$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa File: 4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa (raw, json) Hash identifier: FyWfe50FNzKXpA1qWjklPm+z3DrFtOF0PlaGpiqliFA= Subject key identifier: 29:21:F1:E8:A1:F6:3D:ED:92:B4:92:DE:72:C2:95:D9:90:A3:CE:E5 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC61213039E5482F251F9B440 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 198949 IP address blocks: 2620:147::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:13:03:9e:54:82:f2:51:f9:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=39058dc3-25b6-4711-b055-7d4726cf2f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:94:a9:b6:bd:b5:d1:3f:95:ff:1d:c6:85: 49:da:38:d5:35:fc:6c:0b:3e:ac:93:f9:3b:14:25: 24:e0:8c:0f:29:27:73:03:a7:3a:20:ac:8e:3b:20: 0f:55:e9:c8:1c:22:72:65:7d:2f:24:f2:28:48:21: d3:2d:9c:a0:f1:a4:9d:35:88:82:35:6c:78:e6:90: 79:3e:9f:0f:c9:8a:cc:ad:4a:3e:8c:ed:58:35:1e: e3:67:55:6f:43:7f:79:b7:ce:20:4b:5b:e0:23:62: c4:fd:71:d5:e0:3a:e9:1e:18:b1:11:cd:87:a0:23: bc:2d:33:fb:9b:7f:97:f9:b8:17:65:58:8a:8f:9c: fc:2c:21:1e:36:bc:59:d7:73:24:56:78:32:c7:b9: 18:1a:7e:62:31:cb:9c:9e:15:25:da:19:20:c6:b2: 35:d0:88:c5:6a:68:9c:37:d9:35:a7:0c:77:86:88: 98:22:9f:32:99:e9:d6:89:21:c8:bd:0e:29:ff:2c: a5:99:7c:92:bc:52:f5:c1:2a:76:b3:ac:87:87:25: 3e:fe:4b:c2:9a:72:8c:ff:02:dc:16:3a:e1:da:92: 4f:d3:32:9e:8d:a6:d3:eb:98:4c:d3:fa:17:b3:69: bd:bc:63:20:aa:c2:7b:3f:0c:25:73:ce:e9:83:bb: 73:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:F1:E8:A1:F6:3D:ED:92:B4:92:DE:72:C2:95:D9:90:A3:CE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/4fca7263-a412-3fbe-bb79-2fa9f01fa83c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e3:13:4b:e7:74:37:9f:8b:99:38:cc:53:4f:ad:0f:a6:ba: e0:a2:5a:ce:d3:e6:fe:48:a2:dd:1d:b2:9f:64:9e:15:49:54: 77:1c:ba:e0:b3:ca:2f:ab:cc:6e:91:a9:de:90:72:ca:03:36: 2e:1d:ca:9b:31:58:f9:ef:58:f5:6a:4f:77:ef:47:ea:5c:3a: ad:40:b8:23:d4:86:c4:b6:5a:e6:5f:c3:6f:15:61:58:19:f0: fb:30:f9:c6:53:37:8d:19:6d:ba:14:e9:25:4d:29:e0:1b:11: 99:35:b2:f8:1c:80:90:51:bb:b4:dc:ac:f6:cd:0f:ec:cc:a7: e5:1b:5e:fe:0d:78:e2:8d:8a:ef:be:df:7b:e4:2e:a8:d2:28: f3:21:0a:70:c2:6d:8a:c1:64:cc:c3:96:f7:f1:b7:84:22:76: 34:97:1c:d9:27:bb:4e:2a:87:b0:c9:17:ad:27:fc:12:80:7e: 56:05:6e:c4:48:7f:32:ff:5e:19:0c:97:1f:a3:5c:1d:e5:22: f6:43:4c:2f:67:c0:6a:57:ec:2c:bf:bf:c0:0e:f6:b0:23:b4: c3:d8:89:ea:84:16:59:0a:a9:77:98:e0:e3:b1:aa:01:ff:13: a3:6b:36:b5:63:df:80:02:4e:a4:8e:d4:d9:29:f0:a0:d2:53: 07:9d:bc:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhMDnlSC8lH5tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MzkwNThkYzMtMjViNi00NzExLWIwNTUtN2Q0NzI2Y2YyZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicSUqba9tdE/lf8dxoVJ2jjVNfxsCz6sk/k7 FCUk4IwPKSdzA6c6IKyOOyAPVenIHCJyZX0vJPIoSCHTLZyg8aSdNYiCNWx45pB5 Pp8PyYrMrUo+jO1YNR7jZ1VvQ395t84gS1vgI2LE/XHV4DrpHhixEc2HoCO8LTP7 m3+X+bgXZViKj5z8LCEeNrxZ13MkVngyx7kYGn5iMcucnhUl2hkgxrI10IjFamic N9k1pwx3hoiYIp8ymenWiSHIvQ4p/yylmXySvFL1wSp2s6yHhyU+/kvCmnKM/wLc Fjrh2pJP0zKejabT65hM0/oXs2m9vGMgqsJ7Pwwlc87pg7tzLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkh8eih9j3tkrSS3nLCldmQo87lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNGZjYTcyNjMtYTQxMi0z ZmJlLWJiNzktMmZhOWYwMWZhODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbjE0vndDefi5k4zFNPrQ+muuCiWs7T5v5Iot0dsp9knhVJVHcc uuCzyi+rzG6Rqd6QcsoDNi4dypsxWPnvWPVqT3fvR+pcOq1AuCPUhsS2WuZfw28V YVgZ8Psw+cZTN40ZbboU6SVNKeAbEZk1svgcgJBRu7TcrPbND+zMp+UbXv4NeOKN iu++33vkLqjSKPMhCnDCbYrBZMzDlvfxt4QidjSXHNknu04qh7DJF60n/BKAflYF bsRIfzL/XhkMlx+jXB3lIvZDTC9nwGpX7Cy/v8AO9rAjtMPYieqEFlkKqXeY4OOx qgH/E6NrNrVj34ACTqSO1Nkp8KDSUwedvBY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:41:05 2026 by rpki-client