$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa File: 7c1ba9ff-755e-3117-9120-25b143c0f470.roa (raw, json) Hash identifier: fsSYP19SECfRYsJ6jvrzwxjZPGvePOSsqHs7bpZh5LQ= Subject key identifier: D3:D7:4E:BD:6A:F8:D4:1D:52:15:B3:C7:A7:52:3D:07:A2:4B:97:7E Certificate issuer: /CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Certificate serial: 010D0C9F4328584CFDE7B079BF0EF6051F5B4F80 Authority key identifier: 9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 12145 IP address blocks: 2604:dec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:b0:79:bf:0e:f6:05:1f:5b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4890f8fd-3ae6-4818-8c1f-19aab66f43a1 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=b38a4013-3b9d-4251-9e3e-56d7913bad42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:46:28:c7:85:99:f7:a9:7e:a2:96:29:76: 0f:34:cb:2d:1f:e7:5f:d9:35:f8:ea:02:ff:bd:58: e3:fe:d0:3d:ac:45:9c:86:70:51:4a:2f:69:d2:1d: 2d:84:f7:c9:a5:7f:bf:47:31:ca:9f:38:e5:43:e9: 57:ef:9c:16:ad:f2:f7:5b:ff:a1:d6:f9:82:7c:55: 2b:b8:6d:a7:f2:60:7a:fe:b3:2e:88:bc:4d:96:b6: 45:de:e4:62:44:d1:06:d8:d6:8c:71:2a:3d:83:8e: 78:f1:44:54:e8:a3:c6:fa:95:53:56:ec:82:2b:e8: c0:2a:73:04:93:cd:f7:99:60:57:6e:17:36:f9:b9: 10:8a:dc:9f:f6:35:c4:f0:8a:c9:f7:d7:a3:37:6e: 12:8b:59:7f:d2:89:16:bf:4b:83:8f:a7:b5:74:de: 1c:49:2e:a2:82:09:ea:08:93:aa:86:1f:c3:85:15: 12:e2:a3:3b:de:37:7b:2e:f6:48:3a:a6:d6:b6:bd: 0f:df:39:2b:ef:6c:6b:c9:ba:41:87:5b:80:55:0b: 6c:73:67:31:f4:1d:48:5d:ab:54:11:21:a4:1c:d4: fb:79:aa:99:9b:55:2b:13:49:f3:6c:ce:df:f7:26: a4:34:ad:bf:ee:bc:89:6d:25:ac:a1:9d:af:23:33: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D7:4E:BD:6A:F8:D4:1D:52:15:B3:C7:A7:52:3D:07:A2:4B:97:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/7c1ba9ff-755e-3117-9120-25b143c0f470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.crl X509v3 Authority Key Identifier: keyid:9F:85:49:00:D8:C8:26:66:8B:5E:DA:A7:05:C6:89:9D:EA:1F:7A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4890f8fd-3ae6-4818-8c1f-19aab66f43a1.cer sbgp-ipAddrBlock: critical IPv6: 2604:dec0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9d:d2:b2:b5:9c:96:28:84:da:db:c5:cd:85:34:3e:0b:ac: 34:68:52:a7:bd:62:0a:1e:02:59:65:80:81:ba:09:76:59:68: e6:a9:42:6c:5b:59:b7:86:46:6d:61:75:2d:25:03:55:ff:0f: 69:f0:2c:ca:3b:fa:2e:b6:46:24:1c:a8:30:bf:fa:9f:34:96: bd:02:d5:d0:5e:f0:f7:36:92:9e:8f:3c:fd:c8:41:73:d3:9a: 22:ed:3f:c4:11:77:8c:27:c9:97:70:c7:3e:7c:70:71:8f:db: 44:e0:13:47:48:95:71:5e:d4:93:ec:49:de:44:82:65:77:89: 89:15:f0:30:d1:a2:b5:97:f0:df:b7:d3:78:05:53:74:99:a6: 14:a0:c8:b3:43:13:51:f6:14:41:43:73:22:98:58:33:47:f3: 72:54:54:ff:57:7f:62:03:a8:9b:1a:24:ce:b5:f9:a8:b4:20: 05:70:73:bb:ae:ec:35:bd:ff:09:eb:bf:5c:95:56:25:11:77: f3:0b:4c:5f:65:6d:69:40:0d:ff:d8:26:19:db:9d:fc:57:99: a2:92:20:f9:82:6b:42:f2:d8:0a:88:8e:8f:3b:b1:64:22:de: 14:94:43:55:a4:90:95:73:4a:2b:e6:3c:56:8f:95:28:ce:ef: 7f:19:b5:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEz957B5vw72BR9bT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg5MGY4ZmQtM2FlNi00ODE4LThjMWYtMTlhYWI2NmY0 M2ExMB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YjM4YTQwMTMtM2I5ZC00MjUxLTllM2UtNTZkNzkxM2JhZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdGKMeFmfepfqKWKXYPNMstH+df2TX46gL/ vVjj/tA9rEWchnBRSi9p0h0thPfJpX+/RzHKnzjlQ+lX75wWrfL3W/+h1vmCfFUr uG2n8mB6/rMuiLxNlrZF3uRiRNEG2NaMcSo9g4548URU6KPG+pVTVuyCK+jAKnME k833mWBXbhc2+bkQityf9jXE8IrJ99ejN24Si1l/0okWv0uDj6e1dN4cSS6iggnq CJOqhh/DhRUS4qM73jd7LvZIOqbWtr0P3zkr72xrybpBh1uAVQtsc2cx9B1IXatU ESGkHNT7eaqZm1UrE0nzbM7f9yakNK2/7ryJbSWsoZ2vIzMqwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNPXTr1q+NQdUhWzx6dSPQeiS5d+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkw ZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFhYjY2ZjQzYTEvN2MxYmE5ZmYtNzU1ZS0z MTE3LTkxMjAtMjViMTQzYzBmNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg5MGY4ZmQtM2FlNi00ODE4LThj MWYtMTlhYWI2NmY0M2ExLzQ4OTBmOGZkLTNhZTYtNDgxOC04YzFmLTE5YWFiNjZm NDNhMS5jcmwwHwYDVR0jBBgwFoAUn4VJANjIJmaLXtqnBcaJneoferwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODkwZjhmZC0zYWU2LTQ4MTgtOGMxZi0xOWFh YjY2ZjQzYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTewDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyndKytZyWKITa28XNhTQ+C6w0aFKnvWIKHgJZZYCBugl2WWjmqUJs W1m3hkZtYXUtJQNV/w9p8CzKO/outkYkHKgwv/qfNJa9AtXQXvD3NpKejzz9yEFz 05oi7T/EEXeMJ8mXcMc+fHBxj9tE4BNHSJVxXtST7EneRIJld4mJFfAw0aK1l/Df t9N4BVN0maYUoMizQxNR9hRBQ3MimFgzR/NyVFT/V39iA6ibGiTOtfmotCAFcHO7 ruw1vf8J679clVYlEXfzC0xfZW1pQA3/2CYZ2538V5mikiD5gmtC8tgKiI6PO7Fk It4UlENVpJCVc0or5jxWj5Uozu9/GbWm -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:05 2026 by rpki-client