$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa File: af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa (raw, json) Hash identifier: M+pcLgIE1YOLWheQPUR1WEbNUmUfx8MxZokXYHII+MQ= Subject key identifier: 62:7B:03:3B:29:2E:9C:E5:61:1B:A0:21:C2:3E:69:DC:83:88:FB:C4 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC61215752DA0C4AEF362C550 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 16509 IP address blocks: 2620:147:c33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:15:75:2d:a0:c4:ae:f3:62:c5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=1b9686c6-5f37-40eb-bd95-c6175bd60386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:32:80:56:3f:cc:32:14:88:13:95:96:4a: cd:33:5d:5c:37:8b:a6:b3:51:c6:2f:51:73:b7:ce: bb:ea:88:ae:9c:be:4b:12:9e:e9:0b:93:4e:c4:3b: af:24:79:08:91:1f:40:10:44:b6:47:43:ca:51:8f: 32:4c:a5:77:8e:88:9c:6c:f2:b4:7c:ab:9c:ad:20: 11:0e:a5:67:96:55:4a:63:91:2e:92:b2:82:be:24: 42:c1:45:5d:81:8e:1b:3d:3c:22:90:7e:02:e9:fd: 94:3d:ec:d9:39:e4:41:e9:da:cf:02:08:fa:4a:f9: c1:18:aa:e7:a4:fb:55:86:73:3d:40:28:58:99:c7: 58:17:0a:15:ab:50:38:2b:1d:3e:a7:67:18:d1:c4: 95:1a:09:db:4f:60:67:1c:19:bf:79:9c:97:b4:c5: d7:eb:eb:e5:28:5a:23:7c:e7:60:8f:c7:46:fd:f2: 81:76:1c:d7:16:60:df:10:f7:89:51:bf:8f:43:fa: 45:67:0e:38:71:b5:c0:1c:e8:38:e6:42:92:8c:29: 5b:b1:b3:61:0b:c1:13:8c:a3:10:2c:87:a0:ce:3e: 33:12:8c:b0:70:54:9d:6c:7c:99:c0:02:c6:4f:eb: aa:6a:6a:c6:09:96:58:1b:ed:80:00:85:e0:23:12: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:03:3B:29:2E:9C:E5:61:1B:A0:21:C2:3E:69:DC:83:88:FB:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/af8aa6a6-16d0-3ecf-8262-5cc2874d1c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:64:f9:18:26:be:46:ec:3d:b6:8f:fb:ff:fa:e9:88:77:cf: 43:20:6e:25:01:6b:05:2d:cf:83:5f:c3:41:ea:66:bc:39:37: 83:4f:f3:8e:71:44:07:53:2b:65:81:54:2a:03:e6:61:50:44: 48:4a:b5:fa:0b:15:82:cb:dc:a1:96:6b:74:6f:9c:18:f5:cc: 49:6c:93:bd:9a:a1:03:78:cc:44:f9:f4:f1:41:6a:b3:06:a8: ea:05:a5:ba:19:78:cb:ac:f6:75:be:9d:76:fb:c2:73:bf:fd: f1:4d:ca:84:c1:d3:8b:66:aa:4b:87:d5:a2:be:56:24:19:1d: d3:55:49:5e:ed:6b:1d:86:56:2e:f5:a2:ed:24:ba:66:21:28: c3:4b:92:7e:7e:89:bc:9a:ed:b1:58:79:d2:03:d0:3b:9c:65: 3f:87:a5:46:7a:b5:f0:7a:79:77:e8:c5:ec:a3:07:30:df:ba: 2a:27:6f:c0:c2:87:16:29:e5:0e:33:53:79:7f:08:d2:a0:80: ec:99:55:83:cd:32:d6:b2:28:10:dd:71:41:e5:d2:e9:85:f1: 2a:4f:63:21:87:66:24:4c:7e:14:91:b4:e4:7c:b9:7f:77:3c: 9d:04:7c:e5:9e:e2:37:52:61:d9:73:70:df:6b:67:24:58:87: 39:6f:e3:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhV1LaDErvNixVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk MWI5Njg2YzYtNWYzNy00MGViLWJkOTUtYzYxNzViZDYwMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtooygFY/zDIUiBOVlkrNM11cN4ums1HGL1Fz t8676oiunL5LEp7pC5NOxDuvJHkIkR9AEES2R0PKUY8yTKV3joicbPK0fKucrSAR DqVnllVKY5EukrKCviRCwUVdgY4bPTwikH4C6f2UPezZOeRB6drPAgj6SvnBGKrn pPtVhnM9QChYmcdYFwoVq1A4Kx0+p2cY0cSVGgnbT2BnHBm/eZyXtMXX6+vlKFoj fOdgj8dG/fKBdhzXFmDfEPeJUb+PQ/pFZw44cbXAHOg45kKSjClbsbNhC8ETjKMQ LIegzj4zEoywcFSdbHyZwALGT+uqamrGCZZYG+2AAIXgIxK7KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJ7AzspLpzlYRugIcI+adyDiPvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYWY4YWE2YTYtMTZkMC0z ZWNmLTgyNjItNWNjMjg3NGQxYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA5k+RgmvkbsPbaP+//66Yh3z0MgbiUBawUtz4Nfw0HqZrw5N4NP 845xRAdTK2WBVCoD5mFQREhKtfoLFYLL3KGWa3RvnBj1zElsk72aoQN4zET59PFB arMGqOoFpboZeMus9nW+nXb7wnO//fFNyoTB04tmqkuH1aK+ViQZHdNVSV7tax2G Vi71ou0kumYhKMNLkn5+ibya7bFYedID0DucZT+HpUZ6tfB6eXfoxeyjBzDfuion b8DChxYp5Q4zU3l/CNKggOyZVYPNMtayKBDdcUHl0umF8SpPYyGHZiRMfhSRtOR8 uX93PJ0EfOWe4jdSYdlzcN9rZyRYhzlv43U= -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:09 2026 by rpki-client