$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: p4i0uGmjAFTdO83nnc0FJo5Cp2uko5h2jBCtXpfG+g0= Subject key identifier: 38:66:57:2C:65:3C:52:19:DD:8B:60:79:96:FC:89:1C:7C:49:5F:FF Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584CE62CBDD2D4FC5E59453B4680 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:bd:d2:d4:fc:5e:59:45:3b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=61506c19-4310-4f29-983e-09e15d02d618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:f4:d8:7c:24:de:57:fd:19:d8:b0:ea:b8: 08:4d:c2:1b:f2:a0:fc:4b:5d:ee:eb:37:0b:31:00: a6:15:0f:b7:4f:f4:69:7d:f1:36:89:85:4a:c3:f3: 0b:21:56:43:33:d5:33:c2:36:15:fe:6f:64:14:18: 91:ce:c8:2a:91:88:ef:07:61:31:02:18:a5:e0:e1: de:b9:57:23:fb:ef:6c:63:0d:a3:a8:08:f5:51:b2: 17:01:98:46:9f:95:44:d9:a8:9d:58:13:5c:35:72: 77:86:52:04:0c:5d:2e:17:1f:88:88:e5:85:ee:0e: 13:c2:4a:9d:20:02:36:63:c8:51:3c:8c:14:14:d9: 23:eb:3c:b9:9d:20:0e:79:18:40:50:5b:45:68:79: 0b:99:a8:69:1e:69:97:09:9e:98:a3:b7:1a:48:c7: 89:39:a4:d5:43:74:b5:32:f3:29:06:36:cf:37:dd: 31:97:76:0f:f2:bc:f1:2c:15:20:48:12:a4:8b:12: e2:46:cc:39:f3:90:26:35:e2:78:7d:db:14:74:88: bb:76:25:36:86:08:cd:1e:74:2c:f3:d1:5a:a6:87: 90:5d:f7:79:64:25:66:cc:ca:f8:b5:4e:eb:97:ea: 30:0a:90:5f:d7:6b:d1:42:68:7a:af:69:e9:0f:5d: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:66:57:2C:65:3C:52:19:DD:8B:60:79:96:FC:89:1C:7C:49:5F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5b:07:46:50:d3:03:84:17:84:dc:c6:bd:7b:39:9e:35:cf: 27:4a:87:fa:7f:25:2f:92:ef:18:0e:8d:3e:31:2d:88:61:11: 04:28:00:42:0c:73:79:23:6a:34:08:0d:ad:6c:ce:8b:5d:d7: 69:bd:a6:39:b6:4e:78:d0:8e:7d:1f:bb:b2:d9:2e:3f:74:5d: 22:a2:82:61:75:31:c7:c1:5c:73:38:87:bc:e9:53:bb:68:69: f0:e7:28:15:f9:0b:8b:38:64:23:67:9f:68:a6:3c:4b:8e:46: 74:33:2c:b3:fa:7a:1d:ee:2f:96:98:3c:2b:e2:f9:01:93:92: ed:de:c6:79:89:55:1e:22:26:e0:9f:95:a3:5c:ee:c4:14:ee: e3:62:fe:a8:8e:5f:b0:77:db:62:dd:62:43:d3:f4:20:9a:50: 30:ce:ea:e4:b7:d7:e9:8e:62:bb:16:77:8c:39:34:ef:b4:a8: d2:42:c9:9b:9b:9b:aa:54:cd:a4:4c:0d:7b:61:ae:db:80:2f: 82:5e:95:0f:9e:3a:ea:a2:13:a3:ff:cd:6a:2b:46:28:fa:f7: 6d:19:9f:3f:48:be:0d:fd:9c:9a:8f:13:45:5c:e7:5b:09:bf: 36:a6:30:70:90:8d:bb:4f:23:66:ad:0f:5a:d5:1e:22:3a:36: cf:57:a4:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzmLL3S1PxeWUU7RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk NjE1MDZjMTktNDMxMC00ZjI5LTk4M2UtMDllMTVkMDJkNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH/02Hwk3lf9Gdiw6rgITcIb8qD8S13u6zcL MQCmFQ+3T/RpffE2iYVKw/MLIVZDM9UzwjYV/m9kFBiRzsgqkYjvB2ExAhil4OHe uVcj++9sYw2jqAj1UbIXAZhGn5VE2aidWBNcNXJ3hlIEDF0uFx+IiOWF7g4Twkqd IAI2Y8hRPIwUFNkj6zy5nSAOeRhAUFtFaHkLmahpHmmXCZ6Yo7caSMeJOaTVQ3S1 MvMpBjbPN90xl3YP8rzxLBUgSBKkixLiRsw585AmNeJ4fdsUdIi7diU2hgjNHnQs 89FapoeQXfd5ZCVmzMr4tU7rl+owCpBf12vRQmh6r2npD120BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhmVyxlPFIZ3YtgeZb8iRx8SV//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1bB0ZQ0wOEF4Tcxr17OZ41zydKh/p/JS+S7xgOjT4xLYhhEQQo AEIMc3kjajQIDa1szotd12m9pjm2TnjQjn0fu7LZLj90XSKigmF1McfBXHM4h7zp U7toafDnKBX5C4s4ZCNnn2imPEuORnQzLLP6eh3uL5aYPCvi+QGTku3exnmJVR4i JuCflaNc7sQU7uNi/qiOX7B322LdYkPT9CCaUDDO6uS31+mOYrsWd4w5NO+0qNJC yZubm6pUzaRMDXthrtuAL4JelQ+eOuqiE6P/zWorRij6920Znz9Ivg39nJqPE0Vc 51sJvzamMHCQjbtPI2atD1rVHiI6Ns9XpFw= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:05 2026 by rpki-client