAWeeLoAzjLb6SnRzDqdN3m2FD09cOLldOCq+nuFLg E20HNW89NzThB6FMIEYW0EfwOq8mH7c3Xp05Dx5lMvRUTBZLJCeeyj+n9Ujglfsw LV1687lwTFeu0+4BFxUmiZT0iaScX9TBh3Wq3gl2I60R+x7dTjoiLuwKUxaUmAhI HjTcsLpVYMcwluu3lxuLijSpfUTlXZx/ -----END CERTIFICATE-----Generated at Wed May 13 13:09:48 2026 by rpki-client