$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa File: c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa (raw, json) Hash identifier: L0qoIu5CujANP41fweSq5m5dpM8On90mdu4Kqx2wUmY= Subject key identifier: 76:FB:EA:29:71:75:CF:E3:D8:95:9A:95:CC:39:C4:35:43:F0:BB:7D Certificate issuer: /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Certificate serial: 010D0C9F4328584C7D7C3F34B3BC0A8DDA787E60 Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 11961 IP address blocks: 2607:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:3f:34:b3:bc:0a:8d:da:78:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=4a2f28c7-7876-41c8-85a7-b9b6970bf3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:72:3b:7e:b8:6a:87:38:df:83:ca:c2:ac: bc:67:5d:ef:83:c4:f1:9a:4e:d5:0a:74:fa:ae:c9: 28:be:9e:24:11:cb:b9:0e:1f:6e:82:83:66:a4:01: 47:3f:2a:6f:53:17:b4:d4:15:64:d3:cc:a2:49:18: ce:cc:81:e9:52:01:36:fe:03:38:01:6b:f2:33:f1: cc:04:bc:c2:aa:56:2b:fa:a3:8f:ef:98:0a:a5:5a: 69:9c:9e:55:dc:0d:3c:d2:c3:d1:d4:1c:b4:4a:f0: ac:ca:7c:e3:83:d1:d7:b1:13:e8:ad:62:16:e3:53: fd:27:c3:f7:63:a5:19:af:02:ef:b7:05:ae:5a:90: 51:0d:a7:d6:9a:d2:4a:dc:b8:5e:c9:81:b2:fa:34: 86:3f:a4:1b:17:71:cc:d3:67:e2:4c:e2:66:cd:7f: fc:3a:02:77:9e:1f:7f:8f:f0:4b:64:bb:0e:bf:c2: 2c:b5:66:bd:a5:38:4d:b9:46:a1:12:75:02:4d:6c: ab:63:4a:0a:0f:50:37:a9:cc:8a:53:d8:6b:78:6f: 68:e9:a2:8f:18:8a:9b:7a:21:fb:56:1c:f6:7b:4d: 47:99:75:60:da:b3:79:0f:b6:e5:99:e9:3a:e4:b6: 5d:0d:ad:d5:e6:34:2a:c8:3b:ce:b4:80:e1:7d:fb: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:EA:29:71:75:CF:E3:D8:95:9A:95:CC:39:C4:35:43:F0:BB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/c9ff6e96-e7d6-3b2e-9cc9-c6a1b53046ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl X509v3 Authority Key Identifier: keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer sbgp-ipAddrBlock: critical IPv6: 2607:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:25:f5:39:2b:61:a7:d7:3e:b5:3b:ee:fc:64:f4:08:42:b0: 12:12:a7:35:8e:48:19:e7:f7:fc:b6:e6:ff:c2:3c:2d:22:04: fa:0d:94:f4:b9:a3:36:d2:42:c8:61:9e:b0:0b:a7:4f:42:9f: a8:2d:c8:2e:3a:cf:f9:92:97:af:da:8f:9e:f6:4f:a0:5b:4b: 1b:9b:07:f1:b5:bd:05:34:2d:02:6d:64:c1:9a:00:7f:2e:7f: bd:bc:02:db:d5:a7:ad:85:64:ad:9f:32:71:69:96:0d:1c:2b: 2b:5f:89:4a:79:da:89:12:a4:ce:ef:4b:0c:31:0b:20:8d:33: 7c:2f:41:75:7f:b9:e7:d3:b7:52:4d:d3:ae:27:09:86:82:78: 9b:60:45:3f:89:e1:8f:bd:9e:45:2e:97:da:60:9b:18:f7:1e: cf:c9:1e:b0:fc:cb:8e:ea:36:07:06:a2:ea:08:c6:ab:70:9f: 8c:81:51:04:b3:02:2f:8e:a5:c0:b8:4b:26:c1:e7:26:eb:a6: a5:17:1f:a2:15:2d:e7:24:54:5a:cc:13:97:41:29:1b:b5:e8: 1f:0a:26:c7:f5:7d:91:8d:db:0c:85:2f:bd:02:14:4b:88:b2: 95:4e:5a:bc:d0:eb:2e:ac:ce:41:24:a2:0d:36:1a:4d:ca:7f: e2:c7:01:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEx9fD80s7wKjdp4fmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjVkZDJmM2ItZDU0NC00YTkwLTg0YTUtNThhZjBkYjg0 ZGFiMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NGEyZjI4YzctNzg3Ni00MWM4LTg1YTctYjliNjk3MGJmM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibRyO364aoc434PKwqy8Z13vg8Txmk7VCnT6 rskovp4kEcu5Dh9ugoNmpAFHPypvUxe01BVk08yiSRjOzIHpUgE2/gM4AWvyM/HM BLzCqlYr+qOP75gKpVppnJ5V3A080sPR1By0SvCsynzjg9HXsRPorWIW41P9J8P3 Y6UZrwLvtwWuWpBRDafWmtJK3LheyYGy+jSGP6QbF3HM02fiTOJmzX/8OgJ3nh9/ j/BLZLsOv8IstWa9pThNuUahEnUCTWyrY0oKD1A3qcyKU9hreG9o6aKPGIqbeiH7 Vhz2e01HmXVg2rN5D7blmek65LZdDa3V5jQqyDvOtIDhffs2HQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHb76ilxdc/j2JWalcw5xDVD8Lt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRk MmYzYi1kNTQ0LTRhOTAtODRhNS01OGFmMGRiODRkYWIvYzlmZjZlOTYtZTdkNi0z YjJlLTljYzktYzZhMWI1MzA0NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjVkZDJmM2ItZDU0NC00YTkwLTg0 YTUtNThhZjBkYjg0ZGFiL2Y1ZGQyZjNiLWQ1NDQtNGE5MC04NGE1LTU4YWYwZGI4 NGRhYi5jcmwwHwYDVR0jBBgwFoAUKiF+2Cg60kH+z+XpHTI/wLeK9wswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNWRkMmYzYi1kNTQ0LTRhOTAtODRhNS01OGFm MGRiODRkYWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAEJfU5K2Gn1z61O+78ZPQIQrASEqc1jkgZ5/f8tub/wjwtIgT6DZT0 uaM20kLIYZ6wC6dPQp+oLcguOs/5kpev2o+e9k+gW0sbmwfxtb0FNC0CbWTBmgB/ Ln+9vALb1aethWStnzJxaZYNHCsrX4lKedqJEqTO70sMMQsgjTN8L0F1f7nn07dS TdOuJwmGgnibYEU/ieGPvZ5FLpfaYJsY9x7PyR6w/MuO6jYHBqLqCMarcJ+MgVEE swIvjqXAuEsmwecm66alFx+iFS3nJFRazBOXQSkbtegfCibH9X2RjdsMhS+9AhRL iLKVTlq80OsurM5BJKINNhpNyn/ixwEX -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:47 2026 by rpki-client