$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa File: 640be73c-56b6-3495-a77a-a13a5d730be0.roa (raw, json) Hash identifier: u/+Sk+qMAL78uqd/4WEmhVdmKAsMyF8pOIQyx6x51s8= Subject key identifier: FE:70:43:93:09:82:5F:23:40:73:DB:65:9F:C1:83:D7:E0:82:72:39 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584CF95BD4C9E8A7E9CE486AEE80 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa Signing time: Tue 24 Feb 2026 22:55:57 +0000 ROA not before: Tue 24 Feb 2026 22:55:57 +0000 ROA not after: Mon 25 May 2026 21:55:57 +0000 asID: 10111 IP address blocks: 2601:20b8::/29 maxlen: 32 2601:20d0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:5b:d4:c9:e8:a7:e9:ce:48:6a:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 24 22:55:57 2026 GMT Not After : May 25 21:55:57 2026 GMT Subject: CN=15726e21-3bb1-4eea-8782-53a3b1a4e30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5d:0e:cd:57:d9:bb:de:01:34:dd:d9:66:d8: b1:93:ca:6e:ba:e0:fb:4d:b0:5a:11:70:13:ce:e4: d3:2f:5d:32:7b:b1:e8:83:a1:10:f4:eb:44:59:b0: 7c:ee:c6:00:01:5c:51:48:25:81:16:25:42:6a:2a: 16:df:7f:30:0c:1b:e8:80:ef:72:9f:ea:91:f2:41: d5:a4:df:df:81:4d:ac:26:71:bf:ad:4d:ac:4a:94: 1b:94:28:a1:31:90:fc:21:e2:10:37:2f:51:37:3e: 1e:bf:04:46:3e:f8:aa:68:a4:4c:bd:c8:e4:d0:9b: 20:5e:d6:48:5c:da:ae:31:a0:b4:2d:6a:2d:3e:a0: 10:da:a5:71:b6:5b:d8:03:86:7c:19:14:1a:66:fd: 09:57:09:6f:38:76:3d:8d:2b:19:22:3f:da:24:ec: a8:b0:94:90:3d:91:a9:c0:88:62:1e:c0:c8:b6:ae: 1e:2d:1e:72:d8:41:f5:e1:03:e6:1d:87:82:2d:ba: 4d:15:d8:20:96:49:24:b9:85:08:2b:cd:b2:49:fe: 3d:0b:1e:f9:35:4d:f8:c2:b3:40:2d:f6:87:88:a6: 78:d4:61:18:18:0c:04:ac:37:44:72:6d:11:53:6c: cc:26:66:29:05:ee:2e:db:1d:89:45:9d:26:2b:dd: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:43:93:09:82:5F:23:40:73:DB:65:9F:C1:83:D7:E0:82:72:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20b8::/29 2601:20d0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:5e:24:23:26:b9:d6:de:8f:76:79:1c:38:6b:cd:d2:a6:94: e7:e4:0d:34:6e:98:e5:37:f2:b1:fb:6c:5f:a5:17:79:1b:7c: e3:6e:47:4d:c7:88:96:3f:0e:0e:4c:b4:a7:3f:e8:82:9a:a3: fb:52:01:7f:d9:9e:02:f7:4c:03:14:c8:81:21:3e:ae:6f:36: a1:11:fe:17:a3:11:32:a1:8f:07:73:d7:e8:44:33:bc:d1:f6: ac:96:c8:90:12:d3:c0:56:de:d6:9c:22:8b:89:8f:df:27:7a: cf:5a:50:3e:96:b8:37:3d:af:15:57:43:0f:9c:2c:26:0a:db: b0:f1:3a:a5:fd:35:c1:26:b4:31:46:f4:22:d8:16:75:9b:36: 28:03:91:6f:04:d7:e1:44:13:9c:63:07:25:7b:90:af:3e:f8: 13:e6:86:3c:1d:15:fb:26:45:5e:68:42:02:d3:3e:7c:f9:8b: 8a:30:78:92:1e:48:c9:01:74:95:40:90:05:fd:52:2b:f7:c3: a0:bc:90:99:ea:80:8f:16:86:e1:e1:16:b7:dd:e6:85:04:15: 1d:e7:45:31:2a:a2:cc:fa:36:c7:78:c4:7d:44:82:04:eb:9a: c4:24:b3:92:c1:fe:d4:33:1b:19:bb:ca:a6:44:65:b1:3f:ef: 5f:ed:f8:d1 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEz5W9TJ6Kfpzkhq7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDIyNDIyNTU1N1oXDTI2MDUyNTIxNTU1N1owLzEtMCsGA1UEAxMk MTU3MjZlMjEtM2JiMS00ZWVhLTg3ODItNTNhM2IxYTRlMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF0OzVfZu94BNN3ZZtixk8puuuD7TbBaEXAT zuTTL10ye7Hog6EQ9OtEWbB87sYAAVxRSCWBFiVCaioW338wDBvogO9yn+qR8kHV pN/fgU2sJnG/rU2sSpQblCihMZD8IeIQNy9RNz4evwRGPviqaKRMvcjk0JsgXtZI XNquMaC0LWotPqAQ2qVxtlvYA4Z8GRQaZv0JVwlvOHY9jSsZIj/aJOyosJSQPZGp wIhiHsDItq4eLR5y2EH14QPmHYeCLbpNFdgglkkkuYUIK82ySf49Cx75NU34wrNA LfaHiKZ41GEYGAwErDdEcm0RU2zMJmYpBe4u2x2JRZ0mK91uowIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP5wQ5MJgl8jQHPbZZ/Bg9fggnI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjQwYmU3M2MtNTZiNi0z NDk1LWE3N2EtYTEzYTVkNzMwYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDJgEguAMF AyYBINAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAy14kIya51t6PdnkcOGvN0qaU5+QNNG6Y5TfysftsX6UX eRt8425HTceIlj8ODky0pz/ogpqj+1IBf9meAvdMAxTIgSE+rm82oRH+F6MRMqGP B3PX6EQzvNH2rJbIkBLTwFbe1pwii4mP3yd6z1pQPpa4Nz2vFVdDD5wsJgrbsPE6 pf01wSa0MUb0ItgWdZs2KAORbwTX4UQTnGMHJXuQrz74E+aGPB0V+yZFXmhCAtM+ fPmLijB4kh5IyQF0lUCQBf1SK/fDoLyQmeqAjxaG4eEWt93mhQQVHedFMSqizPo2 x3jEfUSCBOuaxCSzksH+1DMbGbvKpkRlsT/vX+340Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:54:05 2026 by rpki-client