$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa File: 40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa (raw, json) Hash identifier: TN4wIpw8+LRCJlvMGQjf0yHU/oldrodowEotLdJYKMA= Subject key identifier: A4:A4:19:BA:11:06:5D:24:94:5E:40:4F:E8:8E:38:BE:2C:70:07:E3 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584CAFBC7089E0A753272202F600 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 271 IP address blocks: 2607:f8f0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:70:89:e0:a7:53:27:22:02:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=f844cbdb-435e-48de-8804-443d344d8135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:76:f3:8a:be:c8:74:fd:43:25:c7:7b:40:47: e8:1c:d8:a8:57:04:ff:d4:fc:c4:e5:7d:2e:b2:6e: c2:90:b8:aa:e9:dd:85:b9:9f:18:e0:61:4c:a6:72: 84:88:22:46:83:a1:df:8d:44:75:16:fd:89:e3:65: b3:37:20:cf:99:e8:23:0e:7d:7c:21:23:f3:c7:97: c0:81:54:fc:cd:93:48:fa:a0:c4:ae:08:a5:82:12: e8:03:7d:bf:5b:f1:7b:8c:46:18:64:8f:d2:da:10: 1f:24:a3:70:5f:2b:b5:9e:3e:ee:79:69:8b:6e:cc: ef:e3:88:1d:b2:b6:af:0f:8f:40:81:8f:ef:68:5f: a4:b5:10:2d:2c:03:ec:c4:28:03:56:c1:48:fe:ae: 7a:6f:76:e4:ba:9a:8f:e4:28:62:f5:ac:96:58:16: 56:16:d8:f6:30:54:a3:35:38:27:6b:cf:94:8d:ed: 48:ab:43:d2:09:13:95:5c:86:85:a5:1f:48:d8:db: 29:f7:04:94:7f:14:b4:39:4b:d2:ba:77:e5:41:6d: 15:64:ab:b0:77:9a:53:ff:29:c6:f7:ef:23:40:40: e9:35:fe:e2:83:55:6f:b4:9c:39:78:6f:ec:4b:48: 63:25:2a:30:40:37:92:58:5a:cc:64:58:b5:bd:8f: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A4:19:BA:11:06:5D:24:94:5E:40:4F:E8:8E:38:BE:2C:70:07:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/40c0afd6-6ba2-3e72-8557-b9d0ea995eb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a6:fb:00:72:1c:97:11:5a:a4:a9:48:4e:48:69:25:e4:a3: c5:73:a8:4e:5b:59:d6:53:7f:97:f1:da:0a:9a:40:ca:c9:28: c7:72:4f:a7:b0:fa:47:f6:45:1f:f2:41:d7:5b:c8:0e:00:d7: 05:b6:c5:1b:36:51:7f:93:fd:aa:1f:33:da:e7:72:71:74:ff: a1:94:d5:1c:87:cd:63:18:22:78:03:15:0e:fb:45:c7:c7:10: 4f:8e:6c:0b:17:98:a9:50:ef:d3:ae:71:b0:78:95:a8:63:e8: cb:e3:a4:90:12:3a:95:28:63:ef:d8:c2:eb:d8:23:6c:77:91: 1c:2c:99:55:68:d8:6a:5e:48:80:46:fe:f1:1d:73:83:85:cd: f8:87:98:78:1c:76:3e:fb:4d:f1:0f:d9:50:b0:8b:40:3b:54: 71:79:24:7e:6b:49:c0:c0:58:56:f3:3c:24:e5:4b:ad:39:0c: bc:0d:10:9c:30:af:94:7f:f1:5f:f5:a6:de:46:69:5e:73:70: a8:6c:8d:cc:00:55:12:70:0b:27:f4:91:a4:11:26:69:a7:e1: 7f:05:9a:97:f8:a7:19:01:b2:7f:5b:9a:ac:97:03:3e:39:53: 51:52:45:58:fb:3e:71:1c:22:c4:58:06:d1:68:91:8c:3f:b9: 47:c9:fc:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyvvHCJ4KdTJyIC9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Zjg0NGNiZGItNDM1ZS00OGRlLTg4MDQtNDQzZDM0NGQ4MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3bzir7IdP1DJcd7QEfoHNioVwT/1PzE5X0u sm7CkLiq6d2FuZ8Y4GFMpnKEiCJGg6HfjUR1Fv2J42WzNyDPmegjDn18ISPzx5fA gVT8zZNI+qDErgilghLoA32/W/F7jEYYZI/S2hAfJKNwXyu1nj7ueWmLbszv44gd sravD49AgY/vaF+ktRAtLAPsxCgDVsFI/q56b3bkupqP5Chi9ayWWBZWFtj2MFSj NTgna8+Uje1Iq0PSCROVXIaFpR9I2Nsp9wSUfxS0OUvSunflQW0VZKuwd5pT/ynG 9+8jQEDpNf7ig1VvtJw5eG/sS0hjJSowQDeSWFrMZFi1vY8bYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKSkGboRBl0klF5AT+iOOL4scAfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvNDBjMGFmZDYtNmJhMi0z ZTcyLTg1NTctYjlkMGVhOTk1ZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48ABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAKm+wByHJcRWqSpSE5IaSXko8VzqE5bWdZTf5fx2gqaQMrJKMdy T6ew+kf2RR/yQddbyA4A1wW2xRs2UX+T/aofM9rncnF0/6GU1RyHzWMYIngDFQ77 RcfHEE+ObAsXmKlQ79OucbB4lahj6MvjpJASOpUoY+/YwuvYI2x3kRwsmVVo2Gpe SIBG/vEdc4OFzfiHmHgcdj77TfEP2VCwi0A7VHF5JH5rScDAWFbzPCTlS605DLwN EJwwr5R/8V/1pt5GaV5zcKhsjcwAVRJwCyf0kaQRJmmn4X8Fmpf4pxkBsn9bmqyX Az45U1FSRVj7PnEcIsRYBtFokYw/uUfJ/Fk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:00 2026 by rpki-client