$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa File: 4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa (raw, json) Hash identifier: g+rtfmE7t9Cqw1Vgat+jryRmx1BzxlKZxwMpCjRaB7I= Subject key identifier: F3:22:E3:CF:FD:C5:62:CC:17:B2:63:38:D3:BA:88:10:E0:E9:EB:75 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC612111312529FD85C184500 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 198949 IP address blocks: 2620:147:800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:11:13:12:52:9f:d8:5c:18:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=90c0601a-2a4b-44c5-934c-18fadc4dcd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:a1:0d:bb:3e:05:9c:e4:8c:47:23:2f:12: bc:9c:ac:be:6f:28:67:6b:ba:80:48:45:fd:71:7a: 41:3a:4b:d1:25:c6:95:d5:c7:1c:cd:34:e2:cb:fa: 05:d9:16:a7:2e:00:5a:a1:99:28:07:d7:80:15:b9: 39:20:07:3e:67:41:8d:b8:a3:98:92:29:e5:e4:c4: cc:e6:ad:d8:4c:56:cc:e7:1d:a0:76:19:69:1a:ee: db:7f:ed:d2:9b:15:d5:e2:d0:8b:35:f3:5b:27:32: 45:97:74:a9:00:ee:12:74:03:e9:53:37:7a:6a:2c: 68:02:af:93:ca:4e:eb:ca:c2:a7:9a:e1:24:92:8d: dd:af:f0:51:88:ae:34:81:f2:15:86:e5:9f:b8:91: 32:df:62:d9:5a:da:99:e6:52:3c:5c:3d:0f:c9:00: 12:c8:ba:88:a5:2b:35:c8:d5:15:14:42:00:e4:e1: 65:62:ee:9a:d1:ee:f6:d1:4c:00:50:21:06:db:d0: c2:e1:35:52:56:0d:61:e7:bc:10:ab:44:a9:88:eb: 95:66:d7:e7:77:90:94:ab:ae:71:2e:88:04:04:7a: 5a:11:aa:43:05:8f:ca:ef:99:e2:54:2e:e1:5e:0d: 3e:73:27:9e:58:fd:9c:cb:e9:b1:30:21:b8:4e:09: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:22:E3:CF:FD:C5:62:CC:17:B2:63:38:D3:BA:88:10:E0:E9:EB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4f2ef72d-5c05-31d0-99a1-10d03f55c689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:800::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3f:c0:07:ed:83:4b:06:9d:56:bd:54:0d:c2:24:5f:19:a4: 5d:b8:22:11:ae:0f:a6:94:00:26:ad:0d:f2:3b:04:c6:d7:ea: 06:c5:a0:07:e2:73:f6:3c:f5:53:37:bd:03:1c:4a:2a:e3:56: df:01:d9:80:d1:e4:ac:ac:a9:48:50:fb:ab:82:02:fd:b6:33: af:18:ed:42:fb:db:78:1f:02:eb:9b:91:57:38:ed:8d:70:ba: 8d:dd:53:f0:d7:21:56:17:94:71:5b:96:26:b3:75:45:7f:53: 5c:db:6d:c8:eb:06:34:18:7e:9c:3c:48:f0:33:a9:c2:8b:85: 70:ce:3e:21:01:15:b4:14:74:2b:a4:3f:ab:7c:64:dd:3f:95: 1e:27:cd:02:a8:55:c0:11:97:45:74:27:a6:39:7b:14:a1:cf: c1:3e:df:9c:a0:e5:6e:4c:2c:ae:87:2e:a3:60:6f:3a:dd:4a: 6d:16:af:e9:2b:50:a2:37:b2:62:5f:7e:d7:9e:1d:3d:5c:49: fc:6e:a7:ed:00:d6:51:90:c9:7f:a2:27:da:9d:8f:54:2e:f1: 8c:e9:af:d5:36:ce:8b:8c:eb:b7:77:4c:df:d7:cb:2c:fd:ac: ff:a4:b9:fa:8c:ef:ed:47:4d:b4:66:37:e0:4c:a3:64:86:1d: 65:51:fb:23 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzGEhETElKf2FwYRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk OTBjMDYwMWEtMmE0Yi00NGM1LTkzNGMtMThmYWRjNGRjZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2KhDbs+BZzkjEcjLxK8nKy+byhna7qASEX9 cXpBOkvRJcaV1ccczTTiy/oF2RanLgBaoZkoB9eAFbk5IAc+Z0GNuKOYkinl5MTM 5q3YTFbM5x2gdhlpGu7bf+3SmxXV4tCLNfNbJzJFl3SpAO4SdAPpUzd6aixoAq+T yk7rysKnmuEkko3dr/BRiK40gfIVhuWfuJEy32LZWtqZ5lI8XD0PyQASyLqIpSs1 yNUVFEIA5OFlYu6a0e720UwAUCEG29DC4TVSVg1h57wQq0SpiOuVZtfnd5CUq65x LogEBHpaEapDBY/K75niVC7hXg0+cyeeWP2cy+mxMCG4TgkfbwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPMi48/9xWLMF7JjONO6iBDg6et1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNGYyZWY3MmQtNWMwNS0z MWQwLTk5YTEtMTBkMDNmNTVjNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJiABRwgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcT/AB+2DSwadVr1UDcIkXxmkXbgiEa4PppQAJq0N8jsExtfqBsWg B+Jz9jz1Uze9AxxKKuNW3wHZgNHkrKypSFD7q4IC/bYzrxjtQvvbeB8C65uRVzjt jXC6jd1T8NchVheUcVuWJrN1RX9TXNttyOsGNBh+nDxI8DOpwouFcM4+IQEVtBR0 K6Q/q3xk3T+VHifNAqhVwBGXRXQnpjl7FKHPwT7fnKDlbkwsrocuo2BvOt1KbRav 6StQojeyYl9+154dPVxJ/G6n7QDWUZDJf6In2p2PVC7xjOmv1TbOi4zrt3dM39fL LP2s/6S5+ozv7UdNtGY34EyjZIYdZVH7Iw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:25 2026 by rpki-client