$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa File: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (raw, json) Hash identifier: ZEG5oOQU2mDYp/eAfvx/oRuKKWxtV4h1LCblDL0dUU0= Subject key identifier: 06:F8:20:B6:37:DF:03:C5:2D:B0:91:E4:44:70:F6:54:9B:24:97:E6 Certificate issuer: /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Certificate serial: 010D0C9F4328584C645BFBF29EE0D28B9D1EBA00 Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 395287 IP address blocks: 2620:128:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5b:fb:f2:9e:e0:d2:8b:9d:1e:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=97d28f98-9ee3-460c-8c28-e16596c04c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:84:fa:e2:97:12:cb:cb:c1:2b:f4:b5:64: fe:b0:ef:35:64:91:15:fe:a8:2d:c2:b5:a7:9c:bd: 63:62:f9:6e:ae:c3:10:3f:20:f3:c1:43:7c:54:ed: 59:22:52:f6:2e:d1:fd:33:65:22:0b:cb:ed:7c:da: d4:cb:cc:c1:0b:68:ac:6d:42:84:fe:a2:eb:f2:c6: b9:57:c0:c8:c5:1c:b0:be:fb:a6:fa:6e:7b:1e:aa: 33:67:18:1a:0f:24:3a:6c:bb:70:27:8a:3a:9f:27: f0:ae:d8:81:5f:d9:53:54:bb:53:08:37:e1:69:c8: 48:47:d9:88:7b:de:fe:16:e1:7f:f7:11:6b:04:f0: ee:9c:15:08:16:a1:12:6a:ad:f8:20:5b:b5:50:4e: 29:df:2f:2d:ee:07:85:c1:26:6d:4e:da:0f:f4:d6: e0:9c:62:98:81:19:94:81:d5:be:b4:a8:83:f2:a0: bf:d0:98:61:16:b8:63:70:af:b7:91:82:d2:2b:22: d4:de:de:e5:f4:51:d4:0c:2b:4c:90:11:21:0d:1e: 76:74:86:3b:20:4d:17:6d:4c:d7:3e:cb:aa:38:a5: 88:98:1c:16:18:eb:6e:7c:d9:16:d4:da:f3:97:5a: fa:c0:86:88:90:c1:e3:0a:56:5c:a7:bc:b4:6b:6c: c0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F8:20:B6:37:DF:03:C5:2D:B0:91:E4:44:70:F6:54:9B:24:97:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/21945cb7-acae-3edc-9a34-60c668bc2e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl X509v3 Authority Key Identifier: keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer sbgp-ipAddrBlock: critical IPv6: 2620:128:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:48:c8:d3:a5:3c:11:a5:34:e2:92:79:ff:6d:c5:c6:d8:8b: 51:e2:4a:fc:88:79:d3:b9:39:23:2b:30:d2:6a:74:5a:11:3c: 4e:97:b2:75:6f:4f:f1:ad:91:7c:e2:02:69:6d:24:53:15:8b: ea:d4:d3:0c:d2:ec:79:e5:24:33:5e:d6:3c:14:0d:99:83:8e: 0f:b8:b0:87:ae:d8:70:6f:70:85:81:39:cc:42:be:68:0c:8b: c2:29:94:01:27:dc:4d:1c:36:87:94:44:0c:83:9b:c1:37:f9: 16:15:4f:63:bf:83:28:8a:ce:04:fb:90:bc:6f:d5:b7:86:f7: 58:d9:76:6f:c3:de:9d:79:6c:09:15:e1:2f:60:ca:96:ae:38: 41:bd:06:b1:5f:99:63:f8:a7:13:6e:fe:c1:9d:96:a3:f8:9b: 2e:73:4d:e3:24:ee:71:b0:4a:3c:25:e4:1f:3f:78:12:c6:d6: 7a:e8:be:88:93:9f:39:ca:8f:c8:fd:95:77:a1:36:62:dc:0a: b7:95:4c:3b:d5:ed:5d:20:07:d6:33:9e:37:0f:80:71:a0:e9: 41:5c:87:64:13:8e:56:98:c0:c5:c8:72:4b:2d:73:9d:ff:26: ff:1a:6b:6c:39:62:77:12:3b:ab:1d:27:85:5d:d7:34:61:8b: dc:55:19:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExkW/vynuDSi50eugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzZGExY2EtYTMwMi00MzZhLWJkNWYtMGE1Yjc1YmFl YWRkMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk OTdkMjhmOTgtOWVlMy00NjBjLThjMjgtZTE2NTk2YzA0YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5mE+uKXEsvLwSv0tWT+sO81ZJEV/qgtwrWn nL1jYvlursMQPyDzwUN8VO1ZIlL2LtH9M2UiC8vtfNrUy8zBC2isbUKE/qLr8sa5 V8DIxRywvvum+m57HqozZxgaDyQ6bLtwJ4o6nyfwrtiBX9lTVLtTCDfhachIR9mI e97+FuF/9xFrBPDunBUIFqESaq34IFu1UE4p3y8t7geFwSZtTtoP9NbgnGKYgRmU gdW+tKiD8qC/0JhhFrhjcK+3kYLSKyLU3t7l9FHUDCtMkBEhDR52dIY7IE0XbUzX PsuqOKWImBwWGOtufNkW1Nrzl1r6wIaIkMHjClZcp7y0a2zARwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAb4ILY33wPFLbCR5ERw9lSbJJfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNk YTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTViNzViYWVhZGQvMjE5NDVjYjctYWNhZS0z ZWRjLTlhMzQtNjBjNjY4YmMyZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWIzZGExY2EtYTMwMi00MzZhLWJk NWYtMGE1Yjc1YmFlYWRkL2FiM2RhMWNhLWEzMDItNDM2YS1iZDVmLTBhNWI3NWJh ZWFkZC5jcmwwHwYDVR0jBBgwFoAUMV8Eih+UqKCCJUdeQgChhx+oiTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYjNkYTFjYS1hMzAyLTQzNmEtYmQ1Zi0wYTVi NzViYWVhZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABKCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMkjI06U8EaU04pJ5/23FxtiLUeJK/Ih507k5Iysw0mp0WhE8Tpey dW9P8a2RfOICaW0kUxWL6tTTDNLseeUkM17WPBQNmYOOD7iwh67YcG9whYE5zEK+ aAyLwimUASfcTRw2h5REDIObwTf5FhVPY7+DKIrOBPuQvG/Vt4b3WNl2b8PenXls CRXhL2DKlq44Qb0GsV+ZY/inE27+wZ2Wo/ibLnNN4yTucbBKPCXkHz94EsbWeui+ iJOfOcqPyP2Vd6E2YtwKt5VMO9XtXSAH1jOeNw+AcaDpQVyHZBOOVpjAxchySy1z nf8m/xprbDlidxI7qx0nhV3XNGGL3FUZTA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:04 2026 by rpki-client