$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa File: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (raw, json) Hash identifier: Nkaqhi6a2ty1RxWNciKzN4T0yTni0094RZhyatdY/v8= Subject key identifier: 10:31:F9:F5:89:E2:93:81:DC:67:43:36:5C:0A:60:95:89:94:13:9D Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584CAA27041E9DE9BD2738ECE680 Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 33307 IP address blocks: 2604:9840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:04:1e:9d:e9:bd:27:38:ec:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=84f753c2-a5c5-4cfa-9c23-dac9e8aed5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a9:a6:bf:e8:b2:f3:86:b1:6c:de:10:74:39: 45:3f:7b:6e:c1:2e:e7:a9:38:54:97:fe:22:04:f6: fe:26:8f:12:e9:23:70:ae:a9:f0:c2:91:55:4b:01: 5e:bc:80:71:ce:ef:d6:df:e2:80:8b:a4:77:da:b1: 5f:de:59:cc:95:a0:f4:84:a4:99:05:6a:71:04:48: 3a:f4:50:2b:a5:33:2a:75:0e:bb:fe:e5:16:f6:08: 9f:cc:75:dd:6d:70:a5:ab:b2:07:0c:b0:37:a7:09: f6:86:53:03:42:e0:4c:81:c8:5d:02:91:f4:d2:83: c9:ad:1b:a3:80:06:23:41:86:50:62:81:4a:cc:73: cf:d9:98:81:9a:ff:84:f8:2e:23:20:56:d2:f1:25: 08:6b:a8:d0:da:d0:59:b9:c0:d6:24:73:c9:da:ed: 69:b9:97:0e:82:e0:72:b3:34:55:c4:c4:25:aa:04: 93:4a:5d:9a:ad:05:7f:ae:74:65:92:18:06:d2:a2: 8d:db:64:ec:b4:3f:7e:75:13:4a:09:0a:cc:bc:7f: 99:1e:f6:13:c5:2a:bc:5d:c1:48:2f:a2:52:91:f4: 31:2d:89:7b:7a:41:59:c2:4e:93:60:59:52:cd:e9: 79:e8:28:ac:75:20:59:52:c4:6d:67:c6:8e:09:1c: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:F9:F5:89:E2:93:81:DC:67:43:36:5C:0A:60:95:89:94:13:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cb:bb:7e:9e:3b:74:59:76:0e:99:b0:af:c2:3c:07:da:09: 2c:8d:fd:6c:c5:e7:32:a3:43:06:42:2d:d6:f4:0b:f3:22:a6: dd:f8:83:b4:a1:0e:51:fe:a9:5a:60:7a:e2:61:35:55:cc:94: 36:38:5d:1d:11:f0:2d:7e:77:ae:9e:66:2d:3e:d2:ca:d6:a8: 26:51:f1:11:96:03:b4:b1:8f:44:da:86:75:c3:7b:7e:46:83: 62:e1:8e:b3:0d:c3:f5:1b:2d:78:73:00:90:6b:c1:07:97:ed: cc:aa:1f:9c:e4:d3:82:15:25:80:91:44:31:17:55:a5:5d:16: 70:3a:50:f7:20:46:5c:6f:be:b7:a3:48:ed:8d:d9:34:af:0d: a7:d8:d6:7e:fe:dd:b2:b6:df:b1:ad:70:72:a2:02:f8:b7:be: 81:e0:45:11:ee:f9:e7:d3:42:a2:54:78:05:da:db:1d:09:e2: 90:b9:5a:ff:fd:5c:7c:e6:a1:09:75:85:9d:82:7b:fb:61:15: 62:ff:7e:91:a9:ca:24:99:63:8e:88:a2:eb:e1:ef:7a:f6:13: 0e:32:b8:18:2c:26:b6:58:11:f1:79:7c:dd:45:5e:24:4b:04: 1e:b8:9a:63:08:04:43:0a:2c:29:47:d1:f7:61:ac:21:96:68: a3:12:3d:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyqJwQenem9Jzjs5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ODRmNzUzYzItYTVjNS00Y2ZhLTljMjMtZGFjOWU4YWVkNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnammv+iy84axbN4QdDlFP3tuwS7nqThUl/4i BPb+Jo8S6SNwrqnwwpFVSwFevIBxzu/W3+KAi6R32rFf3lnMlaD0hKSZBWpxBEg6 9FArpTMqdQ67/uUW9gifzHXdbXClq7IHDLA3pwn2hlMDQuBMgchdApH00oPJrRuj gAYjQYZQYoFKzHPP2ZiBmv+E+C4jIFbS8SUIa6jQ2tBZucDWJHPJ2u1puZcOguBy szRVxMQlqgSTSl2arQV/rnRlkhgG0qKN22TstD9+dRNKCQrMvH+ZHvYTxSq8XcFI L6JSkfQxLYl7ekFZwk6TYFlSzel56CisdSBZUsRtZ8aOCRzMqwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBAx+fWJ4pOB3GdDNlwKYJWJlBOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZjE3MDkwZWQtMTRmMy0z MmQ5LTlkMzQtOWZjNmJlZDA5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSYQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAXy7t+njt0WXYOmbCvwjwH2gksjf1sxecyo0MGQi3W9AvzIqbd+IO0 oQ5R/qlaYHriYTVVzJQ2OF0dEfAtfneunmYtPtLK1qgmUfERlgO0sY9E2oZ1w3t+ RoNi4Y6zDcP1Gy14cwCQa8EHl+3Mqh+c5NOCFSWAkUQxF1WlXRZwOlD3IEZcb763 o0jtjdk0rw2n2NZ+/t2ytt+xrXByogL4t76B4EUR7vnn00KiVHgF2tsdCeKQuVr/ /Vx85qEJdYWdgnv7YRVi/36RqcokmWOOiKLr4e969hMOMrgYLCa2WBHxeXzdRV4k SwQeuJpjCARDCiwpR9H3YawhlmijEj3W -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:14 2026 by rpki-client