$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa File: b8f00c80-28df-3bec-8197-b1c1cd901f79.roa (raw, json) Hash identifier: BUL7UbUW6w+X9l9VuznQCwCllOXyeZnsGT4J8RGncwc= Subject key identifier: 4B:DB:7E:90:56:10:73:22:2A:34:06:9B:55:38:3E:39:73:90:06:4D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817C7B815801384E65AB00 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 136988 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7c:7b:81:58:01:38:4e:65:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=8c60de89-4490-475c-8e06-8f0658cc0def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:96:ae:33:c5:c8:41:9a:bc:85:18:2a:65: 78:67:3f:f6:6e:2a:5a:d8:e4:52:30:b3:f8:91:b9: e6:b0:76:4c:4b:97:b2:cb:1a:b4:df:62:3c:e7:f7: 37:d4:d6:81:18:2b:16:f6:5c:8e:ca:82:8d:3e:03: b7:f9:0e:51:74:d0:89:ce:cb:2a:8a:37:20:60:10: bd:ed:56:1c:80:b8:4c:47:c6:b4:95:76:40:ba:ba: f5:3f:e3:18:ad:6d:20:82:fc:af:40:ee:82:b3:c7: 53:7d:30:1f:ee:47:89:ae:1b:e0:68:15:34:ae:e2: ff:fb:38:66:02:c0:14:bd:3b:a5:d3:96:b8:ab:65: 47:2b:dd:25:f3:67:9f:c7:8a:84:95:05:c0:8f:97: 40:d7:80:ec:87:e4:76:f3:49:97:b7:6f:93:7e:99: 3d:b7:d5:73:d3:86:ca:3a:7a:b7:a9:d1:d0:1c:13: 24:07:2f:3e:ae:56:6b:d2:fe:89:5f:c5:b0:db:b6: e7:7a:e4:04:e8:77:2c:06:a3:ca:b7:08:0a:1b:1a: 90:73:b2:f1:02:47:2b:6e:c4:11:c4:47:b0:3b:74: 46:c9:4e:28:cd:c5:3d:a3:09:f8:4c:72:41:d2:2c: ac:c0:ee:d5:42:c7:e0:dd:4e:01:c4:24:f1:13:a2: cd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:7E:90:56:10:73:22:2A:34:06:9B:55:38:3E:39:73:90:06:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b8f00c80-28df-3bec-8197-b1c1cd901f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ec:09:fb:f0:07:cc:f2:e1:4c:80:35:0d:b6:d6:df:1a:4f: 74:35:47:dc:44:26:d7:d3:5e:7a:14:a2:8e:82:86:f6:60:0e: a2:21:98:a5:f7:c6:26:44:87:9b:f0:4f:ae:13:42:e8:11:be: cd:70:8b:99:3f:ff:6a:f9:c6:ec:40:b9:33:5f:79:58:c3:f5: 57:4c:27:dd:b9:07:bb:45:4b:9f:46:34:6a:ba:4f:b5:f8:ed: bb:47:1b:71:19:18:a3:0d:48:ef:e8:bf:eb:c2:95:6c:33:65: 49:1d:9a:1c:ef:7f:13:2d:a4:6a:c5:e8:c4:b6:9e:0c:ec:84: e0:83:14:aa:34:44:d3:87:31:19:ee:0b:e5:04:12:e1:ee:d7: 55:26:60:9a:12:92:65:27:46:25:61:92:96:03:ad:31:06:47: 0e:5c:f9:40:9f:9e:0e:a1:13:2f:7a:c4:ea:5a:8a:da:8c:d6: 1f:ad:47:1d:da:6c:d1:28:16:23:a4:ef:25:3d:2d:54:d7:39: 46:4f:80:e5:dc:5b:01:6d:16:bc:4a:4e:8f:2a:81:cf:f5:ba: 78:e9:34:a0:24:44:98:fb:a4:e4:fb:ff:6d:75:0a:58:db:31: 07:69:3b:56:a7:da:07:5a:55:24:fc:d5:5f:9f:74:a8:4c:42: 26:a9:95:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx2gXx7gVgBOE5lqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk OGM2MGRlODktNDQ5MC00NzVjLThlMDYtOGYwNjU4Y2MwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ziWrjPFyEGavIUYKmV4Zz/2bipa2ORSMLP4 kbnmsHZMS5eyyxq032I85/c31NaBGCsW9lyOyoKNPgO3+Q5RdNCJzssqijcgYBC9 7VYcgLhMR8a0lXZAurr1P+MYrW0ggvyvQO6Cs8dTfTAf7keJrhvgaBU0ruL/+zhm AsAUvTul05a4q2VHK90l82efx4qElQXAj5dA14Dsh+R280mXt2+Tfpk9t9Vz04bK Onq3qdHQHBMkBy8+rlZr0v6JX8Ww27bneuQE6HcsBqPKtwgKGxqQc7LxAkcrbsQR xEewO3RGyU4ozcU9own4THJB0iyswO7VQsfg3U4BxCTxE6LN6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEvbfpBWEHMiKjQGm1U4PjlzkAZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYjhmMDBjODAtMjhkZi0z YmVjLTgxOTctYjFjMWNkOTAxZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzsCfvwB8zy4UyANQ221t8aT3Q1R9xEJtfTXnoUoo6ChvZgDqIh mKX3xiZEh5vwT64TQugRvs1wi5k//2r5xuxAuTNfeVjD9VdMJ925B7tFS59GNGq6 T7X47btHG3EZGKMNSO/ov+vClWwzZUkdmhzvfxMtpGrF6MS2ngzshOCDFKo0RNOH MRnuC+UEEuHu11UmYJoSkmUnRiVhkpYDrTEGRw5c+UCfng6hEy96xOpaitqM1h+t Rx3abNEoFiOk7yU9LVTXOUZPgOXcWwFtFrxKTo8qgc/1unjpNKAkRJj7pOT7/211 CljbMQdpO1an2gdaVST81V+fdKhMQiaplQ0= -----END CERTIFICATE-----Generated at Thu Feb 26 15:02:28 2026 by rpki-client