$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json) Hash identifier: Z5E2XE1bt1XyTTHmH8d22XuQBQ3/SSh/FUfi7hMk7JU= Subject key identifier: EC:6E:63:9E:41:36:E6:55:E2:AC:6E:BA:D9:F4:9A:14:96:30:96:36 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584CB121BCD1093C1B1F5F898600 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 36236 IP address blocks: 2620:49:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:bc:d1:09:3c:1b:1f:5f:89:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=2391b205-3197-47bc-b955-545ad888a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f2:b7:98:7e:ca:7a:e6:1e:31:1d:45:33:ad: 8d:c3:59:3c:6e:75:95:5a:8a:53:e4:3c:df:77:ae: 70:c1:0e:d6:e7:69:b1:42:18:43:1f:81:a0:3d:b2: a4:56:2a:ee:9f:b8:9d:db:26:0e:72:8f:f1:8f:58: 36:e9:c4:4a:76:95:38:57:b1:83:a2:05:a0:9e:f8: 45:07:98:7b:6b:cb:f3:10:ef:dd:88:77:17:2c:4d: 7f:78:88:3f:e9:20:30:bf:d2:cb:39:4c:2b:69:86: 73:a7:6d:50:dd:c9:5e:9d:d3:73:6d:c9:7c:75:9c: a1:6d:54:66:8a:b3:97:9f:af:73:6b:ad:b0:a7:2a: fa:67:40:8d:a4:24:c6:01:bb:88:85:e0:98:57:6f: bb:c2:04:76:36:d5:cf:c2:39:d2:be:70:1c:c9:7a: f6:4f:82:96:6d:42:39:ca:e6:57:bc:58:bd:5e:ca: c4:bf:ce:35:62:09:2c:d3:b0:3a:17:29:95:a1:5b: 3b:f2:c0:30:c9:76:22:9f:63:e4:a4:c7:8b:10:3e: a1:79:da:4e:2c:19:fa:c2:9d:10:43:92:b3:bc:bf: 43:9e:d2:d6:23:48:70:9d:0e:68:55:05:a9:26:c6: 55:63:d0:fd:0c:31:02:e1:b7:d9:d9:9b:ab:92:7d: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:63:9E:41:36:E6:55:E2:AC:6E:BA:D9:F4:9A:14:96:30:96:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:04:5f:69:21:99:41:50:e5:22:c9:72:31:6e:84:4e:98:7c: 05:0a:3a:d7:40:d9:54:ce:7d:43:65:d1:7f:fd:01:2b:35:b9: 46:1d:56:f3:14:cb:5f:54:dc:08:8c:05:04:21:bd:19:e7:68: ed:d2:19:35:e8:5d:52:7b:5f:bd:65:22:cd:7f:1f:38:7e:2d: e6:32:fc:d0:4e:46:eb:66:47:00:c5:9a:aa:ea:28:fc:79:12: dd:65:64:f6:90:92:89:bd:8c:75:49:d2:60:c9:a1:7a:1d:01: a3:03:fe:cf:9b:37:a8:69:49:68:29:58:28:c1:1a:d5:c1:c4: 06:7b:68:b5:10:4d:f1:88:6f:a2:49:4e:0e:73:8b:2a:88:19: 48:b6:84:51:82:07:14:86:be:8d:2c:aa:fe:eb:b0:38:4c:07: 9c:71:73:02:ed:fc:6e:fe:d1:0a:06:f9:5e:46:6a:dc:a6:40: 1b:f1:39:00:e0:1c:5b:9d:76:19:1b:0d:0e:8c:82:19:c2:ec: 68:79:fe:c6:a3:c4:2a:af:ba:5e:47:af:02:e0:37:85:50:1c: cf:4c:d0:6c:51:b1:94:59:3c:1a:23:f1:09:2b:58:08:31:b3: 14:26:38:35:f2:66:e5:16:8a:d3:e4:f2:e0:a4:93:38:46:4c: 43:f0:81:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIbzRCTwbH1+JhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MjM5MWIyMDUtMzE5Ny00N2JjLWI5NTUtNTQ1YWQ4ODhhNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPK3mH7KeuYeMR1FM62Nw1k8bnWVWopT5Dzf d65wwQ7W52mxQhhDH4GgPbKkVirun7id2yYOco/xj1g26cRKdpU4V7GDogWgnvhF B5h7a8vzEO/diHcXLE1/eIg/6SAwv9LLOUwraYZzp21Q3clendNzbcl8dZyhbVRm irOXn69za62wpyr6Z0CNpCTGAbuIheCYV2+7wgR2NtXPwjnSvnAcyXr2T4KWbUI5 yuZXvFi9XsrEv841Ygks07A6FymVoVs78sAwyXYin2PkpMeLED6hedpOLBn6wp0Q Q5KzvL9DntLWI0hwnQ5oVQWpJsZVY9D9DDEC4bfZ2Zurkn00BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxuY55BNuZV4qxuutn0mhSWMJY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZGY4N2JiNzItZGM1Mi0z NjM5LWEwYWYtZGNiYTM1MDliZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8EX2khmUFQ5SLJcjFuhE6YfAUKOtdA2VTOfUNl0X/9ASs1uUYd VvMUy19U3AiMBQQhvRnnaO3SGTXoXVJ7X71lIs1/Hzh+LeYy/NBORutmRwDFmqrq KPx5Et1lZPaQkom9jHVJ0mDJoXodAaMD/s+bN6hpSWgpWCjBGtXBxAZ7aLUQTfGI b6JJTg5ziyqIGUi2hFGCBxSGvo0sqv7rsDhMB5xxcwLt/G7+0QoG+V5GatymQBvx OQDgHFuddhkbDQ6MghnC7Gh5/sajxCqvul5HrwLgN4VQHM9M0GxRsZRZPBoj8Qkr WAgxsxQmODXyZuUWitPk8uCkkzhGTEPwgfk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:56 2026 by rpki-client