$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa File: 69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa (raw, json) Hash identifier: htMWTIZ6hjsjMIMgq05of3U4BBHV5adTK7yq9GG3tK4= Subject key identifier: A4:23:70:C2:0E:E6:2F:65:7E:3A:8F:24:F4:9F:3A:73:B7:1C:88:6B Certificate issuer: /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Certificate serial: 010D0C9F4328584C8E3C30FDE8738E3D80C19D00 Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 16509 IP address blocks: 2620:121:5070::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:30:fd:e8:73:8e:3d:80:c1:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=512d4006-dbd1-4e34-9b13-dee40613c323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:f9:eb:ab:c9:41:98:f8:01:04:d0:5b:f4: 5c:7a:92:c3:ea:3c:59:0f:35:65:8c:b5:94:14:1d: 72:be:5c:83:96:74:9e:67:b0:c4:69:89:89:15:fa: 7b:90:fa:c0:11:59:42:01:2b:b1:fb:ad:9f:f9:da: 85:6c:53:49:e7:01:c3:ab:a4:81:f7:da:80:eb:1c: 89:c3:39:ba:2e:cd:b1:8e:ca:ee:fd:8a:16:19:7f: d5:80:56:42:05:48:2c:ba:09:96:68:e9:e3:59:f5: 92:4f:98:c5:11:c2:78:cc:b5:22:40:95:4b:8c:dd: bb:7d:dd:4a:65:13:d1:1a:cb:79:cb:7f:82:96:31: 80:cd:d2:1f:64:c4:91:f2:b4:0d:62:7b:9d:be:63: 16:4e:05:78:db:76:a5:cc:be:a9:43:6c:69:28:dc: 12:86:84:e7:d4:af:59:f6:3c:7c:19:18:dd:ac:23: 02:75:b0:d1:47:b5:d9:47:42:0a:39:5d:8f:01:5d: a9:ae:8e:65:5a:b4:37:5a:ce:fe:ee:f9:8e:82:d6: 5c:71:b3:a8:8b:77:ea:dc:c9:58:75:0a:cd:00:ab: 06:9f:6f:01:ae:3e:d2:46:1b:51:44:05:a7:f1:cb: a6:84:46:61:6f:f4:a8:ed:53:74:6e:66:56:76:1b: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:23:70:C2:0E:E6:2F:65:7E:3A:8F:24:F4:9F:3A:73:B7:1C:88:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/69bed0c7-0596-3a07-b7b9-ce72b1a95cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl X509v3 Authority Key Identifier: keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer sbgp-ipAddrBlock: critical IPv6: 2620:121:5070::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:54:c8:33:95:5f:4f:fb:75:ea:ed:e2:ba:fd:2b:e9:52:79: 14:21:2f:f7:66:6e:80:c3:19:11:a0:cd:43:11:96:a9:d6:fd: ce:76:a9:4b:ba:77:85:66:e3:72:fb:e0:fc:6f:d1:19:5b:d0: d3:02:75:40:2e:b6:b0:81:c5:19:5a:9e:aa:16:4d:95:d8:95: 52:07:f6:1b:bc:b9:5e:0f:d7:5b:59:89:ec:c4:af:bc:84:30: b2:fb:7a:e7:df:27:a5:70:d4:70:5c:6d:75:71:96:86:40:8d: 93:ab:ae:16:09:f9:84:af:33:ba:be:57:3c:ba:e1:15:71:cf: ad:36:45:f4:02:07:4d:04:c2:dc:ad:a2:57:bc:cd:f6:06:d2: 6b:51:6e:5d:40:e7:b7:d6:8f:cf:0d:d1:98:4e:40:e4:d5:e6: 95:80:8d:48:58:5d:aa:a2:37:4d:74:24:98:2f:df:9d:1b:0f: 46:10:db:41:f5:60:c3:2b:17:db:cb:b9:d2:a3:77:ba:73:e0: d7:ca:18:13:96:9e:4d:80:b1:fd:e7:3b:1e:4a:ac:fc:78:2d: ab:ae:dc:c1:2b:1f:61:5d:9a:bc:e8:5e:15:aa:2a:82:da:dc: 05:9e:71:81:86:3f:5f:7c:c7:69:4f:e2:cb:23:08:da:82:38: 0a:12:c0:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyOPDD96HOOPYDBnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4 MDhjMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk NTEyZDQwMDYtZGJkMS00ZTM0LTliMTMtZGVlNDA2MTNjMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroD566vJQZj4AQTQW/RcepLD6jxZDzVljLWU FB1yvlyDlnSeZ7DEaYmJFfp7kPrAEVlCASux+62f+dqFbFNJ5wHDq6SB99qA6xyJ wzm6Ls2xjsru/YoWGX/VgFZCBUgsugmWaOnjWfWST5jFEcJ4zLUiQJVLjN27fd1K ZRPRGst5y3+CljGAzdIfZMSR8rQNYnudvmMWTgV423alzL6pQ2xpKNwShoTn1K9Z 9jx8GRjdrCMCdbDRR7XZR0IKOV2PAV2pro5lWrQ3Ws7+7vmOgtZccbOoi3fq3MlY dQrNAKsGn28Brj7SRhtRRAWn8cumhEZhb/So7VN0bmZWdhtMGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQjcMIO5i9lfjqPJPSfOnO3HIhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJm ZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvNjliZWQwYzctMDU5Ni0z YTA3LWI3YjktY2U3MmIxYTk1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDEyZmY5YzctY2VkOC00Y2MyLWIz ZDUtYWRmMTg1OWE4MDhjL2QxMmZmOWM3LWNlZDgtNGNjMi1iM2Q1LWFkZjE4NTlh ODA4Yy5jcmwwHwYDVR0jBBgwFoAUWs2/uXCApKrzjrhYKRFBB5zu/dcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYx ODU5YTgwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABIVBw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALNUyDOVX0/7dert4rr9K+lSeRQhL/dmboDDGRGgzUMRlqnW/c52 qUu6d4Vm43L74Pxv0Rlb0NMCdUAutrCBxRlanqoWTZXYlVIH9hu8uV4P11tZiezE r7yEMLL7euffJ6Vw1HBcbXVxloZAjZOrrhYJ+YSvM7q+Vzy64RVxz602RfQCB00E wtytole8zfYG0mtRbl1A57fWj88N0ZhOQOTV5pWAjUhYXaqiN010JJgv350bD0YQ 20H1YMMrF9vLudKjd7pz4NfKGBOWnk2Asf3nOx5KrPx4Lauu3MErH2FdmrzoXhWq KoLa3AWecYGGP198x2lP4ssjCNqCOAoSwHQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:19 2026 by rpki-client