$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa File: 87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa (raw, json) Hash identifier: iM8APSin5a/Lfugbyt85Ve9ZPjjAJKqjA5GBKNZ0P7U= Subject key identifier: 32:75:AA:A0:77:74:52:80:9F:A7:AD:E3:9C:52:A9:97:02:BB:54:F9 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584D571FB698F2CFBC96076FA400 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7203 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b6:98:f2:cf:bc:96:07:6f:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=81877cc3-544d-4378-8bca-5f438b410103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:60:ce:16:c4:5e:d8:e4:8a:49:0d:48:5d: 80:f4:04:3f:f2:bc:4d:ae:6b:d2:fe:55:63:e7:b3: 41:dc:c0:86:f7:c8:5b:b7:f9:b3:03:85:a4:49:b5: d8:8f:47:00:2d:84:e0:72:19:bf:83:0a:95:8e:93: 86:47:87:8a:79:a7:f5:56:70:74:0d:ef:cc:5b:27: b0:f0:c2:69:5a:00:bc:ac:d1:16:c4:f3:d3:9b:8c: c3:16:ba:1f:cb:7c:8b:47:90:12:97:bb:5c:d5:e6: 38:0a:42:db:20:e8:88:35:23:79:a5:97:73:0c:ec: 88:56:57:2c:4b:14:0d:5b:95:51:3d:45:76:58:81: b4:ac:8a:4d:a8:d3:fc:77:8a:1c:1f:02:09:2c:de: 3a:ee:c9:7d:76:34:bc:21:4a:db:7f:5b:d0:b5:b0: 3a:77:9e:84:ae:7d:ec:dc:8c:90:00:e5:ea:2e:c6: af:b5:de:d0:cd:4d:43:e0:96:5f:0f:fc:09:ee:1c: f1:d9:d3:2b:9c:40:11:37:96:63:e5:af:1a:59:8e: 8e:fa:2a:ff:01:7f:59:bb:a7:eb:54:ce:a9:aa:ac: e9:08:25:0a:3a:d9:38:4c:b1:1c:e2:b3:f8:91:85: 72:cb:29:65:8b:18:0a:f9:47:25:6a:ee:17:e8:2e: 09:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:75:AA:A0:77:74:52:80:9F:A7:AD:E3:9C:52:A9:97:02:BB:54:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/87bdc898-7b8c-3958-b3df-9f8cfce1ab1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f8:b0:35:72:b2:c0:4f:e5:26:26:7a:7e:fb:ef:b0:ce:1a: 7c:d3:da:a4:e8:4c:de:76:f1:68:ca:74:61:74:2a:67:5f:bc: 14:d6:b4:4e:cf:3d:57:49:13:5f:e5:27:d4:63:f7:09:68:26: 72:e5:aa:28:3d:04:38:f2:05:ad:d8:3f:72:e2:d0:6b:54:06: 98:29:fe:6f:0b:77:4e:26:1e:ad:95:5a:7f:c4:ba:56:9c:8b: fc:a0:f0:8e:0f:a1:5f:98:83:d1:95:aa:0d:cb:0c:98:26:b2: db:48:1f:2a:d8:04:c0:9b:e1:2a:0d:0f:29:28:84:96:64:15: 81:cc:0c:84:46:f8:d8:3d:f8:5a:b1:66:ee:a0:71:e4:17:25: 1e:ac:dd:36:ca:68:5c:66:b6:c8:00:32:6e:d8:58:f9:d7:81: 14:01:a8:11:55:6a:b4:75:3d:46:b2:eb:99:45:e9:6c:55:66: a8:c5:34:4b:ee:07:05:e7:65:e0:ea:fe:a7:97:ac:61:27:71: db:16:29:59:e3:d7:34:e9:52:35:08:eb:7d:9f:b7:35:cf:80: 1a:62:d5:4e:11:52:a8:af:b6:7a:e7:b6:d3:e1:79:1f:c3:84: f9:2b:3d:1d:80:42:9c:3b:ee:16:00:21:ba:20:ac:99:cb:64: 22:16:06:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1XH7aY8s+8lgdvpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ODE4NzdjYzMtNTQ0ZC00Mzc4LThiY2EtNWY0MzhiNDEwMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3tgzhbEXtjkikkNSF2A9AQ/8rxNrmvS/lVj 57NB3MCG98hbt/mzA4WkSbXYj0cALYTgchm/gwqVjpOGR4eKeaf1VnB0De/MWyew 8MJpWgC8rNEWxPPTm4zDFrofy3yLR5ASl7tc1eY4CkLbIOiINSN5pZdzDOyIVlcs SxQNW5VRPUV2WIG0rIpNqNP8d4ocHwIJLN467sl9djS8IUrbf1vQtbA6d56Ern3s 3IyQAOXqLsavtd7QzU1D4JZfD/wJ7hzx2dMrnEARN5Zj5a8aWY6O+ir/AX9Zu6fr VM6pqqzpCCUKOtk4TLEc4rP4kYVyyyllixgK+Uclau4X6C4JZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJ1qqB3dFKAn6et45xSqZcCu1T5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvODdiZGM4OTgtN2I4Yy0z OTU4LWIzZGYtOWY4Y2ZjZTFhYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADP4sDVyssBP5SYmen7777DOGnzT2qToTN528WjKdGF0KmdfvBTW tE7PPVdJE1/lJ9Rj9wloJnLlqig9BDjyBa3YP3Li0GtUBpgp/m8Ld04mHq2VWn/E ulaci/yg8I4PoV+Yg9GVqg3LDJgmsttIHyrYBMCb4SoNDykohJZkFYHMDIRG+Ng9 +FqxZu6gceQXJR6s3TbKaFxmtsgAMm7YWPnXgRQBqBFVarR1PUay65lF6WxVZqjF NEvuBwXnZeDq/qeXrGEncdsWKVnj1zTpUjUI632ftzXPgBpi1U4RUqivtnrnttPh eR/DhPkrPR2AQpw77hYAIbogrJnLZCIWBh4= -----END CERTIFICATE-----Generated at Mon Apr 13 15:32:32 2026 by rpki-client