$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa File: cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa (raw, json) Hash identifier: 7rlfkwVZggqmxPhfgXD3ozy3gIOCiYisGfdX6olPHQU= Subject key identifier: A3:32:E9:11:54:98:DC:91:DF:79:09:90:BE:79:ED:7F:99:43:82:08 Certificate issuer: /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Certificate serial: 010D0C9F4328584CD6D20B10DFBADFD16F7DAE00 Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 398325 IP address blocks: 2605:e040::/40 maxlen: 40 2605:e040:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:0b:10:df:ba:df:d1:6f:7d:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=413baf24-a1cd-4d5c-a716-542551035648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:1a:dd:d0:a5:1a:c5:88:26:12:8c:3f:86: 78:a5:3c:0e:94:1e:e3:93:f0:7b:ed:0e:77:23:40: 1d:57:9f:c4:05:1e:1e:99:84:f5:ad:25:4c:42:97: 4b:21:71:f1:50:d4:f6:5e:f0:57:62:2e:ed:c3:02: c6:2a:89:b5:91:66:10:4b:6f:64:42:bb:eb:b1:14: c3:a2:d3:cc:9a:c1:fa:3f:50:30:c7:f6:be:31:87: d2:cb:4a:11:a5:b2:e5:c4:46:de:c3:58:01:5f:48: 78:6b:cd:86:5e:24:6a:bb:49:1d:df:cf:96:69:34: 62:05:8f:f3:1c:f7:3a:b2:45:39:41:d9:f5:05:0f: 06:b1:35:f3:41:b1:4b:42:18:52:ae:39:63:69:e6: 8c:09:4d:05:f6:81:42:2b:e4:9f:59:41:44:f2:89: f9:e5:f9:ec:90:39:3c:2f:83:64:7e:0a:45:7f:04: 17:6c:93:f9:cf:3e:fd:00:89:21:06:f7:04:e0:2b: 1e:5d:d4:02:97:d2:cb:31:1f:a4:4f:99:9d:a8:3d: 6e:94:e4:fb:d2:69:96:85:68:5b:d5:41:1f:3b:2c: 38:ca:42:24:f9:27:26:99:56:0e:76:94:5d:32:44: 79:f3:d1:93:ef:ac:78:0e:97:21:61:7b:94:49:8d: 19:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:E9:11:54:98:DC:91:DF:79:09:90:BE:79:ED:7F:99:43:82:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl X509v3 Authority Key Identifier: keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer sbgp-ipAddrBlock: critical IPv6: 2605:e040::/40 2605:e040:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fa:bc:8f:bc:bc:0a:a7:e2:20:37:17:76:97:a2:ad:0f:98: 9a:f9:ac:74:25:85:49:60:82:83:5e:08:96:b8:9b:b1:fa:32: 9f:e4:e6:c2:9a:e5:7c:a9:59:3f:fd:b8:4d:92:a6:63:34:a9: 23:0a:f4:5b:4b:b4:37:8f:ed:18:58:6c:d2:fb:09:54:e2:62: 72:24:fe:4c:1b:b3:1c:fa:06:13:29:99:0e:a5:6b:20:a2:f3: 6e:3d:4b:b9:b4:f9:c6:60:8e:a2:8d:81:23:40:d5:3e:c8:67: f7:b6:dd:17:5a:39:f3:52:0b:90:1a:f4:38:b1:f0:b8:99:b4: 8f:9b:d2:d3:e7:00:f8:77:29:db:04:a3:26:e7:a2:0a:98:a7: 8f:4a:e3:7d:29:c3:4e:ea:10:e4:9a:c0:ab:49:64:8c:e8:bc: e5:3e:70:41:9c:29:e5:31:af:21:78:9d:87:b0:9b:a4:14:0e: 1b:c7:31:d7:92:ab:17:50:6d:7e:f0:a8:70:99:80:bd:b5:bc: 92:24:ba:ac:9d:17:dc:1a:82:13:54:6d:34:a4:7c:cf:cd:ec: 68:46:a7:f5:bc:85:38:ad:69:fd:13:ac:44:55:80:a3:85:d2: 43:9e:68:ec:f3:07:b7:a3:75:a1:7a:9e:d5:84:c4:e7:d8:07: 5f:32:fa:c4 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEzW0gsQ37rf0W99rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJjMzBjZGEtM2IzZi00ZThlLWE2ODctYjIwZDU0NDhh NGU3MB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NDEzYmFmMjQtYTFjZC00ZDVjLWE3MTYtNTQyNTUxMDM1NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ca3dClGsWIJhKMP4Z4pTwOlB7jk/B77Q53 I0AdV5/EBR4emYT1rSVMQpdLIXHxUNT2XvBXYi7twwLGKom1kWYQS29kQrvrsRTD otPMmsH6P1Awx/a+MYfSy0oRpbLlxEbew1gBX0h4a82GXiRqu0kd38+WaTRiBY/z HPc6skU5Qdn1BQ8GsTXzQbFLQhhSrjljaeaMCU0F9oFCK+SfWUFE8on55fnskDk8 L4NkfgpFfwQXbJP5zz79AIkhBvcE4CseXdQCl9LLMR+kT5mdqD1ulOT70mmWhWhb 1UEfOyw4ykIk+ScmmVYOdpRdMkR589GT76x4DpchYXuUSY0ZHwIDAQABo4IDXzCC A1swHQYDVR0OBBYEFKMy6RFUmNyR33kJkL557X+ZQ4IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMz MGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBkNTQ0OGE0ZTcvY2FkOWVjMGMtZTJmOS0z YjAxLWJmZjItOWVhNTEwZjg3MTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJjMzBjZGEtM2IzZi00ZThlLWE2 ODctYjIwZDU0NDhhNGU3L2FiYzMwY2RhLTNiM2YtNGU4ZS1hNjg3LWIyMGQ1NDQ4 YTRlNy5jcmwwHwYDVR0jBBgwFoAUWjNUcS2B4/8BBQT5LA5f45A2vMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMzMGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBk NTQ0OGE0ZTcuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAJgXgQAAD BgAmBeBACDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBa+ryPvLwKp+IgNxd2l6KtD5ia+ax0JYVJYIKDXgiW uJux+jKf5ObCmuV8qVk//bhNkqZjNKkjCvRbS7Q3j+0YWGzS+wlU4mJyJP5MG7Mc +gYTKZkOpWsgovNuPUu5tPnGYI6ijYEjQNU+yGf3tt0XWjnzUguQGvQ4sfC4mbSP m9LT5wD4dynbBKMm56IKmKePSuN9KcNO6hDkmsCrSWSM6LzlPnBBnCnlMa8heJ2H sJukFA4bxzHXkqsXUG1+8KhwmYC9tbySJLqsnRfcGoITVG00pHzPzexoRqf1vIU4 rWn9E6xEVYCjhdJDnmjs8we3o3Whep7VhMTn2AdfMvrE -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:09 2026 by rpki-client