$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa File: 707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (raw, json) Hash identifier: kjDpVALQY8o2uHBCbFAswZspVg7qNmRZXCG9Knrxt2I= Subject key identifier: DB:4E:6D:1C:AD:D0:5E:3C:69:1E:48:BC:A6:32:07:24:19:BD:08:86 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584C7D7C54695407673F41925B80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 21766 IP address blocks: 2605:6600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:54:69:54:07:67:3f:41:92:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=8fcbb51c-3207-4b7c-b29d-9cfd5a9d7425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:ab:8a:4f:63:46:ad:c8:c8:a9:fd:46:97: d0:64:84:3e:f7:60:3e:c9:24:0f:43:96:21:2c:81: 33:da:91:b4:3e:c6:c1:7b:79:62:53:23:1a:aa:38: be:36:cd:5b:a9:0c:71:e1:60:9d:4c:cb:bc:c6:02: dd:1c:df:aa:35:1f:43:64:44:c9:82:76:14:e2:cd: 0e:bc:af:0e:5c:1f:1f:91:5c:ad:02:cb:7a:0d:f6: e9:11:17:f8:e3:ee:ad:f8:41:99:b2:1f:f2:47:e2: be:56:8c:ae:b8:c9:3d:97:a6:fb:f9:76:40:81:3f: b5:97:e6:5e:e3:f5:4c:2f:bc:1f:9a:29:6b:44:a7: 78:45:55:a1:f2:59:3c:84:fd:a3:68:da:16:39:dc: 5e:81:75:59:85:b6:f6:e2:8f:e2:89:68:f4:82:7b: 6b:6f:c6:37:ea:cd:8e:4d:22:47:63:86:d8:1f:fc: d8:83:e9:fc:56:ab:56:4e:66:99:e4:e5:89:ab:1e: 30:da:15:dc:79:6e:e2:f6:e6:19:43:25:cc:c9:a9: c1:9f:c7:f6:d2:5f:56:b1:e5:35:de:56:24:6b:bd: db:b1:bf:5a:67:ab:24:66:4d:98:a4:b4:1a:06:ae: 6f:7b:87:97:0e:21:f1:3a:3f:f9:24:b3:62:b4:ce: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4E:6D:1C:AD:D0:5E:3C:69:1E:48:BC:A6:32:07:24:19:BD:08:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:6600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:22:8c:a8:32:bf:2b:0c:f3:12:ab:cf:06:36:2d:af:3a:f2: b6:33:bf:c9:4d:9e:9c:ba:50:f4:ef:f2:16:44:3c:30:c3:b4: 51:ce:34:ff:12:e0:f4:49:c2:1a:21:df:1f:f4:e8:1a:e1:5a: 89:53:0b:bd:94:4f:c0:38:8b:fc:7d:99:e3:30:3c:c0:76:3f: 19:ee:b3:59:f1:62:44:b9:e4:56:a4:bb:05:3b:a4:04:6e:ad: 27:f9:19:57:52:c0:cc:75:10:f4:e3:59:ed:8b:b9:84:10:a5: dd:86:0b:79:2f:b4:03:d4:ca:fc:df:2c:e8:6e:95:9a:d7:a7: ff:cd:9a:2e:60:04:1f:77:83:79:a5:81:eb:c1:83:2f:c2:64: aa:f1:e3:f2:10:24:03:b5:b8:a4:1a:a6:8d:b9:c7:c5:95:50: 90:a7:13:37:02:77:1a:80:c9:a7:c5:07:fc:eb:79:42:96:22: 25:b8:b5:29:8b:25:65:98:5b:bb:91:05:a7:3b:76:e4:41:0f: ec:04:bc:0b:29:1a:62:97:a7:ca:83:d2:69:e7:48:74:a8:b9: 12:68:d8:9e:1a:69:e3:ad:dd:46:74:f8:97:bf:38:3d:7a:5a: fe:fa:7c:d5:d0:56:bb:0f:d9:eb:0e:00:db:ac:d3:f3:96:6d: 57:85:91:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEx9fFRpVAdnP0GSW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk OGZjYmI1MWMtMzIwNy00YjdjLWIyOWQtOWNmZDVhOWQ3NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRerik9jRq3IyKn9RpfQZIQ+92A+ySQPQ5Yh LIEz2pG0PsbBe3liUyMaqji+Ns1bqQxx4WCdTMu8xgLdHN+qNR9DZETJgnYU4s0O vK8OXB8fkVytAst6DfbpERf44+6t+EGZsh/yR+K+VoyuuMk9l6b7+XZAgT+1l+Ze 4/VML7wfmilrRKd4RVWh8lk8hP2jaNoWOdxegXVZhbb24o/iiWj0gntrb8Y36s2O TSJHY4bYH/zYg+n8VqtWTmaZ5OWJqx4w2hXceW7i9uYZQyXMyanBn8f20l9WseU1 3lYka73bsb9aZ6skZk2YpLQaBq5ve4eXDiHxOj/5JLNitM69hQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNtObRyt0F48aR5IvKYyByQZvQiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNzA3OTM0ZjAtMmJlNi0z Y2RmLWE1MTQtOWI0NGM1Y2E0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVmADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYIoyoMr8rDPMSq88GNi2vOvK2M7/JTZ6culD07/IWRDwww7RRzjT/ EuD0ScIaId8f9Oga4VqJUwu9lE/AOIv8fZnjMDzAdj8Z7rNZ8WJEueRWpLsFO6QE bq0n+RlXUsDMdRD041nti7mEEKXdhgt5L7QD1Mr83yzobpWa16f/zZouYAQfd4N5 pYHrwYMvwmSq8ePyECQDtbikGqaNucfFlVCQpxM3AncagMmnxQf863lCliIluLUp iyVlmFu7kQWnO3bkQQ/sBLwLKRpil6fKg9Jp50h0qLkSaNieGmnjrd1GdPiXvzg9 elr++nzV0Fa7D9nrDgDbrNPzlm1XhZET -----END CERTIFICATE-----Generated at Mon Mar 2 08:33:49 2026 by rpki-client