$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: jz45kCo2mOae1jY9XicgBLoaq2RMtmHN4fnnO9ZCbkU= Subject key identifier: 71:DE:DF:22:32:83:69:E1:05:6E:EE:D6:13:B7:08:25:F1:3F:8D:BD Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584C6E2185B3A9DA6F1D73A11F00 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:85:b3:a9:da:6f:1d:73:a1:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=8a911acf-006c-472f-ad24-cb0a58166e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:e3:fa:1f:9c:64:f8:61:04:18:0e:72:63: 1e:25:0c:5a:21:29:f6:00:9a:75:4a:b3:61:25:a8: 04:7a:bd:20:b8:97:2f:5f:ff:28:3d:c9:87:0d:52: 36:0e:ba:da:78:a3:3f:32:4d:40:37:84:cf:64:e3: c9:95:37:fb:b9:ff:68:31:90:46:15:76:88:7d:4b: 06:e2:9a:a9:8c:b9:90:04:41:ae:b6:e3:06:99:41: f9:a7:e9:8f:7d:ec:d4:d9:6a:02:e8:50:be:38:a0: 27:5b:35:b1:42:9e:53:59:0a:a7:b1:ca:95:8b:79: a4:ce:07:e3:c9:84:de:02:cc:6a:00:cf:28:bf:36: 48:35:7c:38:b7:62:4b:b9:0c:3c:7b:ef:4c:17:86: 13:ad:49:79:54:ad:2e:83:1e:66:7d:a1:a1:fe:9b: 93:c9:bf:a8:4b:ae:8c:b9:20:a6:e0:be:5a:84:f5: 13:7e:28:65:8c:4a:11:be:00:bf:08:64:4c:58:31: 01:bf:c6:ea:17:ef:12:a4:de:fa:0d:52:62:a1:e2: 0f:da:4c:95:e3:3f:eb:59:ee:6a:02:02:1c:4e:4e: 60:40:17:0b:d7:cb:0c:51:80:32:fa:fa:ea:8d:36: 8f:c2:db:d4:64:64:fe:f5:e8:5f:76:36:cd:17:32: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:DF:22:32:83:69:E1:05:6E:EE:D6:13:B7:08:25:F1:3F:8D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:05:77:f6:0c:8e:6a:8d:9a:cf:db:25:69:2e:67:85:c5:22: da:07:c9:96:d3:56:45:86:9e:62:74:a4:30:d2:5e:62:cc:d0: c5:42:69:f9:b0:8a:28:36:58:20:f8:56:bf:7c:2a:13:c6:33: f8:17:53:f2:fa:1f:76:b3:7b:59:e4:aa:7d:2e:15:cf:d3:b5: 9b:c6:35:ad:4a:16:46:2e:52:01:b7:b8:8d:c7:83:bc:5e:d2: b1:c7:54:94:c0:3e:6a:27:6a:33:b6:97:0b:be:cd:a0:21:29: 0f:26:a0:bb:00:7f:50:37:06:19:9f:03:eb:e9:fa:39:fb:57: 0e:7e:cc:2e:6a:4a:8b:da:50:a8:cd:eb:ba:91:27:1d:b3:12: 66:cb:1d:2d:27:e2:98:ae:5b:02:67:68:57:d0:e0:a0:b3:4b: 69:0c:37:bc:11:53:da:83:93:7e:69:db:d4:4b:28:62:4b:6a: ae:fa:9f:e1:b5:61:b7:3d:06:19:32:02:33:63:52:1a:e4:3c: 15:50:ef:98:94:65:b2:ef:7c:11:3c:35:7f:68:63:47:d9:ee: 39:82:12:e6:d5:e5:af:9c:17:70:c5:1a:bf:2e:ef:bc:19:79: c9:88:f4:76:fa:cc:78:f9:eb:99:d4:57:4c:12:08:f2:51:cf: 5e:bb:45:c6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExuIYWzqdpvHXOhHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk OGE5MTFhY2YtMDA2Yy00NzJmLWFkMjQtY2IwYTU4MTY2ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqzj+h+cZPhhBBgOcmMeJQxaISn2AJp1SrNh JagEer0guJcvX/8oPcmHDVI2DrraeKM/Mk1AN4TPZOPJlTf7uf9oMZBGFXaIfUsG 4pqpjLmQBEGutuMGmUH5p+mPfezU2WoC6FC+OKAnWzWxQp5TWQqnscqVi3mkzgfj yYTeAsxqAM8ovzZINXw4t2JLuQw8e+9MF4YTrUl5VK0ugx5mfaGh/puTyb+oS66M uSCm4L5ahPUTfihljEoRvgC/CGRMWDEBv8bqF+8SpN76DVJioeIP2kyV4z/rWe5q AgIcTk5gQBcL18sMUYAy+vrqjTaPwtvUZGT+9ehfdjbNFzKenwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHHe3yIyg2nhBW7u1hO3CCXxP429MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAxwV39gyOao2az9slaS5nhcUi2gfJltNWRYaeYnSkMNJeYszQxUJp +bCKKDZYIPhWv3wqE8Yz+BdT8vofdrN7WeSqfS4Vz9O1m8Y1rUoWRi5SAbe4jceD vF7SscdUlMA+aidqM7aXC77NoCEpDyaguwB/UDcGGZ8D6+n6OftXDn7MLmpKi9pQ qM3rupEnHbMSZssdLSfimK5bAmdoV9DgoLNLaQw3vBFT2oOTfmnb1EsoYktqrvqf 4bVhtz0GGTICM2NSGuQ8FVDvmJRlsu98ETw1f2hjR9nuOYIS5tXlr5wXcMUavy7v vBl5yYj0dvrMePnrmdRXTBII8lHPXrtFxg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:28:58 2026 by rpki-client