$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa File: d3b04fad-1045-30d6-952d-d673972e65cc.roa (raw, json) Hash identifier: Gffjeu3L7wwGRmKwlaXxZ6Z2tIiivndpFEAwk/Xa6uw= Subject key identifier: 3E:1A:1D:47:CE:0F:C0:69:4E:89:7E:35:1F:B5:5E:AF:37:C4:A4:C4 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F4328584CCD0CB2DE9D06E3C1B04443C0 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa Signing time: Mon 09 Feb 2026 02:00:31 +0000 ROA not before: Mon 09 Feb 2026 02:00:31 +0000 ROA not after: Sun 10 May 2026 01:00:31 +0000 asID: 271 IP address blocks: 2607:f8f0:1680::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:0c:b2:de:9d:06:e3:c1:b0:44:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Feb 9 02:00:31 2026 GMT Not After : May 10 01:00:31 2026 GMT Subject: CN=d92fa2d7-fd0e-40c7-b769-e6f404e26668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:28:e8:e2:55:39:91:5b:58:5b:2b:0f:b1: 25:1d:d6:a7:df:3a:27:dd:ef:82:1f:1b:38:57:13: 65:c1:aa:93:52:9d:7a:e8:94:58:15:0f:37:2d:45: ce:db:91:fe:6b:c7:a8:f3:0a:54:da:73:a3:e4:38: c5:bd:3a:ed:f6:40:15:1b:41:63:ec:88:ad:55:8b: 77:44:92:ac:91:f4:c9:c4:32:36:31:17:5e:38:f7: 7f:26:69:b4:ee:a7:2d:b0:96:5b:dd:9a:2f:3b:d2: 10:fb:37:16:f9:5d:85:8c:2c:c1:93:f7:65:dc:4b: ff:f0:12:ec:90:f2:be:75:11:0c:e5:3b:44:9c:5d: 5d:ca:a4:de:cb:3f:87:30:80:85:3b:32:ad:1a:0e: 87:b1:32:34:b8:42:a1:83:4e:63:3a:87:dd:45:5b: 2c:13:48:7c:e3:61:8d:52:af:f2:3b:f2:0b:4a:5e: a4:aa:51:7d:c1:ab:3f:2d:e0:1f:1c:77:c3:94:78: cd:d0:36:3d:79:90:18:7f:89:a9:6d:07:8e:88:64: 1f:cd:cc:73:cc:c1:40:22:21:b8:17:ba:38:b8:09: 64:c3:ae:3b:fb:5d:f2:37:90:a4:8e:ec:49:c8:e2: 9f:73:4e:06:ae:49:22:f0:36:43:54:8c:c5:54:20: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1A:1D:47:CE:0F:C0:69:4E:89:7E:35:1F:B5:5E:AF:37:C4:A4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/d3b04fad-1045-30d6-952d-d673972e65cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:1680::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:49:ca:b8:45:31:13:f5:d7:75:7c:18:5b:4d:bb:47:5d:84: 00:c1:9d:92:71:2d:df:d3:46:4f:91:1f:77:25:7e:21:ca:bd: a7:da:de:ff:67:ad:70:b1:62:9e:9f:82:8f:9a:36:eb:f1:5e: 5f:09:a7:c7:ad:22:07:41:35:4a:41:5e:4a:8b:19:88:31:8d: 0a:ba:42:d8:c1:25:65:14:ef:94:43:97:81:c0:b3:1f:a9:61: 41:07:05:57:b1:76:57:65:80:0a:71:90:f2:49:0c:3f:95:bb: 39:e1:bc:f8:d5:e7:dc:3e:66:a8:fa:6f:4f:56:aa:2d:76:37: 0b:3d:ac:a9:4a:23:7b:49:c1:67:de:bc:76:c2:fc:7c:60:b3: a2:58:50:a4:18:41:15:c1:e9:cd:35:58:12:2a:28:af:3c:e4: 03:88:76:b8:76:56:dc:aa:da:ca:ca:3c:9b:00:65:60:ee:10: 26:18:61:ca:62:30:b7:b5:33:16:3a:18:09:29:07:d7:29:e8: c3:b6:7e:42:e1:91:d9:92:87:9b:ed:91:78:07:9c:e2:7b:f5: bc:88:85:ed:c5:62:cb:fb:bf:06:06:88:27:46:9f:88:8a:ab: eb:ca:72:f6:6b:34:22:39:e2:69:0c:2a:6e:ef:bc:3b:2b:d5: d2:65:7e:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzNDLLenQbjwbBEQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDkyZmEyZDctZmQwZS00MGM3LWI3NjktZTZmNDA0ZTI2NjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKAo6OJVOZFbWFsrD7ElHdan3zon3e+CHxs4 VxNlwaqTUp166JRYFQ83LUXO25H+a8eo8wpU2nOj5DjFvTrt9kAVG0Fj7IitVYt3 RJKskfTJxDI2MRdeOPd/Jmm07qctsJZb3ZovO9IQ+zcW+V2FjCzBk/dl3Ev/8BLs kPK+dREM5TtEnF1dyqTeyz+HMICFOzKtGg6HsTI0uEKhg05jOofdRVssE0h842GN Uq/yO/ILSl6kqlF9was/LeAfHHfDlHjN0DY9eZAYf4mpbQeOiGQfzcxzzMFAIiG4 F7o4uAlkw647+13yN5CkjuxJyOKfc04Grkki8DZDVIzFVCD3lQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4aHUfOD8BpTol+NR+1Xq83xKTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZDNiMDRmYWQtMTA0NS0z MGQ2LTk1MmQtZDY3Mzk3MmU2NWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgf48BaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZJyrhFMRP113V8GFtNu0ddhADBnZJxLd/TRk+RH3clfiHKvafa 3v9nrXCxYp6fgo+aNuvxXl8Jp8etIgdBNUpBXkqLGYgxjQq6QtjBJWUU75RDl4HA sx+pYUEHBVexdldlgApxkPJJDD+VuznhvPjV59w+Zqj6b09Wqi12Nws9rKlKI3tJ wWfevHbC/Hxgs6JYUKQYQRXB6c01WBIqKK885AOIdrh2Vtyq2srKPJsAZWDuECYY YcpiMLe1MxY6GAkpB9cp6MO2fkLhkdmSh5vtkXgHnOJ79byIhe3FYsv7vwYGiCdG n4iKq+vKcvZrNCI54mkMKm7vvDsr1dJlfjs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:58 2026 by rpki-client