$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa File: a686302c-a6ba-3ccb-9f89-080543f21e89.roa (raw, json) Hash identifier: 5FbYlW+NdgG6/qEjamC8+PaetY1lRo07CnacFdPYhbM= Subject key identifier: 10:7B:63:B3:86:CD:36:E2:FC:36:D1:64:1F:C1:8C:8A:3D:4A:A9:F0 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458FB9CD2B74C3E1F4B1C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 2604:4080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8f:b9:cd:2b:74:c3:e1:f4:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=fe3a8141-bd03-4542-a48d-173d8217327c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:39:0d:fd:59:f4:4c:0e:88:37:7e:db:df: 0b:76:0f:03:e7:47:f7:99:ee:dc:dd:6b:d2:9e:9e: 29:96:f3:6b:a7:d9:9f:66:9e:b9:2b:1e:f7:de:e9: 05:dd:5f:a3:0b:23:39:45:82:f3:2c:36:1d:d7:f2: 3e:e2:05:11:b7:2b:4a:f4:a4:fe:9c:bf:c4:36:19: d1:c0:48:98:df:85:82:d0:25:d2:97:5e:8d:7d:a5: 5b:16:c5:78:96:23:3c:9f:ed:90:7c:70:0b:26:41: 20:be:15:2b:0c:63:7e:09:1f:ea:41:44:6d:51:1b: 70:dc:c9:b1:6a:d6:84:94:c1:92:54:bb:88:55:b6: 26:f8:01:b8:0e:3b:4f:f8:96:7d:b7:70:ca:b3:51: f9:7c:95:90:9d:c7:05:76:a8:93:31:ab:0b:94:6a: d4:29:54:91:f3:6b:b2:74:3b:02:ad:d9:72:8b:d4: 4f:e7:75:38:b4:ed:e2:4c:db:a4:3e:c6:e2:5e:c4: 38:d3:c7:bc:66:7a:24:e8:e7:7a:fc:db:88:d7:76: 26:be:83:9d:b8:05:a7:bc:fc:2a:11:2d:ad:e3:f7: 5f:52:cf:cd:ab:af:9e:65:85:b7:f0:09:70:32:7d: e3:0e:05:a9:57:7a:db:76:12:85:c5:0b:c8:12:51: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:63:B3:86:CD:36:E2:FC:36:D1:64:1F:C1:8C:8A:3D:4A:A9:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/a686302c-a6ba-3ccb-9f89-080543f21e89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2604:4080::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ea:68:1e:00:eb:17:0f:bb:5a:f7:c6:19:33:ca:b6:89:ef: fc:c5:31:18:6e:1c:e3:58:37:d2:d1:f3:ac:71:cf:71:66:a3: bc:aa:e1:e2:18:73:91:ad:7f:e2:af:3e:02:47:07:8a:06:5e: d6:59:8a:2b:e5:41:6b:df:b1:09:59:b9:24:28:d3:65:77:fe: af:2f:78:8b:84:a6:2c:4f:06:34:b8:91:8d:26:90:73:d0:3c: 7a:c8:81:a1:99:d2:7e:77:63:98:8b:87:c0:09:fa:9c:94:dc: 44:9c:5d:1c:fc:8e:3b:02:33:72:d9:79:ec:c7:10:d3:4d:12: 29:4e:84:49:35:c0:4f:8d:40:02:42:3a:11:db:f8:cd:f9:8e: e1:a9:d2:1f:05:e7:9f:75:ef:be:19:ab:53:e7:74:d7:59:bc: a2:38:92:6a:bc:0a:e8:8a:75:dc:b5:ef:95:d2:27:27:7b:40: b3:ab:45:c3:27:f1:ec:7b:01:c7:fa:ff:38:99:17:13:80:d3: df:2b:84:14:c7:4b:4c:64:f5:81:09:be:ea:74:d4:3d:f5:c6: 84:83:23:43:1f:98:de:68:b8:3e:d8:bf:e8:46:1e:4e:07:1a: 2d:dd:7b:36:a0:97:65:db:40:87:9e:22:e9:6e:a9:46:ae:02: 91:fa:95:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRY+5zSt0w+H0scAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZmUzYTgxNDEtYmQwMy00NTQyLWE0OGQtMTczZDgyMTczMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBY5Df1Z9EwOiDd+298Ldg8D50f3me7c3WvS np4plvNrp9mfZp65Kx733ukF3V+jCyM5RYLzLDYd1/I+4gURtytK9KT+nL/ENhnR wEiY34WC0CXSl16NfaVbFsV4liM8n+2QfHALJkEgvhUrDGN+CR/qQURtURtw3Mmx ataElMGSVLuIVbYm+AG4DjtP+JZ9t3DKs1H5fJWQnccFdqiTMasLlGrUKVSR82uy dDsCrdlyi9RP53U4tO3iTNukPsbiXsQ408e8Znok6Od6/NuI13YmvoOduAWnvPwq ES2t4/dfUs/Nq6+eZYW38AlwMn3jDgWpV3rbdhKFxQvIElETmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBB7Y7OGzTbi/DbRZB/BjIo9SqnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYTY4NjMwMmMtYTZiYS0z Y2NiLTlmODktMDgwNTQzZjIxZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRAgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBl6mgeAOsXD7ta98YZM8q2ie/8xTEYbhzjWDfS0fOscc9xZqO8quHi GHORrX/irz4CRweKBl7WWYor5UFr37EJWbkkKNNld/6vL3iLhKYsTwY0uJGNJpBz 0Dx6yIGhmdJ+d2OYi4fACfqclNxEnF0c/I47AjNy2XnsxxDTTRIpToRJNcBPjUAC QjoR2/jN+Y7hqdIfBeefde++GatT53TXWbyiOJJqvAroinXcte+V0icne0Czq0XD J/HsewHH+v84mRcTgNPfK4QUx0tMZPWBCb7qdNQ99caEgyNDH5jeaLg+2L/oRh5O Bxot3Xs2oJdl20CHniLpbqlGrgKR+pXx -----END CERTIFICATE-----Generated at Wed May 13 04:38:41 2026 by rpki-client