$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa File: baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa (raw, json) Hash identifier: AvRpYcVoYSlBNMhrEdvjnY9r3hKo7DBFuVTWHWJji8s= Subject key identifier: FA:A3:AA:30:94:D2:72:61:8C:6E:77:00:A1:F7:AB:E9:39:62:32:4F Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817C0F9FDDEB22ED860980 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 394380 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7c:0f:9f:dd:eb:22:ed:86:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=0dc64e40-ea9c-4ae1-97d0-14b81f877937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:29:8f:8a:be:e1:55:a8:00:19:43:07:ad: 01:9b:00:9d:f4:2f:ce:ce:3c:8c:48:7c:15:cd:03: 47:90:31:90:cc:c8:d0:bf:da:6b:97:1a:d0:38:db: 3e:49:14:f8:70:b7:ac:9a:0d:5b:1c:35:8b:83:67: 5d:da:15:12:aa:3f:3f:04:13:d5:61:90:2e:86:f0: ab:29:85:c8:79:ed:4e:2e:b2:28:99:a9:3c:d3:10: 04:2a:46:fb:78:f5:ba:2f:fb:d6:5a:9c:95:04:54: 6e:a8:d1:fc:34:91:cc:05:ab:20:81:74:79:da:0a: 5b:86:b4:5b:2f:af:7c:f2:a1:15:13:fb:13:8f:24: c8:35:7f:5f:ad:b7:2a:19:72:25:18:02:d5:1e:ce: 81:c8:06:4e:90:76:33:64:a2:b7:24:12:7f:5e:9c: 6d:b2:60:2a:4c:14:14:2e:93:0e:63:1f:78:f1:d5: 2e:8b:8e:32:65:81:85:d6:53:bb:f0:ba:21:81:a4: 48:4a:0f:71:57:bb:cc:32:02:aa:e4:94:01:be:19: 23:d6:00:fb:bc:77:42:14:87:da:86:37:aa:fa:1a: 14:e3:e8:af:f3:c9:3c:77:c7:22:8e:2e:c5:26:c2: b5:03:77:9d:23:b2:f3:5c:d2:a7:f0:db:5a:d8:2b: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A3:AA:30:94:D2:72:61:8C:6E:77:00:A1:F7:AB:E9:39:62:32:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/baf67ca6-4645-3e8c-b1f1-8b1cc93cfc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:79:60:88:13:ac:06:05:71:52:dc:00:f3:c3:0b:8a:45:6b: 35:ea:5c:46:4c:8d:c0:4a:71:5d:26:f6:da:c0:7e:d6:75:6c: 6b:ec:8c:43:e1:10:da:a5:9f:12:a6:ee:85:02:df:56:05:0b: f8:7d:5c:4f:ae:3f:73:c4:e4:bb:d1:2f:18:87:bd:79:44:33: 52:0d:2e:a7:21:1d:77:d6:9a:63:c8:f3:5d:eb:63:18:7d:ac: 39:69:88:32:dd:69:54:23:50:f3:37:56:ab:fb:bf:f6:c0:a3: 2b:fe:dc:70:7a:a3:c0:99:61:46:7d:d3:22:3b:98:0a:9e:1f: 81:9b:79:e7:0b:65:37:32:61:aa:d7:e8:7e:34:6f:0a:4c:c8: ff:b6:02:f2:e1:d3:1e:7b:26:b7:e4:99:3f:33:18:cb:a4:53: 66:6c:ac:9b:ad:1d:e6:3c:24:be:cc:1b:21:d6:c4:0a:49:8a: 8a:e7:e6:40:a6:71:02:cc:4e:ac:83:2f:7b:f6:3b:6f:c1:b4: 76:5c:c8:b2:f1:7b:83:e9:da:cf:5c:74:c0:36:fc:3d:8e:93: 1c:30:72:ac:f1:37:d6:80:6d:9f:20:b1:f3:80:04:1a:05:47: 57:26:0e:54:4a:18:2a:b4:8e:95:00:44:7e:2a:12:82:40:97: db:1e:06:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx2gXwPn93rIu2GCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk MGRjNjRlNDAtZWE5Yy00YWUxLTk3ZDAtMTRiODFmODc3OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Qpj4q+4VWoABlDB60BmwCd9C/OzjyMSHwV zQNHkDGQzMjQv9prlxrQONs+SRT4cLesmg1bHDWLg2dd2hUSqj8/BBPVYZAuhvCr KYXIee1OLrIomak80xAEKkb7ePW6L/vWWpyVBFRuqNH8NJHMBasggXR52gpbhrRb L6988qEVE/sTjyTINX9frbcqGXIlGALVHs6ByAZOkHYzZKK3JBJ/XpxtsmAqTBQU LpMOYx948dUui44yZYGF1lO78LohgaRISg9xV7vMMgKq5JQBvhkj1gD7vHdCFIfa hjeq+hoU4+iv88k8d8ciji7FJsK1A3edI7LzXNKn8Nta2Cun0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqjqjCU0nJhjG53AKH3q+k5YjJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmFmNjdjYTYtNDY0NS0z ZThjLWIxZjEtOGIxY2M5M2NmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACl5YIgTrAYFcVLcAPPDC4pFazXqXEZMjcBKcV0m9trAftZ1bGvs jEPhENqlnxKm7oUC31YFC/h9XE+uP3PE5LvRLxiHvXlEM1INLqchHXfWmmPI813r Yxh9rDlpiDLdaVQjUPM3Vqv7v/bAoyv+3HB6o8CZYUZ90yI7mAqeH4GbeecLZTcy YarX6H40bwpMyP+2AvLh0x57JrfkmT8zGMukU2ZsrJutHeY8JL7MGyHWxApJiorn 5kCmcQLMTqyDL3v2O2/BtHZcyLLxe4Pp2s9cdMA2/D2OkxwwcqzxN9aAbZ8gsfOA BBoFR1cmDlRKGCq0jpUARH4qEoJAl9seBrQ= -----END CERTIFICATE-----Generated at Thu Feb 26 15:00:03 2026 by rpki-client