$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d201e5b-ffda-3062-b794-e2d46da96338.roa File: 9d201e5b-ffda-3062-b794-e2d46da96338.roa (raw, json) Hash identifier: Ev2xjRh/nn/EHTJVYw/uPKQIaYxuavc6Wyj+CsuASEs= Subject key identifier: 1F:CC:76:AE:EF:C7:9C:C1:4C:E2:8D:F3:4D:DF:FD:56:D3:52:69:DA Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC61211BDD0336D0F140FCF00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d201e5b-ffda-3062-b794-e2d46da96338.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 198949 IP address blocks: 2620:147:148::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:11:bd:d0:33:6d:0f:14:0f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=e4d18848-5fa8-4e57-8291-c57b3be58850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:b9:b3:14:f3:3a:7d:6d:8a:c6:a1:62:24: 9d:b1:4d:f8:80:7e:24:61:81:83:2b:30:ab:53:85: 60:e0:9f:8f:a9:61:2a:43:c8:dc:e9:83:43:c3:8a: 10:de:7e:8b:2e:c0:2f:86:da:d9:df:dd:e1:9d:c0: 7f:7b:9c:a3:50:01:1b:a0:7e:6c:4d:1a:b0:16:3e: 33:ad:0e:e5:bd:d7:00:25:58:67:3d:43:31:91:ae: 89:16:fc:d3:2c:de:62:23:29:61:8c:0e:5b:23:e8: 25:52:15:16:26:fc:1d:66:06:e3:af:bd:cd:f3:b1: 48:eb:f6:d7:0c:cd:5a:96:a8:58:46:cb:f4:06:6d: 42:33:06:40:af:cf:89:7b:ef:67:e2:ab:78:58:5c: 0e:76:18:31:5b:9e:8e:2a:34:5b:d2:f4:f3:5b:91: 86:ac:81:3f:ca:86:4f:71:ac:11:69:71:35:db:1b: 0e:0e:00:9d:29:f9:03:e8:78:6e:19:bc:3f:90:f1: a3:86:6e:0e:96:cd:85:1e:c8:ff:69:4f:6e:66:6e: 10:70:4a:de:0c:32:1c:e3:df:95:ba:4a:38:92:38: fb:e9:50:da:99:f2:98:0d:97:c3:62:9c:5b:4d:fd: 9e:33:e9:a1:f2:cf:16:4c:8b:9e:10:12:07:e4:f8: d9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CC:76:AE:EF:C7:9C:C1:4C:E2:8D:F3:4D:DF:FD:56:D3:52:69:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9d201e5b-ffda-3062-b794-e2d46da96338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:148::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fc:24:06:74:06:a7:5c:f6:47:05:63:7d:8f:16:c9:d9:f7: 72:c2:a1:cd:aa:6a:9c:35:24:aa:7d:7b:c3:32:06:7b:2b:24: 4f:e8:47:2e:74:dd:5c:15:6c:51:9a:3f:5e:7d:80:81:9d:49: 70:da:01:ad:f1:fb:97:30:d1:6f:e2:dd:48:0e:65:9d:e1:50: 64:be:53:79:07:25:58:6f:39:ef:a1:0d:9a:e5:c7:aa:47:93: e8:b6:5c:1a:43:71:18:48:8e:c0:f9:1f:43:6b:3f:a9:96:50: e4:16:a7:b4:ef:7c:e2:e3:88:ba:5c:3a:96:d7:8b:30:42:4e: 65:d5:e4:e1:9f:2c:ee:7c:f4:26:d2:ab:0f:10:1c:3a:a1:9b: e5:1f:61:91:52:21:6f:b3:d9:d7:a6:76:b8:91:42:cc:b1:8c: 76:ec:28:7b:6b:b1:0e:cf:2a:49:cc:f4:f7:38:db:d5:b6:bd: 97:16:89:c6:b7:13:3e:9b:b6:71:64:0f:4d:3f:c2:c7:e3:81: 58:02:d4:bb:b4:80:91:d4:a0:b6:93:75:06:bc:10:da:83:f7: 67:84:32:c9:ff:b6:02:56:2c:a7:3a:ad:71:ee:4c:b9:94:5f: ef:83:05:c4:62:5a:40:fd:8f:c8:93:e9:2a:79:3a:c7:e8:94: 49:bf:47:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhG90DNtDxQPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk ZTRkMTg4NDgtNWZhOC00ZTU3LTgyOTEtYzU3YjNiZTU4ODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqye5sxTzOn1tisahYiSdsU34gH4kYYGDKzCr U4Vg4J+PqWEqQ8jc6YNDw4oQ3n6LLsAvhtrZ393hncB/e5yjUAEboH5sTRqwFj4z rQ7lvdcAJVhnPUMxka6JFvzTLN5iIylhjA5bI+glUhUWJvwdZgbjr73N87FI6/bX DM1alqhYRsv0Bm1CMwZAr8+Je+9n4qt4WFwOdhgxW56OKjRb0vTzW5GGrIE/yoZP cawRaXE12xsODgCdKfkD6HhuGbw/kPGjhm4Ols2FHsj/aU9uZm4QcEreDDIc49+V uko4kjj76VDamfKYDZfDYpxbTf2eM+mh8s8WTIueEBIH5PjZ3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/Mdq7vx5zBTOKN803f/VbTUmnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOWQyMDFlNWItZmZkYS0z MDYyLWI3OTQtZTJkNDZkYTk2MzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABRwFI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEj8JAZ0Bqdc9kcFY32PFsnZ93LCoc2qapw1JKp9e8MyBnsrJE/o Ry503VwVbFGaP159gIGdSXDaAa3x+5cw0W/i3UgOZZ3hUGS+U3kHJVhvOe+hDZrl x6pHk+i2XBpDcRhIjsD5H0NrP6mWUOQWp7TvfOLjiLpcOpbXizBCTmXV5OGfLO58 9CbSqw8QHDqhm+UfYZFSIW+z2demdriRQsyxjHbsKHtrsQ7PKknM9Pc429W2vZcW ica3Ez6btnFkD00/wsfjgVgC1Lu0gJHUoLaTdQa8ENqD92eEMsn/tgJWLKc6rXHu TLmUX++DBcRiWkD9j8iT6Sp5OsfolEm/R0s= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:19 2026 by rpki-client