$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa File: 9fd150ce-2142-3c1e-a371-3207dc1e5083.roa (raw, json) Hash identifier: v7WDpaqWgnOZ5NuuKHckKm7WAM7jxBKd81513+4oLik= Subject key identifier: 6F:91:37:07:67:83:91:6D:9A:76:F1:D9:62:77:8E:C0:55:72:E1:1C Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584DA6B0194F530EE69C80A31E00 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14270 IP address blocks: 2607:f118::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:19:4f:53:0e:e6:9c:80:a3:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=1f0104b5-a41a-45de-90fa-93581241f962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:35:22:74:0b:82:64:1b:26:b7:24:9e:a0: 3a:4a:76:b7:94:28:c3:ce:62:38:e6:84:8c:62:1e: c6:22:61:f7:e3:0a:5d:04:de:0f:37:f4:bc:4d:28: 90:6e:85:38:67:c9:5f:46:26:06:35:94:22:d1:5b: d3:5b:67:d3:1c:9d:70:77:1d:3e:70:e5:e5:e9:88: 86:07:6d:41:03:00:bf:a9:54:99:c2:25:25:fa:53: 83:3a:a6:13:89:27:7e:0b:06:f8:9a:1b:31:73:97: 8c:9d:ff:6f:b1:f9:9f:a9:4f:6d:23:9c:a8:f2:3a: 49:5b:66:b0:36:d5:7e:73:ac:9b:87:d6:7a:69:f2: 4f:52:f3:49:3e:73:27:c1:80:7e:4d:20:16:c6:bb: a6:95:57:f1:41:8e:78:ac:63:a8:1e:86:7a:6f:ef: 49:56:fd:98:97:8d:1d:74:01:29:73:10:9c:ff:d1: 49:2d:f9:24:49:ff:7e:b7:6d:12:3e:67:68:f4:1a: 62:05:80:2e:8e:c7:8b:1c:38:bc:43:3d:0e:b7:8d: c6:a1:f0:b8:e9:d6:1d:26:e3:ac:27:98:57:42:de: c0:3f:54:e6:31:39:26:19:f0:ba:48:87:e4:b8:3b: e4:7d:0c:ad:9e:d7:61:90:14:7a:33:06:be:8b:12: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:37:07:67:83:91:6D:9A:76:F1:D9:62:77:8E:C0:55:72:E1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv6: 2607:f118::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2d:88:ea:1e:f6:87:70:79:ea:af:76:f8:60:5e:ad:a9:c8: b3:4b:d0:df:7c:17:15:8e:d4:2d:ff:40:50:50:43:82:8c:fd: fb:7e:60:e9:83:ba:8e:56:dd:57:48:bb:82:d7:f9:0e:cd:30: 55:e2:b3:e6:6a:7b:33:91:7c:7e:c9:1a:d1:59:44:e2:35:90: c6:6d:b1:70:25:0e:82:bf:b5:0a:05:c1:69:cc:04:fd:d6:39: 9e:40:ce:c8:9a:a2:b1:39:1a:73:db:4f:78:4f:e8:f0:29:a0: b7:a4:90:b4:24:3b:8c:94:0f:35:21:45:dd:41:16:50:76:f4: e8:9a:8a:75:eb:44:32:1e:78:6d:c1:4c:f1:1d:39:78:e9:84: 6c:c7:c6:ed:19:9d:ee:ca:29:7c:14:f0:64:51:d8:59:c6:98: a1:7d:67:e3:d8:60:9c:1f:f7:79:3d:14:12:e4:60:1c:f1:c6: 8b:c5:85:a8:e0:30:ba:b2:b7:4a:3c:57:9d:6c:1b:ea:b1:c8: 99:44:15:01:3b:36:c0:0f:bd:16:cf:e4:e2:56:70:c3:3b:8f: f6:c6:97:73:ca:99:6e:4c:60:a7:db:60:c5:c3:f2:40:c5:2f: 9c:41:5f:24:d5:fd:bd:06:0a:ca:67:bc:ec:44:46:00:24:bc: 68:27:46:ca -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msBlPUw7mnICjHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MWYwMTA0YjUtYTQxYS00NWRlLTkwZmEtOTM1ODEyNDFmOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaE1InQLgmQbJrcknqA6Sna3lCjDzmI45oSM Yh7GImH34wpdBN4PN/S8TSiQboU4Z8lfRiYGNZQi0VvTW2fTHJ1wdx0+cOXl6YiG B21BAwC/qVSZwiUl+lODOqYTiSd+Cwb4mhsxc5eMnf9vsfmfqU9tI5yo8jpJW2aw NtV+c6ybh9Z6afJPUvNJPnMnwYB+TSAWxrumlVfxQY54rGOoHoZ6b+9JVv2Yl40d dAEpcxCc/9FJLfkkSf9+t20SPmdo9BpiBYAujseLHDi8Qz0Ot43GofC46dYdJuOs J5hXQt7AP1TmMTkmGfC6SIfkuDvkfQytntdhkBR6Mwa+ixIGTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG+RNwdng5Ftmnbx2WJ3jsBVcuEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOWZkMTUwY2UtMjE0Mi0z YzFlLWEzNzEtMzIwN2RjMWU1MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfxGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhLYjqHvaHcHnqr3b4YF6tqcizS9DffBcVjtQt/0BQUEOCjP37fmDp g7qOVt1XSLuC1/kOzTBV4rPmanszkXx+yRrRWUTiNZDGbbFwJQ6Cv7UKBcFpzAT9 1jmeQM7ImqKxORpz2094T+jwKaC3pJC0JDuMlA81IUXdQRZQdvTomop160QyHnht wUzxHTl46YRsx8btGZ3uyil8FPBkUdhZxpihfWfj2GCcH/d5PRQS5GAc8caLxYWo 4DC6srdKPFedbBvqsciZRBUBOzbAD70Wz+TiVnDDO4/2xpdzypluTGCn22DFw/JA xS+cQV8k1f29BgrKZ7zsREYAJLxoJ0bK -----END CERTIFICATE-----Generated at Wed May 13 05:35:26 2026 by rpki-client