$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa File: c76cf674-7ae1-309b-b202-b2e206711325.roa (raw, json) Hash identifier: fL1ZYzYUzSa0Mtp0YCLw07bHkGgvfJXIUhFLxjE4JdU= Subject key identifier: A2:C8:A4:7D:F7:96:3F:F4:25:1A:F8:47:F2:DC:FA:10:42:03:BF:42 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817C69958EF449D307DA40 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 59253 IP address blocks: 2607:f5b5:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7c:69:95:8e:f4:49:d3:07:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=f5e54162-788c-47a7-8993-e96caa21d407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:bd:53:2c:56:09:91:b3:83:fe:a2:df:2d: 0e:41:1d:80:db:73:3b:5b:54:6a:4a:a1:fe:ad:b8: a2:68:38:99:95:41:98:d4:b3:96:c6:4f:ab:30:a0: a9:43:7a:07:d6:14:55:c0:fb:06:e0:20:96:6e:09: c2:2f:bc:28:79:5e:97:07:30:ee:80:88:ee:aa:bd: d7:c9:4c:07:ff:b9:15:6a:f5:3a:8c:31:9e:78:ff: e7:cc:95:fc:b2:e0:5f:a3:a8:ed:de:07:7f:ed:86: db:d6:fc:97:9c:55:9b:28:4e:88:c0:f0:f0:cc:b0: e0:d6:b0:da:b1:ee:1d:a5:58:c7:46:26:7f:0a:83: 5d:70:fe:a7:34:5c:7d:db:b2:be:98:7b:ca:26:02: 95:24:0e:18:c4:c3:59:8a:4e:54:6c:e9:7f:84:bc: 7e:e3:d3:b3:37:34:d6:49:2d:73:f4:56:b6:74:d5: 8e:5a:86:4b:ec:cb:ac:5e:72:be:9c:68:3b:a5:71: 00:ad:e9:6a:42:28:c5:5f:e4:5c:aa:26:bd:75:2d: ba:ad:1b:69:8a:bb:e5:c4:7d:bb:20:ac:32:2c:56: ac:22:41:ac:23:37:b4:a1:4f:7a:c1:ee:b1:84:78: 88:35:af:11:cf:96:60:65:d8:b6:3b:13:0d:6f:04: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:A4:7D:F7:96:3F:F4:25:1A:F8:47:F2:DC:FA:10:42:03:BF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c76cf674-7ae1-309b-b202-b2e206711325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9b:0b:11:0b:2b:5f:39:d7:e5:1d:ab:9f:f1:c7:93:80:8f: 4e:1b:99:1b:ed:c4:9d:4f:15:d7:b2:dc:62:de:62:2f:b5:a3: 06:a2:6b:51:a0:70:40:34:9b:95:43:39:5e:0b:09:e2:0e:6c: 71:75:f3:ea:de:1d:b0:45:3d:ab:cc:12:99:fd:ce:5c:ac:d1: 25:dd:cf:56:50:43:1d:d4:2d:2e:c6:0e:86:81:98:19:f0:17: 31:a2:6d:d0:36:77:d1:03:16:d0:d6:b3:b2:db:ef:ae:3d:cf: c5:1c:b8:a1:5e:5e:e5:97:96:4e:f1:7b:70:5a:cc:31:b0:df: 61:51:e9:6a:fc:64:ab:f7:9e:3f:f9:03:ae:90:b3:09:db:d0: 0c:30:46:d3:ee:6d:ea:23:d8:03:32:ab:78:bb:0a:ec:20:2f: 12:e9:c3:43:92:b7:89:28:93:f9:42:f5:51:d4:ac:d4:d3:73: d4:db:4e:81:9f:15:70:00:d3:98:48:45:cf:41:71:02:9e:96: f7:52:52:80:51:4f:a2:18:21:0d:59:1c:14:a5:7c:23:95:ee: 36:f9:70:da:ea:13:1b:08:da:72:81:5a:44:50:25:cd:3f:3d: fe:c8:52:ac:67:3c:35:6e:2e:a1:88:83:48:d5:38:38:84:22: dd:cb:b5:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx2gXxplY70SdMH2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZjVlNTQxNjItNzg4Yy00N2E3LTg5OTMtZTk2Y2FhMjFkNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr69UyxWCZGzg/6i3y0OQR2A23M7W1RqSqH+ rbiiaDiZlUGY1LOWxk+rMKCpQ3oH1hRVwPsG4CCWbgnCL7woeV6XBzDugIjuqr3X yUwH/7kVavU6jDGeeP/nzJX8suBfo6jt3gd/7Ybb1vyXnFWbKE6IwPDwzLDg1rDa se4dpVjHRiZ/CoNdcP6nNFx927K+mHvKJgKVJA4YxMNZik5UbOl/hLx+49OzNzTW SS1z9Fa2dNWOWoZL7MusXnK+nGg7pXEArelqQijFX+Rcqia9dS26rRtpirvlxH27 IKwyLFasIkGsIze0oU96we6xhHiINa8Rz5ZgZdi2OxMNbwSzHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKLIpH33lj/0JRr4R/Lc+hBCA79CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYzc2Y2Y2NzQtN2FlMS0z MDliLWIyMDItYjJlMjA2NzExMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmbCxELK1851+Udq5/xx5OAj04bmRvtxJ1PFdey3GLeYi+1owai a1GgcEA0m5VDOV4LCeIObHF18+reHbBFPavMEpn9zlys0SXdz1ZQQx3ULS7GDoaB mBnwFzGibdA2d9EDFtDWs7Lb7649z8UcuKFeXuWXlk7xe3BazDGw32FR6Wr8ZKv3 nj/5A66Qswnb0AwwRtPubeoj2AMyq3i7CuwgLxLpw0OSt4kok/lC9VHUrNTTc9Tb ToGfFXAA05hIRc9BcQKelvdSUoBRT6IYIQ1ZHBSlfCOV7jb5cNrqExsI2nKBWkRQ Jc0/Pf7IUqxnPDVuLqGIg0jVODiEIt3LtVA= -----END CERTIFICATE-----Generated at Thu Feb 26 15:02:27 2026 by rpki-client