$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa File: 1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa (raw, json) Hash identifier: aAfMO2xVBqccaTftlzak2QUYoQAgIoQ26yK2MNWim7U= Subject key identifier: 7F:94:3A:87:3D:0D:CA:A6:33:69:10:F6:B1:72:6F:6A:1B:F5:D1:C1 Certificate issuer: /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7 Certificate serial: 010D0C9F4328584C794C48022476E028395CDFD0 Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 14773 IP address blocks: 2620:1d5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:48:02:24:76:e0:28:39:5c:df:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7 Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=a677af92-813f-4702-b5c6-8bd43c9d2d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:d9:e3:9b:11:d8:05:da:d2:5a:5f:88:6e: ce:b6:57:bd:d3:10:ae:64:53:e7:7f:33:61:3b:96: 6d:ff:c9:94:d7:0e:35:9c:ad:90:cb:5a:d8:a4:e7: d6:bf:51:64:18:bb:20:6a:07:99:88:89:4c:d4:4b: 36:47:92:7d:2b:0b:57:3e:71:5b:a9:74:78:a2:92: 6f:2e:6a:86:8e:99:7e:0f:75:97:d1:ff:1e:dd:49: 7e:08:d6:fb:13:a9:ab:bf:53:d0:4c:00:ad:4e:98: eb:d7:13:27:75:25:bd:94:35:7d:18:4d:28:6e:ed: c1:6f:d9:04:25:81:4f:7e:63:ac:92:b0:69:7f:3c: ab:90:02:c5:00:49:d4:84:7b:c4:cd:6f:ac:b6:56: e5:da:85:37:b3:2b:a6:32:99:f8:d6:9a:a1:97:ae: 12:37:ba:6a:1b:dd:d8:da:6f:35:cc:75:b9:f4:06: 20:48:8d:d0:07:11:8b:d8:d2:73:cf:11:1d:23:69: 49:76:2b:2a:eb:d2:06:64:a3:dd:50:fd:9c:44:95: 52:07:ed:13:aa:8b:95:7d:14:21:b2:4c:20:c4:36: d2:e3:80:4f:21:50:7d:9f:bc:c5:48:b8:36:60:9b: 08:46:53:00:45:2a:26:0b:77:19:33:ca:d7:f2:33: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:94:3A:87:3D:0D:CA:A6:33:69:10:F6:B1:72:6F:6A:1B:F5:D1:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/1bbc0781-a709-3c5b-8c8e-1d60c304cab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl X509v3 Authority Key Identifier: keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d5::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0b:83:6f:62:1f:06:fa:66:f4:5e:56:46:57:c2:f2:9c:7f: f2:47:fe:a9:b8:62:76:c4:61:df:f2:36:3e:5b:84:c3:07:8b: 5d:c2:50:1a:75:ba:41:ed:05:19:50:a9:1a:0c:b4:43:87:11: b2:3f:95:92:d0:2a:09:c3:e0:ff:07:17:5b:3a:a9:98:79:20: 75:fc:76:db:2a:7f:ad:2b:f9:40:2f:44:19:b6:63:2d:d2:6e: 86:b7:3e:2b:dd:dc:ad:d2:65:67:15:9e:f1:16:59:1d:6f:89: 26:68:95:69:f5:d0:f3:3b:df:b9:90:94:6a:a3:32:4c:6b:78: b0:7d:06:1f:c1:e9:ac:e9:18:24:d3:15:92:74:c7:7e:c9:90: 53:99:28:94:44:01:f2:3b:dc:a8:6a:55:da:d7:58:c9:63:ba: 6d:26:d2:f1:80:9f:7e:fd:a5:07:7f:bf:e5:f5:ea:ad:41:96: 40:bf:a1:ce:7e:c8:d7:25:5e:9b:bf:42:8d:b6:6d:9b:85:3a: 43:84:5b:db:31:61:14:ea:96:58:c4:e1:e8:83:a0:93:68:cd: 26:48:bf:ca:b4:1f:2b:d7:f1:ea:83:0e:36:aa:1f:f2:59:cb: 44:16:da:68:41:a6:24:52:03:ab:7a:41:5b:b1:0b:59:ec:ed: b5:16:a7:b1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEx5TEgCJHbgKDlc39AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc2N2VhMTYtNzJiNC00MDJhLTliMmYtNzU4M2ZlMzkw YmI3MB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk YTY3N2FmOTItODEzZi00NzAyLWI1YzYtOGJkNDNjOWQyZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9nZ45sR2AXa0lpfiG7Otle90xCuZFPnfzNh O5Zt/8mU1w41nK2Qy1rYpOfWv1FkGLsgageZiIlM1Es2R5J9KwtXPnFbqXR4opJv LmqGjpl+D3WX0f8e3Ul+CNb7E6mrv1PQTACtTpjr1xMndSW9lDV9GE0obu3Bb9kE JYFPfmOskrBpfzyrkALFAEnUhHvEzW+stlbl2oU3syumMpn41pqhl64SN7pqG93Y 2m81zHW59AYgSI3QBxGL2NJzzxEdI2lJdisq69IGZKPdUP2cRJVSB+0TqouVfRQh skwgxDbS44BPIVB9n7zFSLg2YJsIRlMARSomC3cZM8rX8jOvlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH+UOoc9DcqmM2kQ9rFyb2ob9dHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3 ZWExNi03MmI0LTQwMmEtOWIyZi03NTgzZmUzOTBiYjcvMWJiYzA3ODEtYTcwOS0z YzViLThjOGUtMWQ2MGMzMDRjYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc2N2VhMTYtNzJiNC00MDJhLTli MmYtNzU4M2ZlMzkwYmI3L2Y3NjdlYTE2LTcyYjQtNDAyYS05YjJmLTc1ODNmZTM5 MGJiNy5jcmwwHwYDVR0jBBgwFoAUesYuc/uCJzFiX8COdvsgVaYFuSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzY3ZWExNi03MmI0LTQwMmEtOWIyZi03NTgz ZmUzOTBiYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiAB1TBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCiC4NvYh8G+mb0XlZGV8LynH/yR/6puGJ2xGHf8jY+W4TDB4tdwlAa dbpB7QUZUKkaDLRDhxGyP5WS0CoJw+D/BxdbOqmYeSB1/HbbKn+tK/lAL0QZtmMt 0m6Gtz4r3dyt0mVnFZ7xFlkdb4kmaJVp9dDzO9+5kJRqozJMa3iwfQYfwems6Rgk 0xWSdMd+yZBTmSiURAHyO9yoalXa11jJY7ptJtLxgJ9+/aUHf7/l9eqtQZZAv6HO fsjXJV6bv0KNtm2bhTpDhFvbMWEU6pZYxOHog6CTaM0mSL/KtB8r1/Hqgw42qh/y WctEFtpoQaYkUgOrekFbsQtZ7O21Fqex -----END CERTIFICATE-----Generated at Mon Mar 2 09:34:07 2026 by rpki-client