$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9d708a05-a53f-3fa3-a2cf-a7f4c3199886.roa File: 9d708a05-a53f-3fa3-a2cf-a7f4c3199886.roa (raw, json) Hash identifier: QVuMqSrX+E5CDelb93GPbVpXfxGJl1LC/aGb8kN+2r0= Subject key identifier: 3B:74:A1:19:85:56:1D:E4:32:A9:6C:6B:61:C9:48:2D:3D:0C:38:8F Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584CC611E972B016BAEE95DADC48 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9d708a05-a53f-3fa3-a2cf-a7f4c3199886.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 13807 IP address blocks: 2607:5e80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:e9:72:b0:16:ba:ee:95:da:dc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=321b9fab-3a8f-45c4-94c5-e8dff9b45bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:8e:d8:2e:3f:8f:e6:d2:eb:b2:61:54:54: 46:4b:b2:a3:d9:1e:bb:8b:db:97:71:b6:08:b4:de: b3:31:62:a4:37:0b:61:e4:c7:c6:47:05:1c:48:72: eb:7a:31:56:ae:1a:53:b0:64:d9:e1:02:c2:86:f3: 72:ed:db:0a:1f:86:b9:60:e3:9d:bc:41:c5:c8:f1: e0:66:17:3c:e1:d5:49:c4:b3:c3:f8:e3:5d:bb:10: eb:0a:8c:bb:42:c9:29:70:7e:ca:9a:24:c2:a8:a6: 76:aa:b4:0a:58:96:5b:41:f5:cb:b1:af:11:d1:02: 32:64:91:ae:9d:a8:28:ad:88:54:14:83:ca:2b:b0: af:fb:99:f9:ff:22:48:5a:dd:54:d9:ec:90:1a:f3: 2e:0b:4f:48:ad:89:fa:cc:77:69:af:25:58:68:ff: be:d1:57:e8:6a:a7:08:7b:d7:de:43:1d:2e:54:6b: 7c:a3:c8:86:f1:bc:73:42:4b:a2:0f:9b:27:46:4f: f7:a1:63:3f:a1:20:d5:67:b4:89:05:9c:0f:fb:69: ab:a9:64:cb:aa:dd:39:92:58:cb:5c:ee:cd:9e:da: ae:28:ae:c1:23:5b:cf:6b:10:10:25:8e:70:08:33: 7c:0b:00:53:d0:45:08:43:09:06:d9:8b:8a:1b:1f: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:74:A1:19:85:56:1D:E4:32:A9:6C:6B:61:C9:48:2D:3D:0C:38:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/9d708a05-a53f-3fa3-a2cf-a7f4c3199886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2607:5e80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d7:49:97:10:b3:0e:d0:60:45:03:a5:ca:30:40:13:c0:41: e2:29:e5:59:ed:b0:46:50:b1:89:a3:47:61:95:97:36:82:e8: 63:89:33:c1:9b:5b:82:7e:ff:6c:f6:84:6b:20:84:f4:3b:82: 11:8a:ab:b6:0e:8a:52:e3:54:40:44:9d:99:06:52:67:a7:c1: 81:d9:62:35:bb:c5:19:97:d0:f9:de:02:69:f3:04:50:b9:28: d1:32:69:f2:13:8f:56:61:76:b6:56:d1:e1:ec:36:43:0b:6e: b9:99:11:45:d0:ec:e7:4c:63:8a:69:dc:94:6c:26:ef:04:99: bb:b9:9c:00:dd:0b:49:be:c1:52:5c:ab:dd:89:ac:e4:37:99: 11:66:f1:79:8c:7c:4b:21:2b:f7:8d:3d:88:0f:04:11:9d:31: a3:2d:ce:9b:48:0a:9f:01:b4:4f:2f:05:00:40:43:5a:7b:e7: d0:e8:ea:da:9d:4f:26:75:2b:ea:ef:e6:a2:d8:e0:c7:37:31: f9:28:f1:63:c6:ae:22:61:be:87:2c:dd:f0:41:84:da:3d:00: 33:8a:d1:2a:f2:f1:5b:c7:69:f0:43:56:1b:4b:a5:a5:51:85: 97:a8:34:fe:d4:f0:ac:f8:bd:8e:62:d2:4d:4f:93:f4:98:ab: b0:92:56:22 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzGEelysBa67pXa3EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MzIxYjlmYWItM2E4Zi00NWM0LTk0YzUtZThkZmY5YjQ1YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj2O2C4/j+bS67JhVFRGS7Kj2R67i9uXcbYI tN6zMWKkNwth5MfGRwUcSHLrejFWrhpTsGTZ4QLChvNy7dsKH4a5YOOdvEHFyPHg Zhc84dVJxLPD+ONduxDrCoy7QskpcH7KmiTCqKZ2qrQKWJZbQfXLsa8R0QIyZJGu nagorYhUFIPKK7Cv+5n5/yJIWt1U2eyQGvMuC09IrYn6zHdpryVYaP++0VfoaqcI e9feQx0uVGt8o8iG8bxzQkuiD5snRk/3oWM/oSDVZ7SJBZwP+2mrqWTLqt05kljL XO7NntquKK7BI1vPaxAQJY5wCDN8CwBT0EUIQwkG2YuKGx+JoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDt0oRmFVh3kMqlsa2HJSC09DDiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvOWQ3MDhhMDUtYTUzZi0z ZmEzLWEyY2YtYTdmNGMzMTk5ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdegDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBb10mXELMO0GBFA6XKMEATwEHiKeVZ7bBGULGJo0dhlZc2guhjiTPB m1uCfv9s9oRrIIT0O4IRiqu2DopS41RARJ2ZBlJnp8GB2WI1u8UZl9D53gJp8wRQ uSjRMmnyE49WYXa2VtHh7DZDC265mRFF0OznTGOKadyUbCbvBJm7uZwA3QtJvsFS XKvdiazkN5kRZvF5jHxLISv3jT2IDwQRnTGjLc6bSAqfAbRPLwUAQENae+fQ6Ora nU8mdSvq7+ai2ODHNzH5KPFjxq4iYb6HLN3wQYTaPQAzitEq8vFbx2nwQ1YbS6Wl UYWXqDT+1PCs+L2OYtJNT5P0mKuwklYi -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:58 2026 by rpki-client