$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa File: 59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa (raw, json) Hash identifier: joB2xNIEcEuIkR05rSq2tyJZ3Pk+Ealy2mOmttBPaVw= Subject key identifier: 51:56:03:8E:D1:6E:D0:0D:63:E9:5C:6A:95:F9:81:90:D8:22:4D:9B Certificate issuer: /CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Certificate serial: 010D0C9F4328584CB121C5C47870A05DBC53C300 Authority key identifier: DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 396973 IP address blocks: 2620:112:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c5:c4:78:70:a0:5d:bc:53:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c8b616-1a95-4b1a-848f-f755fed5e23d Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=ef508aeb-c48d-4aba-b30f-8cddb26ca03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:d3:28:9a:13:71:bf:2a:34:4a:e2:ec:32: f2:f3:f1:9a:45:74:bf:d6:ee:1c:d1:1e:06:25:7e: 42:82:5b:92:55:25:97:45:ac:fb:65:5b:e4:e9:72: 1d:1f:1e:0c:ba:88:0f:7c:cb:c5:c8:43:a7:87:d1: 87:cc:1b:8f:2b:ec:ca:6f:90:7e:4e:f6:d2:e1:d7: 0b:76:4e:0f:12:66:9d:68:7f:a9:10:97:99:87:d5: 6f:35:06:1a:d3:a7:93:9c:61:bd:c0:b2:dd:ff:73: 66:d0:f1:73:1a:9c:70:48:23:13:a2:ac:e2:66:33: 89:d0:f7:ce:c7:d8:d4:7a:2a:b5:18:72:f4:5c:d7: aa:7a:1a:d6:3d:50:22:69:21:b7:31:da:c9:cf:87: 37:a6:b6:ee:17:a5:e7:1e:7f:e5:01:eb:19:ae:68: 10:b5:50:6f:32:e4:e8:e5:f6:e2:56:18:e2:e9:dd: a7:e5:13:14:88:26:7b:3e:b3:a8:d9:f7:83:db:c7: 7a:a3:a0:8a:ff:6c:ea:00:d4:17:83:67:d1:f2:a4: d0:f1:f0:2e:8e:b1:a3:19:a7:55:8a:40:97:1e:c8: d1:2d:6b:56:49:9f:dc:b0:51:4b:f9:7c:e7:5e:2b: 72:51:cd:ba:47:0e:4c:10:33:61:35:2a:49:cd:c6: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:03:8E:D1:6E:D0:0D:63:E9:5C:6A:95:F9:81:90:D8:22:4D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/59fcf8cc-67b8-309f-ad0a-2ec80931b80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d/09c8b616-1a95-4b1a-848f-f755fed5e23d.crl X509v3 Authority Key Identifier: keyid:DA:92:48:39:34:D2:A7:FD:AA:8D:07:A2:F7:DE:C2:83:0A:44:B3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/09c8b616-1a95-4b1a-848f-f755fed5e23d.cer sbgp-ipAddrBlock: critical IPv6: 2620:112:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ba:96:40:db:64:bc:6f:d6:42:32:e7:e4:8b:de:96:c8:80: 02:99:61:51:38:20:08:fe:58:d6:a7:6e:07:8e:bd:50:62:c4: a8:d2:e5:eb:ac:27:06:6a:9b:19:69:02:4c:03:92:b2:a6:a3: 18:ea:ec:84:25:34:ba:50:8d:f3:f5:7d:f6:6c:6d:0b:0d:46: 70:b8:d0:6a:9c:4d:ee:34:3a:c7:d5:2b:99:92:82:c1:4b:ac: bd:0b:23:3d:9b:a5:1e:61:7b:02:75:88:ba:17:b9:01:15:ff: ea:c4:1d:7a:9c:df:05:b0:a8:c0:f6:60:51:3c:33:7b:f3:fe: b9:09:f4:03:a9:aa:c2:39:bc:ab:df:2b:b4:1d:c3:99:d8:3b: ba:bf:4e:17:06:7b:f0:0d:5c:2b:ae:0b:ee:0b:e0:b6:a9:bb: 88:bb:63:a6:1a:3a:47:7b:21:17:24:49:a0:fc:93:0d:83:33: 1f:5e:30:fe:08:23:29:33:b2:6a:38:7c:83:6f:55:e2:c5:e0: 48:c5:09:01:54:93:c5:b2:1a:5e:39:13:10:74:89:a6:dd:45: f2:2b:48:93:a4:8a:72:c4:0d:80:69:df:39:d4:bb:97:cc:f5: a4:d0:d3:2f:7e:03:6d:94:bb:5a:51:c8:ba:0f:07:9d:e0:d4: c9:8b:db:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIcXEeHCgXbxTwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljOGI2MTYtMWE5NS00YjFhLTg0OGYtZjc1NWZlZDVl MjNkMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWY1MDhhZWItYzQ4ZC00YWJhLWIzMGYtOGNkZGIyNmNhMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOnTKJoTcb8qNEri7DLy8/GaRXS/1u4c0R4G JX5CgluSVSWXRaz7ZVvk6XIdHx4MuogPfMvFyEOnh9GHzBuPK+zKb5B+TvbS4dcL dk4PEmadaH+pEJeZh9VvNQYa06eTnGG9wLLd/3Nm0PFzGpxwSCMToqziZjOJ0PfO x9jUeiq1GHL0XNeqehrWPVAiaSG3MdrJz4c3prbuF6XnHn/lAesZrmgQtVBvMuTo 5fbiVhji6d2n5RMUiCZ7PrOo2feD28d6o6CK/2zqANQXg2fR8qTQ8fAujrGjGadV ikCXHsjRLWtWSZ/csFFL+XznXityUc26Rw5MEDNhNSpJzcb1XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFWA47RbtANY+lcapX5gZDYIk2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4 YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1ZmVkNWUyM2QvNTlmY2Y4Y2MtNjdiOC0z MDlmLWFkMGEtMmVjODA5MzFiODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDljOGI2MTYtMWE5NS00YjFhLTg0 OGYtZjc1NWZlZDVlMjNkLzA5YzhiNjE2LTFhOTUtNGIxYS04NDhmLWY3NTVmZWQ1 ZTIzZC5jcmwwHwYDVR0jBBgwFoAU2pJIOTTSp/2qjQei997CgwpEsyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wOWM4YjYxNi0xYTk1LTRiMWEtODQ4Zi1mNzU1 ZmVkNWUyM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABElAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALK6lkDbZLxv1kIy5+SL3pbIgAKZYVE4IAj+WNanbgeOvVBixKjS 5eusJwZqmxlpAkwDkrKmoxjq7IQlNLpQjfP1ffZsbQsNRnC40GqcTe40OsfVK5mS gsFLrL0LIz2bpR5hewJ1iLoXuQEV/+rEHXqc3wWwqMD2YFE8M3vz/rkJ9AOpqsI5 vKvfK7Qdw5nYO7q/ThcGe/ANXCuuC+4L4Lapu4i7Y6YaOkd7IRckSaD8kw2DMx9e MP4IIykzsmo4fINvVeLF4EjFCQFUk8WyGl45ExB0iabdRfIrSJOkinLEDYBp3znU u5fM9aTQ0y9+A22Uu1pRyLoPB53g1MmL2wE= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:25 2026 by rpki-client