$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa File: 87423d02-64d1-33bf-971d-fc872853d448.roa (raw, json) Hash identifier: xEcxtlOOSi0vJ/Thqd/SpDwToqC0mNwDMU573Rpuhsk= Subject key identifier: 9E:49:0E:4C:54:6E:04:AA:03:64:4C:53:55:B4:B8:C5:F7:18:FE:8F Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584CB287215B9165D0510AFD19C0 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 271 IP address blocks: 2607:f8f0:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:21:5b:91:65:d0:51:0a:fd:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=ef9e6c5e-9737-449c-ab61-a6cf78750745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:62:00:de:bf:e8:15:6b:20:1e:89:76:20: 8c:5b:eb:c4:48:16:6b:dc:d8:92:b3:40:79:28:15: 62:42:25:fc:3a:7e:be:c5:3d:48:21:e7:e6:7a:cb: 1d:27:9f:9d:55:2f:55:04:ee:f5:05:86:43:63:1a: b2:bd:82:a2:b6:b4:f4:94:1b:08:c6:6d:83:f8:04: 97:0b:27:c5:35:7e:bb:40:26:22:6a:97:9c:ab:33: ee:ba:32:9c:da:55:bc:7f:88:40:9f:00:99:17:a1: 4b:65:fe:5e:01:4d:bd:51:07:be:25:fd:ed:65:0e: f6:b0:a7:02:5d:7a:0e:0e:0a:0e:14:b3:16:74:38: ed:2d:d8:76:18:78:84:d2:96:d0:c6:24:c4:26:61: 59:a8:46:73:e6:97:90:07:8c:f4:63:71:01:db:f5: 14:4a:4f:1c:f2:f6:41:c6:66:71:8a:08:cc:f8:c5: fc:b9:1b:ff:e4:0b:59:24:6b:47:33:20:32:97:17: e2:ef:ba:a2:ec:62:4e:f3:2e:a4:1f:37:5e:62:77: c9:da:6a:d7:91:d7:ad:4c:5b:d6:be:63:86:21:26: c4:e7:91:a7:fc:be:6e:a6:c0:04:8a:10:e1:9e:85: d3:c9:20:af:cb:4c:4b:8b:2c:d7:08:f3:8e:00:fe: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:0E:4C:54:6E:04:AA:03:64:4C:53:55:B4:B8:C5:F7:18:FE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/87423d02-64d1-33bf-971d-fc872853d448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b7:d5:9e:c6:86:7a:7d:85:5b:d7:8e:8b:57:0e:76:af:bf: d4:94:28:a7:84:4c:41:1a:b0:08:48:9f:58:a4:2f:38:ec:60: 0b:52:c2:f6:fc:94:31:5f:94:75:19:42:02:5b:aa:d6:be:fb: 5a:24:62:4e:a9:c7:1f:69:43:81:90:44:f0:63:d1:d4:c0:50: b3:c9:b4:27:96:ec:6d:d2:61:f2:af:87:d7:e2:ff:e6:3f:01: a3:76:08:bd:75:8b:44:92:d5:98:ed:8a:0b:ec:6e:c4:73:f6: 9f:41:c4:ae:19:6b:24:fa:66:2a:0c:d5:37:8f:d5:ed:d1:3f: d3:9f:bb:58:ad:0a:db:ff:47:fe:5b:2e:1b:9a:3d:55:c2:ff: 0a:a2:f7:b3:ec:3e:7a:40:43:4b:81:25:b0:da:17:1f:d8:5f: e6:47:27:13:ab:cf:76:25:66:58:5e:53:9f:b1:73:ae:98:38: 20:58:69:99:fd:5a:fa:64:12:96:30:d9:67:b8:c8:7f:1d:15: 26:30:a7:c1:30:03:6a:90:2e:b3:62:85:a0:0d:5b:14:4d:54: f0:58:6b:ea:9d:46:c3:fe:e7:0a:1a:5d:d7:81:51:d6:51:47: c9:22:29:44:89:cf:7b:50:88:29:d0:8d:5c:45:e4:f9:21:84: a9:b4:31:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyyhyFbkWXQUQr9GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWY5ZTZjNWUtOTczNy00NDljLWFiNjEtYTZjZjc4NzUwNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xiAN6/6BVrIB6JdiCMW+vESBZr3NiSs0B5 KBViQiX8On6+xT1IIefmessdJ5+dVS9VBO71BYZDYxqyvYKitrT0lBsIxm2D+ASX CyfFNX67QCYiapecqzPuujKc2lW8f4hAnwCZF6FLZf5eAU29UQe+Jf3tZQ72sKcC XXoODgoOFLMWdDjtLdh2GHiE0pbQxiTEJmFZqEZz5peQB4z0Y3EB2/UUSk8c8vZB xmZxigjM+MX8uRv/5AtZJGtHMyAylxfi77qi7GJO8y6kHzdeYnfJ2mrXkdetTFvW vmOGISbE55Gn/L5upsAEihDhnoXTySCvy0xLiyzXCPOOAP6bnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ5JDkxUbgSqA2RMU1W0uMX3GP6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvODc0MjNkMDItNjRkMS0z M2JmLTk3MWQtZmM4NzI4NTNkNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEG31Z7Ghnp9hVvXjotXDnavv9SUKKeETEEasAhIn1ikLzjsYAtS wvb8lDFflHUZQgJbqta++1okYk6pxx9pQ4GQRPBj0dTAULPJtCeW7G3SYfKvh9fi /+Y/AaN2CL11i0SS1ZjtigvsbsRz9p9BxK4ZayT6ZioM1TeP1e3RP9Ofu1itCtv/ R/5bLhuaPVXC/wqi97PsPnpAQ0uBJbDaFx/YX+ZHJxOrz3YlZlheU5+xc66YOCBY aZn9WvpkEpYw2We4yH8dFSYwp8EwA2qQLrNihaANWxRNVPBYa+qdRsP+5woaXdeB UdZRR8kiKUSJz3tQiCnQjVxF5PkhhKm0MSw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:36 2026 by rpki-client