$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa File: 0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa (raw, json) Hash identifier: nbz80+XsUfGxLBA59fbUaYfemk9oBG1WWCig8Fu/ERA= Subject key identifier: 60:82:6D:A8:14:CF:59:A0:F9:09:25:86:9A:71:EF:B1:57:B0:0F:68 Certificate issuer: /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b Certificate serial: 010D0C9F4328584CAE5EC543B534F794DDD4CD00 Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 2607:8d40:f20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c5:43:b5:34:f7:94:dd:d4:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=742120f7-1949-4390-80ee-62452070ebfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:39:ae:d5:30:a0:45:55:15:2e:c8:76:d0: 37:c0:c9:fc:01:31:c8:b0:a1:24:50:fd:08:c7:29: 51:9e:4d:b8:48:75:6f:7a:35:98:b5:0f:02:85:10: 43:58:6e:a2:09:0d:4c:4c:06:72:aa:b4:4d:80:04: a1:78:ce:d2:46:37:5a:4a:a9:ca:f4:e3:d8:d2:66: 8c:4c:8d:14:d8:18:fb:90:49:03:47:39:de:23:38: 9d:79:b2:ab:cc:78:45:12:97:45:8c:31:3d:9b:0a: 49:16:c6:82:de:56:b0:61:92:d3:27:46:bd:a4:25: 8a:bd:99:66:e6:50:70:ae:eb:61:7b:5d:67:04:3f: f9:6e:ff:a4:3c:2d:a1:47:2f:02:93:e6:d9:8f:82: 8f:a3:dd:93:15:b3:a2:bf:0b:c5:82:1c:52:bf:c2: 86:90:f9:e4:48:91:3e:9e:af:33:4f:43:ba:71:2a: cf:12:c6:ed:4a:c2:c5:cd:dc:92:ab:00:d1:22:d5: 0d:e3:3e:23:6c:db:43:b2:fe:cc:e8:9a:0f:7e:0c: c3:d6:02:fb:58:92:4c:77:c8:08:81:7f:67:2e:84: ab:c5:f5:a6:9e:a7:ee:1d:18:3f:00:bf:c8:fc:a4: ce:c4:35:53:77:d5:9a:f6:b5:ea:38:6b:10:92:dd: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:6D:A8:14:CF:59:A0:F9:09:25:86:9A:71:EF:B1:57:B0:0F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/0ca7a917-86c2-3fe1-82fa-424449cbdd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl X509v3 Authority Key Identifier: keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer sbgp-ipAddrBlock: critical IPv6: 2607:8d40:f20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:29:77:ec:eb:91:f2:f6:dc:a5:bb:58:56:ca:26:16:50:d9: bf:06:ba:47:08:9a:cc:5f:46:b2:37:0e:b2:c8:58:be:04:f2: c9:c2:d0:bb:c5:8e:55:2d:fb:da:ce:22:3f:ba:f9:ed:e5:0d: 0c:58:44:50:29:28:d0:c7:2a:c8:0a:7c:ce:3e:46:0e:2e:18: 4e:1e:be:1a:22:93:51:c0:99:c7:8e:7a:f8:af:0b:5f:c5:ee: 3f:00:ee:b0:bd:a2:db:b6:90:a9:27:ae:58:87:c9:31:06:e4: 64:ff:47:4a:81:44:43:f6:e2:8b:9e:32:f3:45:73:15:54:6f: 03:e0:56:d6:ec:2b:3b:8a:95:d0:be:9d:43:b9:25:d1:6e:ef: 0e:e6:0c:82:50:35:ec:55:65:14:ea:e7:9f:86:b2:0c:5b:96: 2d:c9:af:89:ab:4a:5e:c2:c6:34:e2:7e:56:87:4d:f1:69:76: 04:e6:b4:10:e2:2b:df:95:e4:c1:f2:b1:cb:49:18:4f:bf:7e: 69:08:29:97:d7:e5:2e:23:8a:3f:b1:cd:12:27:bd:a9:1a:c3: 76:f8:bb:df:0c:d8:1e:ad:cd:8d:a5:0f:63:3c:11:c5:5a:7a: 4a:89:72:b2:a1:25:cb:3a:52:a7:97:1a:44:0f:49:17:e8:b8: d7:57:f0:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuXsVDtTT3lN3UzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRlMmQ1YWEtNTYwMC00ZTBjLTk1MjUtMjQxODdjMGVh NjZiMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzQyMTIwZjctMTk0OS00MzkwLTgwZWUtNjI0NTIwNzBlYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlE5rtUwoEVVFS7IdtA3wMn8ATHIsKEkUP0I xylRnk24SHVvejWYtQ8ChRBDWG6iCQ1MTAZyqrRNgASheM7SRjdaSqnK9OPY0maM TI0U2Bj7kEkDRzneIzidebKrzHhFEpdFjDE9mwpJFsaC3lawYZLTJ0a9pCWKvZlm 5lBwruthe11nBD/5bv+kPC2hRy8Ck+bZj4KPo92TFbOivwvFghxSv8KGkPnkSJE+ nq8zT0O6cSrPEsbtSsLFzdySqwDRItUN4z4jbNtDsv7M6JoPfgzD1gL7WJJMd8gI gX9nLoSrxfWmnqfuHRg/AL/I/KTOxDVTd9Wa9rXqOGsQkt0YWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCCbagUz1mg+Qklhppx77FXsA9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZGUy ZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4N2MwZWE2NmIvMGNhN2E5MTctODZjMi0z ZmUxLTgyZmEtNDI0NDQ5Y2JkZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWRlMmQ1YWEtNTYwMC00ZTBjLTk1 MjUtMjQxODdjMGVhNjZiL2FkZTJkNWFhLTU2MDAtNGUwYy05NTI1LTI0MTg3YzBl YTY2Yi5jcmwwHwYDVR0jBBgwFoAU+59lZmjkjRtkcXXXPwUAuz7UHZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZGUyZDVhYS01NjAwLTRlMGMtOTUyNS0yNDE4 N2MwZWE2NmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeNQA8g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALkpd+zrkfL23KW7WFbKJhZQ2b8GukcImsxfRrI3DrLIWL4E8snC 0LvFjlUt+9rOIj+6+e3lDQxYRFApKNDHKsgKfM4+Rg4uGE4evhoik1HAmceOeviv C1/F7j8A7rC9otu2kKknrliHyTEG5GT/R0qBREP24oueMvNFcxVUbwPgVtbsKzuK ldC+nUO5JdFu7w7mDIJQNexVZRTq55+Gsgxbli3Jr4mrSl7CxjTiflaHTfFpdgTm tBDiK9+V5MHysctJGE+/fmkIKZfX5S4jij+xzRInvakaw3b4u98M2B6tzY2lD2M8 EcVaekqJcrKhJcs6UqeXGkQPSRfouNdX8Ec= -----END CERTIFICATE-----Generated at Thu Feb 26 17:45:54 2026 by rpki-client