$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa File: daf96070-358c-3dc7-bf23-2e15b668b39e.roa (raw, json) Hash identifier: ZhzDvrcDd4Nln/fayRJW/GZiCDo3xQ723W97kGl+wRI= Subject key identifier: 20:B1:A6:62:59:86:12:FB:B6:9D:F4:76:77:92:0B:6C:88:C5:70:53 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584C76817D193ED95A554D3DB700 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 59253 IP address blocks: 2607:f5b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:7d:19:3e:d9:5a:55:4d:3d:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=ffe7cb3c-7175-4d57-9e75-415041fcc244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:33:7c:30:6f:69:ad:4b:0a:4f:94:6c:aa: 96:fb:bb:a0:ff:84:85:68:95:6d:d0:e1:18:06:08: bd:09:63:50:20:62:11:1f:a3:11:82:64:cc:58:73: 03:b3:70:8f:ac:11:c9:bf:71:be:5d:ef:01:48:a8: d2:08:a9:14:29:c4:df:bb:f3:20:d2:bc:97:30:79: 2e:47:9c:97:0a:ee:01:b8:53:7b:7d:03:5a:27:02: 72:c1:f0:ce:4b:39:4c:cb:46:34:61:09:b8:32:89: 22:3e:be:6c:e9:d7:f0:97:6c:a0:d6:aa:55:32:b9: 02:2c:63:fe:2f:9f:74:03:50:ae:c7:57:01:b6:41: 2c:51:57:c2:87:86:38:c5:e0:d7:97:da:6d:a2:04: 85:5f:af:4d:b4:76:22:2b:bd:07:6a:ec:4a:f8:5c: d0:a1:2c:e2:bb:54:e0:e8:d3:c2:4f:0a:ee:b5:d8: 88:1e:54:84:43:75:74:b8:83:54:53:24:34:0b:07: af:11:15:1c:e1:c9:37:38:c8:7c:76:1d:0f:d3:0b: e6:d2:45:41:37:32:88:8c:d5:eb:fd:21:36:10:6f: d3:c8:28:e2:8d:d8:3d:91:3a:5a:63:5d:e0:6f:71: 29:06:ab:29:1a:31:10:43:65:53:60:7b:27:c8:e1: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:A6:62:59:86:12:FB:B6:9D:F4:76:77:92:0B:6C:88:C5:70:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/daf96070-358c-3dc7-bf23-2e15b668b39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:90:41:2a:6f:9f:ce:83:25:8e:54:8d:96:02:28:8f:ad:7b: 8a:a2:b8:8d:d7:27:20:77:79:91:ab:9f:72:f3:41:82:e7:b6: 7f:82:36:b2:d6:c2:b4:23:75:78:a8:72:12:f4:61:de:10:11: 7f:9d:89:ac:0b:08:7a:71:f2:fe:06:bb:4e:10:ea:49:20:6f: 5d:eb:40:61:8b:b2:5b:cd:93:86:41:26:48:59:46:ff:c1:65: 8a:fd:5c:0f:81:5d:7a:d3:d2:0a:c9:14:59:07:90:ad:67:c1: e4:4e:ca:6d:d8:3b:8c:cc:0d:25:73:8b:09:0d:84:0e:f3:ff: 4c:dc:94:61:e3:67:e1:6e:ad:32:7a:19:81:70:50:de:62:03: 35:86:a9:8f:4b:00:30:98:c7:ec:78:33:30:ef:0e:eb:bd:9a: c8:7e:ae:01:86:52:4a:e7:84:ec:d2:2d:b4:2b:98:f7:ab:98: 55:bc:7e:b3:8a:b8:ad:e3:c9:39:cc:2c:9a:b4:5b:94:88:55: 41:db:46:a1:f2:66:d9:1d:12:43:be:b8:40:4b:4f:cf:3b:ba: 7f:f6:19:71:40:96:40:15:1b:19:1d:79:ee:a1:46:b3:8b:34: d9:7a:0c:04:27:98:ff:41:aa:62:9c:a3:f1:63:48:db:c9:1b: 75:52:09:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx2gX0ZPtlaVU09twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZmZlN2NiM2MtNzE3NS00ZDU3LTllNzUtNDE1MDQxZmNjMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MczfDBvaa1LCk+UbKqW+7ug/4SFaJVt0OEY Bgi9CWNQIGIRH6MRgmTMWHMDs3CPrBHJv3G+Xe8BSKjSCKkUKcTfu/Mg0ryXMHku R5yXCu4BuFN7fQNaJwJywfDOSzlMy0Y0YQm4MokiPr5s6dfwl2yg1qpVMrkCLGP+ L590A1Cux1cBtkEsUVfCh4Y4xeDXl9ptogSFX69NtHYiK70HauxK+FzQoSziu1Tg 6NPCTwrutdiIHlSEQ3V0uINUUyQ0CwevERUc4ck3OMh8dh0P0wvm0kVBNzKIjNXr /SE2EG/TyCjijdg9kTpaY13gb3EpBqspGjEQQ2VTYHsnyOHIyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCxpmJZhhL7tp30dneSC2yIxXBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZGFmOTYwNzAtMzU4Yy0z ZGM3LWJmMjMtMmUxNWI2NjhiMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6QQSpvn86DJY5UjZYCKI+te4qiuI3XJyB3eZGrn3LzQYLntn+C NrLWwrQjdXiochL0Yd4QEX+diawLCHpx8v4Gu04Q6kkgb13rQGGLslvNk4ZBJkhZ Rv/BZYr9XA+BXXrT0grJFFkHkK1nweROym3YO4zMDSVziwkNhA7z/0zclGHjZ+Fu rTJ6GYFwUN5iAzWGqY9LADCYx+x4MzDvDuu9msh+rgGGUkrnhOzSLbQrmPermFW8 frOKuK3jyTnMLJq0W5SIVUHbRqHyZtkdEkO+uEBLT887un/2GXFAlkAVGxkdee6h RrOLNNl6DAQnmP9BqmKco/FjSNvJG3VSCRY= -----END CERTIFICATE-----Generated at Thu Feb 26 15:01:25 2026 by rpki-client