$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa File: 553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa (raw, json) Hash identifier: Ro9qJHbocknGBSEhD+yzjkhpvvWpNbXchzWL/LEeFy4= Subject key identifier: 03:71:51:44:33:F9:1A:DE:9D:EF:81:FC:1D:CF:A0:82:AB:03:6F:59 Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584C8A0C283F7B9D11E01CF34EC0 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 3663 IP address blocks: 2604:aa00::/32 maxlen: 56 2607:f430::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:28:3f:7b:9d:11:e0:1c:f3:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=ac7e74d4-4511-40b6-8f6f-3f3cbc448e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:5d:35:ce:8b:0b:c8:53:38:4d:db:41:85: 24:ce:42:37:b1:ed:9e:79:79:dd:f1:63:dc:48:c8: 9d:e6:39:26:c5:44:26:bb:0e:46:22:30:e7:1a:e1: 40:d6:3e:99:f7:f6:7a:44:9b:0c:a5:99:7c:61:c3: 8c:c1:6a:47:5d:af:7d:90:a1:02:db:17:68:b7:d9: c4:ee:3b:8a:de:74:82:ff:8d:98:f4:73:fa:4e:c1: 50:44:c0:62:63:3c:24:ca:67:10:e0:db:44:04:87: 27:48:42:1b:4e:90:ba:fc:30:8e:87:7c:5c:38:93: 2a:af:6e:47:38:50:d9:6f:55:86:ca:f6:99:32:eb: 5e:d2:e7:b5:f9:ad:ae:78:a7:53:5f:0f:a4:10:fe: da:3e:e2:a2:86:07:6e:e8:12:b7:24:a8:b7:e6:cb: f6:62:32:38:dc:b0:03:eb:1b:77:55:8a:e6:79:7c: 40:ac:a5:80:26:f2:68:8a:40:ea:67:4a:2f:39:0f: ac:82:fb:c2:c1:73:bc:83:b9:34:da:58:02:c5:92: df:8c:2d:ee:2f:66:64:90:45:27:74:39:62:00:95: 47:99:e9:f9:c5:43:1c:06:41:73:58:ea:0c:e2:72: 12:90:59:38:7d:01:5a:6f:f2:72:ff:56:9b:fb:e6: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:51:44:33:F9:1A:DE:9D:EF:81:FC:1D:CF:A0:82:AB:03:6F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/553adf4c-94fa-38fb-bce6-21adbbc2bf2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 2607:f430::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:35:53:a1:53:f0:13:58:9c:c8:75:b3:f8:df:5f:85:7f:35: db:66:b3:cf:8a:34:25:8e:f4:69:73:15:f3:28:92:aa:31:d5: 88:ab:20:80:83:a0:e4:3a:73:ed:24:0d:b1:a3:83:7f:ef:e7: 23:72:7f:4f:8a:67:83:bc:1d:1a:da:3a:47:a6:f1:2e:f6:37: 36:5a:5e:99:10:00:1b:18:d6:8e:fb:e9:f9:7b:9a:5a:63:a2: 64:d5:ea:ed:c1:c7:b3:81:15:5a:46:b1:6d:5d:07:23:e2:f4: ea:26:d3:2d:e4:76:d9:37:e0:da:7d:df:8e:bc:a4:35:11:08: ab:cc:96:ea:e2:5f:d2:01:a6:9b:9a:96:06:e5:34:92:ca:d7: 57:07:cf:72:f9:25:bf:aa:51:0b:23:8a:5a:8a:8c:20:6d:10: 55:44:f6:60:46:be:93:bc:33:83:b0:0a:21:49:b6:a6:1e:7c: a9:f2:86:52:a3:f6:09:96:93:99:f9:f0:e3:75:18:01:11:d4: ee:91:71:1a:ec:c3:3d:3b:95:28:9f:b6:c4:00:89:05:7b:85: 87:57:71:0d:c4:19:04:65:47:74:0b:68:94:fa:ad:18:8d:6d: 2e:6c:23:f6:d6:e2:c8:89:c9:59:d0:46:5d:99:c3:61:9e:1e: c4:a1:cc:16 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyKDCg/e50R4BzzTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk YWM3ZTc0ZDQtNDUxMS00MGI2LThmNmYtM2YzY2JjNDQ4ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu9dNc6LC8hTOE3bQYUkzkI3se2eeXnd8WPc SMid5jkmxUQmuw5GIjDnGuFA1j6Z9/Z6RJsMpZl8YcOMwWpHXa99kKEC2xdot9nE 7juK3nSC/42Y9HP6TsFQRMBiYzwkymcQ4NtEBIcnSEIbTpC6/DCOh3xcOJMqr25H OFDZb1WGyvaZMute0ue1+a2ueKdTXw+kEP7aPuKihgdu6BK3JKi35sv2YjI43LAD 6xt3VYrmeXxArKWAJvJoikDqZ0ovOQ+sgvvCwXO8g7k02lgCxZLfjC3uL2ZkkEUn dDliAJVHmen5xUMcBkFzWOoM4nISkFk4fQFab/Jy/1ab++YKNwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFANxUUQz+Rrene+B/B3PoIKrA29ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNTUzYWRmNGMtOTRmYS0z OGZiLWJjZTYtMjFhZGJiYzJiZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgSqAAMF ACYH9DAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPTVToVPwE1icyHWz+N9fhX8122azz4o0JY70aXMV8yiS qjHViKsggIOg5Dpz7SQNsaODf+/nI3J/T4png7wdGto6R6bxLvY3NlpemRAAGxjW jvvp+XuaWmOiZNXq7cHHs4EVWkaxbV0HI+L06ibTLeR22Tfg2n3fjrykNREIq8yW 6uJf0gGmm5qWBuU0ksrXVwfPcvklv6pRCyOKWoqMIG0QVUT2YEa+k7wzg7AKIUm2 ph58qfKGUqP2CZaTmfnw43UYARHU7pFxGuzDPTuVKJ+2xACJBXuFh1dxDcQZBGVH dAtolPqtGI1tLmwj9tbiyInJWdBGXZnDYZ4exKHMFg== -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:55 2026 by rpki-client