$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa File: 7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json) Hash identifier: ZCN25h/kBxKPt3vy49G0OM1wL18AVLdAQycH8mPs+8M= Subject key identifier: EB:DA:BE:A4:D5:D0:E9:8A:66:80:04:9F:CA:29:95:D6:CB:D4:B0:D8 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584CB121D8218FD57B1AE8307FE0 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 4226 IP address blocks: 2604:f580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:d8:21:8f:d5:7b:1a:e8:30:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=20b06941-3cb0-4031-b7bb-b26dab2e15a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:4b:07:be:5b:8b:10:3c:1b:71:ad:47:c6: f1:34:ae:e8:12:2c:19:8a:67:10:d4:e9:c3:a0:28: 15:83:d3:1a:52:ce:e0:15:a7:fe:00:93:f2:30:f2: 9a:40:47:89:f2:1f:a7:20:5e:b7:96:85:22:ee:e3: ce:61:b2:5f:12:00:b0:78:a4:16:0f:8e:53:ef:e3: 0d:9f:6c:1f:09:aa:4b:05:b3:0b:fc:9a:c1:bc:4b: 0d:05:5b:06:76:61:2b:7a:ac:04:d5:89:2e:d8:8b: 26:0e:bd:f2:f9:20:4c:c3:cc:09:89:c1:22:0a:a6: 34:44:ad:88:bd:8b:4c:77:15:cd:03:a8:34:0e:30: 3d:80:d3:4a:6d:db:cf:fa:8b:1c:19:d2:f5:54:a9: 01:29:44:88:91:e1:81:4c:bd:8e:60:d2:8e:d3:9d: 04:84:4e:48:b4:a9:6d:7e:8d:f5:f8:4c:ef:1b:22: 37:7a:56:67:07:c4:b1:ee:8a:82:85:0b:ee:7c:49: 13:d0:6b:43:fe:ea:43:7c:12:9e:c2:2a:54:43:5a: 10:e4:e2:e4:25:f4:6a:5a:12:a8:b5:c8:32:f4:bd: 7b:67:01:f0:37:7c:f5:4a:4e:53:3e:1a:e8:a6:6d: fb:3c:67:4a:bf:c2:8e:ee:2e:9f:1f:74:dc:26:8e: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DA:BE:A4:D5:D0:E9:8A:66:80:04:9F:CA:29:95:D6:CB:D4:B0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d0:06:5d:94:9c:82:ce:71:e2:51:37:ef:f7:01:71:4d:a1: 7a:72:79:3d:e9:d5:1c:a9:a5:95:8d:dd:9c:ef:6f:66:02:25: 40:d9:5a:1b:1f:4b:a7:27:06:cf:44:d9:18:5d:bb:a3:f9:fd: b0:b4:af:85:13:40:6c:09:27:38:0b:d6:75:e8:05:ba:2a:ee: f9:86:aa:79:a0:e1:c3:51:59:7c:99:57:80:d5:ae:83:e5:3c: da:e5:f0:c8:a3:b8:7f:14:2f:b6:6a:60:e7:dc:f3:af:03:b1: 9a:d8:7b:98:7f:e6:b0:c4:63:82:7d:3c:ab:44:4a:97:db:97: 31:76:52:8c:dd:8f:f6:d8:77:3a:b2:0d:34:30:58:60:2e:da: c6:04:31:c8:2b:c8:d2:44:a8:8d:c9:69:c5:b7:d4:1e:02:75: 83:be:cd:59:4f:b4:72:9d:22:9e:83:d5:63:a3:1e:de:15:d4: 2a:36:bb:02:c4:fc:98:26:e1:cb:78:07:c2:cd:b6:fa:55:3e: 87:c1:ac:39:e5:f9:ea:6f:e9:9a:c3:1d:5d:d0:af:4e:9d:55: 5d:44:9b:59:25:09:9e:bf:b2:33:d9:65:c0:08:d4:02:1e:9c: c3:54:50:b4:92:8d:c6:55:8c:67:e3:3b:37:9f:69:0f:52:64: bd:f6:31:89 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyxIdghj9V7Gugwf+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MjBiMDY5NDEtM2NiMC00MDMxLWI3YmItYjI2ZGFiMmUxNWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQtLB75bixA8G3GtR8bxNK7oEiwZimcQ1OnD oCgVg9MaUs7gFaf+AJPyMPKaQEeJ8h+nIF63loUi7uPOYbJfEgCweKQWD45T7+MN n2wfCapLBbML/JrBvEsNBVsGdmEreqwE1Yku2IsmDr3y+SBMw8wJicEiCqY0RK2I vYtMdxXNA6g0DjA9gNNKbdvP+oscGdL1VKkBKUSIkeGBTL2OYNKO050EhE5ItKlt fo31+EzvGyI3elZnB8Sx7oqChQvufEkT0GtD/upDfBKewipUQ1oQ5OLkJfRqWhKo tcgy9L17ZwHwN3z1Sk5TPhropm37PGdKv8KO7i6fH3TcJo7YzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOvavqTV0OmKZoAEn8opldbL1LDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNzUyMWE2MTQtMTg3Yy0z MTIzLWI3N2UtYmQ1OGQ1NmJmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCq0AZdlJyCznHiUTfv9wFxTaF6cnk96dUcqaWVjd2c729mAiVA2Vob H0unJwbPRNkYXbuj+f2wtK+FE0BsCSc4C9Z16AW6Ku75hqp5oOHDUVl8mVeA1a6D 5Tza5fDIo7h/FC+2amDn3POvA7Ga2HuYf+awxGOCfTyrREqX25cxdlKM3Y/22Hc6 sg00MFhgLtrGBDHIK8jSRKiNyWnFt9QeAnWDvs1ZT7RynSKeg9Vjox7eFdQqNrsC xPyYJuHLeAfCzbb6VT6Hwaw55fnqb+mawx1d0K9OnVVdRJtZJQmev7Iz2WXACNQC HpzDVFC0ko3GVYxn4zs3n2kPUmS99jGJ -----END CERTIFICATE-----Generated at Sun Mar 1 21:01:12 2026 by rpki-client