$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/7ed215ff-2f9f-3bdd-9a8b-8a45ed2e478b.roa File: 7ed215ff-2f9f-3bdd-9a8b-8a45ed2e478b.roa (raw, json) Hash identifier: JSNHyaCJJOziIYuoKPLNdh89mzJESknH6M7zkVc7sSM= Subject key identifier: D7:E1:C8:AC:CB:D1:FD:FB:B7:EE:F1:2F:70:AE:8D:83:3C:58:2C:0A Certificate issuer: /CN=0a255869-5473-4988-89f2-dd632982b56e Certificate serial: 010D0C9F4328584CAA271D20D19A4E07D44C0860 Authority key identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/7ed215ff-2f9f-3bdd-9a8b-8a45ed2e478b.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 0 IP address blocks: 2630::/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1d:20:d1:9a:4e:07:d4:4c:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a255869-5473-4988-89f2-dd632982b56e Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=5397a40e-635a-4c23-81fa-b2d58ee1baad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:12:8e:4d:6c:77:76:0f:8a:4e:6d:00:4c:c6: 03:72:56:8a:30:9b:99:08:eb:6d:40:b2:89:5e:5b: 6f:92:de:e5:cc:85:32:ab:98:04:49:50:79:f7:3d: 43:85:88:5f:f8:cf:48:0a:2d:c4:b2:26:80:f7:0f: 2d:d9:9d:29:fc:fe:27:37:9c:c4:47:91:cf:24:bd: ec:3c:ce:fe:1d:cd:eb:51:8c:31:8d:46:54:e9:00: 75:82:e7:ca:9d:c3:9a:cc:86:54:b1:f8:dd:2f:3a: 82:29:51:59:ca:dd:e0:96:28:87:62:0a:75:42:c0: 95:6f:46:34:78:ba:b1:72:a6:27:cb:9a:2d:91:34: fe:d0:0c:8f:a4:57:68:6b:0d:f8:33:33:ac:4b:5e: c8:2e:77:ad:90:92:ee:87:b4:14:c4:c2:b9:79:a6: b3:9e:b4:bb:dc:e2:a4:b1:0d:e7:af:40:b1:36:ce: b3:8f:37:cf:a0:4b:fe:99:dd:c7:10:4e:6a:99:20: a8:f3:b1:07:04:8b:c8:38:f6:dd:ac:a8:b2:ae:3d: 74:ff:fc:b8:0b:1a:42:a8:0a:79:ee:d3:76:c5:50: c6:ab:76:f1:16:e6:4d:3e:00:e0:34:90:40:be:22: 58:99:f4:7c:61:f1:5e:74:46:ba:c1:01:9d:88:c4: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E1:C8:AC:CB:D1:FD:FB:B7:EE:F1:2F:70:AE:8D:83:3C:58:2C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/7ed215ff-2f9f-3bdd-9a8b-8a45ed2e478b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.crl X509v3 Authority Key Identifier: keyid:6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer sbgp-ipAddrBlock: critical IPv6: 2630::/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d6:0e:7e:7e:d7:a2:c2:91:e2:96:c3:5b:18:9c:e9:40:88: df:99:cd:86:96:12:7b:f9:34:19:c1:38:df:1d:95:ee:93:27: eb:23:fc:dc:ec:53:52:cc:22:e0:f1:0e:e7:93:f9:74:c5:bc: e3:a5:65:13:6a:f5:87:bd:ca:aa:b2:a2:10:f3:d0:42:ad:6e: 86:9a:8b:aa:26:36:83:30:71:db:37:81:f2:f9:8d:7c:cc:a3: 89:3e:0e:40:5a:db:b2:29:f8:01:74:04:81:b5:92:32:3c:7c: 09:93:96:bb:81:27:1e:42:2c:9a:59:83:ab:15:61:c4:89:dc: 9f:23:5e:cb:4d:6e:1a:88:65:e9:f7:01:da:a5:18:51:e8:b6: 74:1a:04:f7:e4:0f:9d:5a:f7:24:f8:3c:ef:b6:b6:b8:51:46: 25:3b:f8:c2:31:77:65:68:1b:e9:24:c9:23:a0:0b:9c:58:c3: ba:6c:f3:16:5e:57:68:b9:d6:19:c9:a9:ae:ec:31:a3:69:7b: e3:8f:07:0c:dd:84:50:ab:6b:24:37:90:4f:78:7d:6b:38:26: b4:06:11:76:fe:6f:fd:fe:9f:5d:24:e0:39:d1:63:fa:4e:89: 00:d2:4a:f9:3a:d8:6d:92:05:f8:be:16:64:ed:8a:48:1a:13: 99:d4:b9:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyqJx0g0ZpOB9RMCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEyNTU4NjktNTQ3My00OTg4LTg5ZjItZGQ2MzI5ODJi NTZlMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk NTM5N2E0MGUtNjM1YS00YzIzLTgxZmEtYjJkNThlZTFiYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBKOTWx3dg+KTm0ATMYDclaKMJuZCOttQLKJ Xltvkt7lzIUyq5gESVB59z1DhYhf+M9ICi3EsiaA9w8t2Z0p/P4nN5zER5HPJL3s PM7+Hc3rUYwxjUZU6QB1gufKncOazIZUsfjdLzqCKVFZyt3gliiHYgp1QsCVb0Y0 eLqxcqYny5otkTT+0AyPpFdoaw34MzOsS17ILnetkJLuh7QUxMK5eaaznrS73OKk sQ3nr0CxNs6zjzfPoEv+md3HEE5qmSCo87EHBIvIOPbdrKiyrj10//y4CxpCqAp5 7tN2xVDGq3bxFuZNPgDgNJBAviJYmfR8YfFedEa6wQGdiMSklQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNfhyKzL0f37t+7xL3CujYM8WCwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTI1 NTg2OS01NDczLTQ5ODgtODlmMi1kZDYzMjk4MmI1NmUvN2VkMjE1ZmYtMmY5Zi0z YmRkLTlhOGItOGE0NWVkMmU0NzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGEyNTU4NjktNTQ3My00OTg4LTg5 ZjItZGQ2MzI5ODJiNTZlLzBhMjU1ODY5LTU0NzMtNDk4OC04OWYyLWRkNjMyOTgy YjU2ZS5jcmwwHwYDVR0jBBgwFoAUa7x2I4UYT63jHZpVg6YxeW7IVfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYTI1NTg2OS01NDczLTQ5ODgtODlmMi1kZDYz Mjk4MmI1NmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAAjAFAwMAJjAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJdYOfn7XosKR4pbDWxic6UCI35nNhpYSe/k0GcE43x2V7pMn6yP83OxT Uswi4PEO55P5dMW846VlE2r1h73KqrKiEPPQQq1uhpqLqiY2gzBx2zeB8vmNfMyj iT4OQFrbsin4AXQEgbWSMjx8CZOWu4EnHkIsmlmDqxVhxIncnyNey01uGohl6fcB 2qUYUei2dBoE9+QPnVr3JPg877a2uFFGJTv4wjF3ZWgb6STJI6ALnFjDumzzFl5X aLnWGcmpruwxo2l7448HDN2EUKtrJDeQT3h9azgmtAYRdv5v/f6fXSTgOdFj+k6J ANJK+TrYbZIF+L4WZO2KSBoTmdS5gA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:28 2026 by rpki-client