$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa File: db23e48f-79db-3106-8cec-6be0feb1b42a.roa (raw, json) Hash identifier: HjftibaDR3fCqxvgcqdLLEkIdlQb2JBkwF00Q64e22s= Subject key identifier: 20:8E:16:61:FB:AD:45:F1:0C:D1:B3:BE:85:0C:F7:CF:85:31:9A:D2 Certificate issuer: /CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Certificate serial: 010D0C9F4328584CAFBC74014F1AFAED4DE26780 Authority key identifier: 80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 32267 IP address blocks: 2604:87c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:74:01:4f:1a:fa:ed:4d:e2:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebd57d4-bdbb-4203-975d-94b32833e8c7 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=fcff6e28-7278-4342-9c68-4be4e50d8835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:be:74:81:2d:a3:39:9c:b7:cc:dc:7d:1a: 40:80:d3:59:7e:58:f9:92:28:df:5b:99:5a:8c:7f: c6:36:e5:9a:37:c4:21:24:4d:1e:9d:0c:a5:6f:8d: be:70:05:39:28:67:20:04:98:ed:e3:69:ad:4a:1f: e6:28:80:c0:46:07:eb:2d:67:0f:e9:67:1a:d0:6c: 4c:96:3c:b9:7b:b0:58:01:9d:a5:be:d7:ff:f0:d2: 69:a3:9f:a1:8a:d8:fa:88:ab:97:3f:9d:20:af:2d: 42:16:ed:1a:bc:1b:9d:27:b5:41:94:2b:d3:cb:3a: 26:e9:9f:1a:90:24:63:e5:0c:d6:3d:3b:94:7e:19: 32:cb:3b:41:cb:c2:b6:ff:e6:f2:0f:a3:57:9f:b4: 0e:2c:d0:e5:bc:1d:3a:32:a1:1c:bb:18:7b:b9:59: 06:1b:d7:ed:75:b2:14:b9:05:b3:aa:4c:24:be:d9: c2:01:00:6e:e1:30:d2:33:b0:6b:56:a9:8e:38:56: 98:f6:f1:73:ea:6c:55:80:9d:58:bb:67:5a:fa:49: 1f:b2:77:7d:65:fb:f8:ae:44:5e:68:76:72:bc:3a: 96:34:80:24:96:19:68:4e:59:c2:2a:1e:cf:f3:e3: 2a:a2:7f:c9:36:1f:24:e4:b5:18:1e:bd:d6:37:8d: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8E:16:61:FB:AD:45:F1:0C:D1:B3:BE:85:0C:F7:CF:85:31:9A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/db23e48f-79db-3106-8cec-6be0feb1b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7/eebd57d4-bdbb-4203-975d-94b32833e8c7.crl X509v3 Authority Key Identifier: keyid:80:FE:92:AB:B8:62:45:0A:82:F6:C0:A2:93:0D:4E:92:4D:E4:23:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eebd57d4-bdbb-4203-975d-94b32833e8c7.cer sbgp-ipAddrBlock: critical IPv6: 2604:87c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:80:c3:dd:7b:88:92:5f:d7:7c:2f:5b:f6:bc:58:6b:f3:31: 9c:f6:9d:0f:d2:c4:2a:7b:90:21:2a:8a:13:fc:52:d0:dd:c1: 0f:44:f6:89:10:8f:a8:ec:a0:6d:cd:9f:0b:5a:7e:0f:df:39: 90:85:28:3c:ae:75:fb:6d:20:97:9b:13:22:3a:44:e2:39:c1: 08:ee:9c:9d:3d:38:ab:e1:9a:55:1b:fb:a5:3f:61:8e:3b:ac: 38:41:12:d0:b2:08:75:8e:b2:53:03:d8:9d:98:e0:a1:27:82: 14:d5:03:10:e7:05:cc:6c:4a:19:69:6e:92:8f:18:12:67:ed: d3:3b:6e:29:dc:9c:7d:04:52:ad:7e:4b:1e:39:9e:ea:91:ef: 13:8a:aa:8f:73:18:1a:47:10:bd:a5:04:e3:3c:95:ed:fe:fc: aa:4e:35:5f:ef:4f:39:37:9b:bb:18:61:e3:f9:d9:26:92:85: 9f:4b:a0:39:b0:db:49:c8:f5:4a:8b:97:49:56:43:2c:9c:84: dc:a9:93:4c:3e:0d:f4:60:a3:12:6c:9c:e7:f9:a3:25:4d:aa: 8d:02:ff:27:64:6b:7c:58:44:e9:b4:9a:13:6c:03:bd:80:f1: d2:6a:e7:e7:a9:93:6b:a0:ac:42:86:8f:d3:b3:7a:90:43:1b: 63:44:5a:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyvvHQBTxr67U3iZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWViZDU3ZDQtYmRiYi00MjAzLTk3NWQtOTRiMzI4MzNl OGM3MB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZmNmZjZlMjgtNzI3OC00MzQyLTljNjgtNGJlNGU1MGQ4ODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn02+dIEtozmct8zcfRpAgNNZflj5kijfW5la jH/GNuWaN8QhJE0enQylb42+cAU5KGcgBJjt42mtSh/mKIDARgfrLWcP6Wca0GxM ljy5e7BYAZ2lvtf/8NJpo5+hitj6iKuXP50gry1CFu0avBudJ7VBlCvTyzom6Z8a kCRj5QzWPTuUfhkyyztBy8K2/+byD6NXn7QOLNDlvB06MqEcuxh7uVkGG9ftdbIU uQWzqkwkvtnCAQBu4TDSM7BrVqmOOFaY9vFz6mxVgJ1Yu2da+kkfsnd9Zfv4rkRe aHZyvDqWNIAklhloTlnCKh7P8+Mqon/JNh8k5LUYHr3WN42WdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCCOFmH7rUXxDNGzvoUM98+FMZrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJk NTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIzMjgzM2U4YzcvZGIyM2U0OGYtNzlkYi0z MTA2LThjZWMtNmJlMGZlYjFiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWViZDU3ZDQtYmRiYi00MjAzLTk3 NWQtOTRiMzI4MzNlOGM3L2VlYmQ1N2Q0LWJkYmItNDIwMy05NzVkLTk0YjMyODMz ZThjNy5jcmwwHwYDVR0jBBgwFoAUgP6Sq7hiRQqC9sCikw1Okk3kI5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lZWJkNTdkNC1iZGJiLTQyMDMtOTc1ZC05NGIz MjgzM2U4YzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVgMPde4iSX9d8L1v2vFhr8zGc9p0P0sQqe5AhKooT/FLQ3cEPRPaJ EI+o7KBtzZ8LWn4P3zmQhSg8rnX7bSCXmxMiOkTiOcEI7pydPTir4ZpVG/ulP2GO O6w4QRLQsgh1jrJTA9idmOChJ4IU1QMQ5wXMbEoZaW6SjxgSZ+3TO24p3Jx9BFKt fkseOZ7qke8TiqqPcxgaRxC9pQTjPJXt/vyqTjVf7085N5u7GGHj+dkmkoWfS6A5 sNtJyPVKi5dJVkMsnITcqZNMPg30YKMSbJzn+aMlTaqNAv8nZGt8WETptJoTbAO9 gPHSaufnqZNroKxCho/Ts3qQQxtjRFoG -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:43 2026 by rpki-client