$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa File: 706a369f-74a7-310b-b9f6-4d2f898435d9.roa (raw, json) Hash identifier: EOlcOfnJvpJ3HxvMSxt2Fg2oW+cDQWw0mwq+26V5/hY= Subject key identifier: A7:EA:AD:F3:0F:63:A8:8F:DD:0D:CA:C8:AC:E6:FB:13:0C:A4:5A:5C Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584C9ACC4BDE7D5145B3B19D6C80 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 40160 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:4b:de:7d:51:45:b3:b1:9d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=591e762e-7c08-4402-8105-6941db076675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4e:59:fb:f0:5c:8a:d5:70:bb:c3:26:d9:3a: 0c:cc:39:38:64:a7:b5:a0:77:e9:4e:7c:4f:3e:5e: cf:b2:26:ed:31:72:79:f0:48:cf:de:bb:1f:ed:b8: 90:ed:ad:23:ad:96:63:67:12:07:e0:fc:0d:f0:29: 60:af:3a:57:8b:6e:59:f7:2f:38:4a:d8:4a:69:2b: 31:6b:54:65:35:83:90:04:64:94:79:9d:d2:8c:46: 9d:2e:8d:0e:13:57:8d:d7:08:c9:dd:8a:63:a6:fb: ae:62:b9:00:31:43:6b:1c:a7:0a:06:7d:e1:38:08: 2d:6c:3d:95:06:2e:d6:08:c3:44:8c:98:78:fe:8b: e8:1b:5c:88:52:33:a8:a2:c8:42:28:60:68:e4:c0: 6f:38:c1:2b:ec:ee:c6:7f:de:b8:fc:7e:c6:2e:bc: 72:bd:92:33:19:e2:b2:3b:24:bf:5d:87:00:09:1b: bb:3d:2c:d2:ec:86:62:c5:93:00:7f:a9:17:14:a6: 8c:f8:45:c6:a1:78:be:10:94:f0:ee:fa:ff:bf:b4: a4:d6:b6:b0:1b:15:a6:5b:a7:56:1f:98:11:0e:f0: b4:28:46:c5:96:d5:e9:32:a2:26:2e:6b:a9:17:0a: 5d:3c:77:45:2b:78:96:05:6e:b4:7b:c8:2e:f0:f8: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:AD:F3:0F:63:A8:8F:DD:0D:CA:C8:AC:E6:FB:13:0C:A4:5A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:65:57:ce:20:4c:5e:3d:9d:dc:40:0d:2d:25:9a:ad:dc:63: c0:6a:9e:82:dc:92:61:dc:8c:0f:75:4e:a1:ea:fe:ce:dd:33: c7:53:a9:d0:16:53:f1:87:2e:51:27:51:35:b9:7f:a3:63:39: 75:d3:59:14:18:40:7d:b1:c9:85:9c:dc:6f:a8:3d:9a:ff:8c: 28:bf:ef:4c:7a:0c:55:ec:ea:44:7f:7c:3c:3a:12:0a:ca:6d: 7c:d3:76:e5:80:26:13:f4:30:ce:8d:27:85:46:a5:f7:c6:58: a9:60:d0:b5:59:33:b9:18:e0:91:bd:61:ae:2f:61:c7:c9:f3: 29:02:b9:eb:a4:91:c2:ab:1a:7e:06:71:68:07:49:7a:a5:a3: d2:02:c7:3a:b3:0d:e8:63:ca:46:29:dc:bd:e6:c8:6b:e3:ae: 1c:d2:09:cc:c6:6f:8d:f6:ca:61:9e:ec:19:6f:5e:4f:83:2b: 7d:50:87:3d:c3:11:69:52:35:de:63:a5:3a:cf:61:07:2f:16: e2:f4:18:97:83:cc:1e:3d:43:86:c6:a2:ed:85:09:67:90:fe: 65:51:fc:f1:80:93:34:ca:80:7a:2b:64:0b:96:c2:44:2d:cf: 17:23:30:fe:55:d1:ef:30:bd:3c:44:84:be:0a:52:81:e6:c6: 09:39:44:e7 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEyazEvefVFFs7GdbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTkxZTc2MmUtN2MwOC00NDAyLTgxMDUtNjk0MWRiMDc2Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik5Z+/BcitVwu8Mm2ToMzDk4ZKe1oHfpTnxP Pl7PsibtMXJ58EjP3rsf7biQ7a0jrZZjZxIH4PwN8ClgrzpXi25Z9y84SthKaSsx a1RlNYOQBGSUeZ3SjEadLo0OE1eN1wjJ3YpjpvuuYrkAMUNrHKcKBn3hOAgtbD2V Bi7WCMNEjJh4/ovoG1yIUjOooshCKGBo5MBvOMEr7O7Gf964/H7GLrxyvZIzGeKy OyS/XYcACRu7PSzS7IZixZMAf6kXFKaM+EXGoXi+EJTw7vr/v7Sk1rawGxWmW6dW H5gRDvC0KEbFltXpMqImLmupFwpdPHdFK3iWBW60e8gu8PipXQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKfqrfMPY6iP3Q3KyKzm+xMMpFpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzA2YTM2OWYtNzRhNy0z MTBiLWI5ZjYtNGQyZjg5ODQzNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEVlV84gTF49ndxADS0lmq3cY8BqnoLckmHc jA91TqHq/s7dM8dTqdAWU/GHLlEnUTW5f6NjOXXTWRQYQH2xyYWc3G+oPZr/jCi/ 70x6DFXs6kR/fDw6EgrKbXzTduWAJhP0MM6NJ4VGpffGWKlg0LVZM7kY4JG9Ya4v YcfJ8ykCueukkcKrGn4GcWgHSXqlo9ICxzqzDehjykYp3L3myGvjrhzSCczGb432 ymGe7BlvXk+DK31Qhz3DEWlSNd5jpTrPYQcvFuL0GJeDzB49Q4bGou2FCWeQ/mVR /PGAkzTKgHorZAuWwkQtzxcjMP5V0e8wvTxEhL4KUoHmxgk5ROc= -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:45 2026 by rpki-client