$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: U/iGp14ENpYquoLbI3f8UuxEPCAXhl7akNAe/1OfNbc= Subject key identifier: 74:FF:3A:1F:DC:FB:DC:78:9A:DB:34:73:64:BD:AA:13:F7:2C:F3:3C Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584C9C31A05220C084D827DB0A40 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:a0:52:20:c0:84:d8:27:db:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=de502122-db16-4cfd-9c65-54e58f0669b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:72:40:8b:37:66:46:39:af:31:42:93:b8:93: 1a:b8:81:82:28:e0:9a:98:e2:89:a3:19:29:2f:82: 87:db:f6:01:a1:8f:66:c4:66:65:6d:c7:a5:7d:3a: dc:31:13:13:7d:03:73:48:b4:5e:3c:0c:a6:48:d5: ce:fd:98:eb:ba:43:98:ca:67:5d:9f:0e:8e:d7:44: 35:84:2a:1e:96:0f:c2:cf:7c:8c:6b:a9:68:67:4c: e1:20:53:df:47:5f:65:96:f0:07:cd:f2:fe:26:05: 26:b5:9a:0a:27:e6:e6:f4:b8:5e:c2:44:54:54:96: 94:92:f5:d6:c2:4c:0c:ed:e7:79:f7:7c:5f:7e:e0: 01:3b:be:51:f7:51:36:74:a8:9a:01:ab:08:21:cb: 30:87:57:6c:05:70:7b:a0:f4:b8:d8:0b:a6:56:e5: b2:c8:94:72:87:a3:93:59:c1:b1:e2:21:6a:ad:68: 39:ef:fd:7c:00:da:b9:04:ee:db:a6:89:86:92:c3: 56:4e:c1:5e:56:a5:94:8e:3c:cd:43:81:a1:04:9f: 89:d9:6b:7e:e6:90:ea:c9:66:d6:c6:6f:ac:73:6f: 2e:a2:cb:ea:65:ac:96:d7:be:0c:84:f6:38:a7:6f: 04:75:4f:b2:b2:09:60:33:85:f8:8e:c2:ea:5f:97: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FF:3A:1F:DC:FB:DC:78:9A:DB:34:73:64:BD:AA:13:F7:2C:F3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:eb:a6:a8:ec:49:b1:a2:47:60:3d:e9:a6:61:ee:ee:06:07: 90:0a:30:45:29:98:77:c0:ca:56:c9:f1:aa:b2:b0:3a:2f:5e: da:ce:a6:d8:67:2f:38:d7:19:bf:a1:a8:33:4c:72:03:20:67: 19:1f:9b:11:17:70:b8:18:3c:1e:89:e0:8f:a4:8c:f9:ca:96: 2a:d2:c4:24:c6:ed:fb:cc:14:9a:ef:95:c7:20:de:30:c9:11: 00:5a:3e:83:6a:96:1e:7c:eb:73:85:af:d6:55:05:1c:ed:38: 30:60:d7:e4:83:42:45:71:97:1c:c6:0f:27:45:87:32:fd:17: 6e:8f:62:20:08:ac:d5:9d:44:fc:d6:79:cc:1c:97:e7:d7:3e: 60:03:93:71:7e:bf:51:16:39:fd:5c:74:83:20:0f:a4:ed:a0: 51:61:23:34:d0:18:fe:c0:6a:1a:c7:8b:56:d3:e7:d9:78:6a: 82:5d:a5:3c:94:d1:c4:27:dd:aa:6c:a9:6e:2d:d1:a2:4c:90: 63:68:a7:d4:d5:b7:6c:9b:4a:2d:14:17:6f:e5:8b:53:48:b4: fb:81:62:ac:3a:4f:91:8b:86:36:65:e8:04:9a:ab:1e:bc:37: 23:06:80:7b:eb:60:c3:e9:92:4a:9d:97:84:98:77:45:1a:88: 93:d4:67:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEycMaBSIMCE2CfbCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk ZGU1MDIxMjItZGIxNi00Y2ZkLTljNjUtNTRlNThmMDY2OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3JAizdmRjmvMUKTuJMauIGCKOCamOKJoxkp L4KH2/YBoY9mxGZlbcelfTrcMRMTfQNzSLRePAymSNXO/ZjrukOYymddnw6O10Q1 hCoelg/Cz3yMa6loZ0zhIFPfR19llvAHzfL+JgUmtZoKJ+bm9LhewkRUVJaUkvXW wkwM7ed593xffuABO75R91E2dKiaAasIIcswh1dsBXB7oPS42AumVuWyyJRyh6OT WcGx4iFqrWg57/18ANq5BO7bpomGksNWTsFeVqWUjjzNQ4GhBJ+J2Wt+5pDqyWbW xm+sc28uosvqZayW174MhPY4p28EdU+ysglgM4X4jsLqX5fAZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHT/Oh/c+9x4mts0c2S9qhP3LPM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3rpqjsSbGiR2A96aZh7u4GB5AKMEUpmHfAylbJ8aqysDovXtrO pthnLzjXGb+hqDNMcgMgZxkfmxEXcLgYPB6J4I+kjPnKlirSxCTG7fvMFJrvlccg 3jDJEQBaPoNqlh5863OFr9ZVBRztODBg1+SDQkVxlxzGDydFhzL9F26PYiAIrNWd RPzWecwcl+fXPmADk3F+v1EWOf1cdIMgD6TtoFFhIzTQGP7AahrHi1bT59l4aoJd pTyU0cQn3apsqW4t0aJMkGNop9TVt2ybSi0UF2/li1NItPuBYqw6T5GLhjZl6ASa qx68NyMGgHvrYMPpkkqdl4SYd0UaiJPUZ0Q= -----END CERTIFICATE-----Generated at Sun Mar 1 22:59:43 2026 by rpki-client