$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: Xf4VwahlgC43viw/E3nqRQkHBNhxhzHNPQqbIVxW/0A= Subject key identifier: B4:F1:90:3C:A8:A5:C5:BD:87:8A:FD:C2:65:50:BA:D8:22:ED:A4:F3 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584DADAAD7621E9078A45E677700 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d7:62:1e:90:78:a4:5e:67:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=f58500e0-a179-4511-9acd-16d9bd93774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:79:a6:fb:17:15:2c:b4:27:f2:d5:44:d5: 3a:c3:9a:62:a6:37:24:56:02:00:18:2e:b1:5e:42: ab:be:90:e2:c6:d0:44:6c:3b:a2:d3:ff:f3:31:58: 8e:18:48:ae:74:b4:b0:f8:1b:ee:fd:5e:c7:b6:ee: 78:84:e4:d3:b1:d1:b4:86:3e:71:c8:34:56:d6:cb: 5f:e4:3f:b3:a0:5b:8a:37:43:5f:e2:da:36:25:04: 53:5a:1a:b0:69:6d:30:44:22:1e:cf:4b:8c:a3:b9: 92:b2:e9:ca:c4:a1:ba:8a:94:50:11:53:6b:50:90: 3a:59:90:bb:ec:dd:6b:4d:90:5d:01:31:69:72:de: 20:45:d4:3e:32:ab:3e:ce:8a:6e:1c:b9:71:49:30: 44:84:24:b3:c2:f7:24:40:0d:0e:9c:76:58:62:db: e2:0a:20:44:7f:95:e0:59:db:f2:1a:1a:1d:64:f2: f9:81:49:16:50:d4:0e:48:c3:ff:be:5e:ff:ca:b2: fb:67:17:d4:f6:51:a5:87:c9:91:78:6c:8e:c1:c8: 95:dc:80:b9:ab:8c:56:8b:a2:ab:21:31:73:48:d6: d8:77:2d:60:c3:2f:c7:57:65:ee:97:ad:e8:79:71: dc:82:27:b7:6b:32:6e:c3:2f:cb:8b:fc:8b:91:cd: 0d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F1:90:3C:A8:A5:C5:BD:87:8A:FD:C2:65:50:BA:D8:22:ED:A4:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:28:2a:e7:81:89:ee:f0:75:95:95:c1:26:cf:f9:05:a1:da: 37:88:2f:40:3f:cd:39:07:5f:ac:f6:41:ac:41:38:69:97:df: 67:57:68:5c:00:6f:04:d9:c6:a8:f3:1b:99:e9:12:4d:a7:a1: 96:14:6e:03:2c:68:5d:2b:92:44:cd:73:b4:75:6f:fc:9d:35: 6e:51:c3:59:a4:3f:bb:8b:21:8d:d7:83:6a:b7:6f:8c:69:b0: ab:23:40:aa:42:57:5c:b0:6f:3c:47:95:9f:d5:74:6e:89:e5: b7:1e:67:1d:ad:be:f4:d8:60:bf:0a:4f:e7:c9:49:7a:3a:01: d2:11:65:67:f8:75:12:d9:74:f2:9c:75:a4:4e:6e:7e:17:57: f1:86:ae:25:14:26:f7:e2:76:b5:3d:ac:d6:b1:27:b2:81:57: 9c:00:b6:cd:ea:1c:0b:8f:a2:90:68:e7:19:5d:33:26:a0:df: ef:4f:ee:85:ae:c1:f8:0a:68:37:b3:92:a2:09:62:71:59:cc: 43:38:5c:10:87:0d:73:45:3b:21:a0:40:0d:a7:56:2c:5d:56: cf:69:68:f4:d1:3b:f0:d9:26:d9:02:4b:f2:e3:c2:aa:11:10: 52:5d:5e:77:d7:98:9b:ce:95:b3:a1:45:f8:7f:27:fc:5b:56: cd:67:c6:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2tqtdiHpB4pF5ndwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk ZjU4NTAwZTAtYTE3OS00NTExLTlhY2QtMTZkOWJkOTM3NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKF5pvsXFSy0J/LVRNU6w5pipjckVgIAGC6x XkKrvpDixtBEbDui0//zMViOGEiudLSw+Bvu/V7Htu54hOTTsdG0hj5xyDRW1stf 5D+zoFuKN0Nf4to2JQRTWhqwaW0wRCIez0uMo7mSsunKxKG6ipRQEVNrUJA6WZC7 7N1rTZBdATFpct4gRdQ+Mqs+zopuHLlxSTBEhCSzwvckQA0OnHZYYtviCiBEf5Xg WdvyGhodZPL5gUkWUNQOSMP/vl7/yrL7ZxfU9lGlh8mReGyOwciV3IC5q4xWi6Kr ITFzSNbYdy1gwy/HV2Xul63oeXHcgie3azJuwy/Li/yLkc0NhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLTxkDyopcW9h4r9wmVQutgi7aTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAuKCrngYnu8HWVlcEmz/kFodo3iC9AP805B1+s9kGsQThpl99nV2hc AG8E2cao8xuZ6RJNp6GWFG4DLGhdK5JEzXO0dW/8nTVuUcNZpD+7iyGN14Nqt2+M abCrI0CqQldcsG88R5Wf1XRuieW3Hmcdrb702GC/Ck/nyUl6OgHSEWVn+HUS2XTy nHWkTm5+F1fxhq4lFCb34na1PazWsSeygVecALbN6hwLj6KQaOcZXTMmoN/vT+6F rsH4Cmg3s5KiCWJxWcxDOFwQhw1zRTshoEANp1YsXVbPaWj00Tvw2SbZAkvy48Kq ERBSXV5315ibzpWzoUX4fyf8W1bNZ8bJ -----END CERTIFICATE-----Generated at Wed May 13 09:32:13 2026 by rpki-client