$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dd86e38b-dfe5-321b-b67d-746fc63198bb.roa File: dd86e38b-dfe5-321b-b67d-746fc63198bb.roa (raw, json) Hash identifier: r/BFQ7rxV2kjg4Qk0I3L+BiK6YxpVjAglMCOdAJ+jS4= Subject key identifier: 43:3E:27:E7:3C:16:DB:67:86:04:0C:FF:82:11:1C:66:5D:52:16:F4 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC61215E821978B5A5F557200 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dd86e38b-dfe5-321b-b67d-746fc63198bb.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 14618 IP address blocks: 2602:28c:2702::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:15:e8:21:97:8b:5a:5f:55:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=f649feb8-0347-4a13-9d46-79d8183558fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:fb:3c:6c:bd:37:ec:97:35:c1:ba:e1:ec: 84:46:08:80:a7:bf:01:47:51:8d:2b:a7:fd:79:43: cb:bf:c2:32:1a:e4:3a:e9:91:df:d2:c6:54:cf:4b: c3:d0:df:ee:fe:00:3b:09:4a:2c:c4:15:fc:d3:d1: 2d:58:ab:f6:04:c9:44:03:35:f0:53:9d:ff:83:6c: 7b:ad:ce:54:8d:6b:d0:db:73:53:a3:ac:4e:a6:d0: 28:1d:8e:0f:26:95:2b:ae:72:a6:07:eb:2c:99:82: 25:74:e3:44:79:10:ba:c1:9f:0e:5e:f5:1f:f5:e6: 3d:54:3a:60:0c:51:d6:fc:df:6e:42:df:d9:c9:de: 52:2a:dc:7a:cb:5f:26:3d:1d:0f:20:b5:b1:db:74: b9:58:d5:59:b1:0b:a8:b4:5a:c3:55:a5:02:d6:e6: 73:62:d4:fa:e1:f5:82:cc:6a:5a:2a:25:88:4a:13: 83:6b:3f:38:e8:fd:c9:11:32:45:8e:09:41:8f:3b: 4c:7a:43:00:bb:0e:4e:76:6c:aa:25:e8:fc:1c:8e: 67:92:a7:ce:5d:96:50:ab:96:83:44:12:3f:6a:10: 1a:99:f3:64:d7:65:9c:b6:ba:32:1c:94:12:57:8f: e6:ea:83:ee:a4:b7:ea:6a:07:d9:00:1d:7d:96:1f: 20:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3E:27:E7:3C:16:DB:67:86:04:0C:FF:82:11:1C:66:5D:52:16:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/dd86e38b-dfe5-321b-b67d-746fc63198bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:28c:2702::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:75:6a:2e:4e:a1:75:e0:2b:f0:22:64:62:2e:9f:e4:7b: 46:fc:89:0c:74:d3:84:35:c5:e4:d5:cb:bf:4a:9b:c9:7f:a5: 7b:46:a8:d8:0b:9c:84:6c:a0:34:64:a8:4b:b6:2a:81:2f:a8: 62:bb:f8:33:9d:3f:fa:8b:75:05:c5:78:29:65:3f:b5:4a:6c: 7f:e4:5a:a1:5e:d8:2e:2c:e8:be:11:b7:d5:c3:0e:da:2e:8c: b6:15:fb:93:c8:97:16:3d:37:ad:ff:8b:1e:52:18:9f:f5:c6: cc:5e:3e:1a:5d:a0:ba:95:e0:a5:9b:94:60:f8:cc:31:19:81: 76:84:10:62:5c:8e:0c:79:be:40:ec:54:68:c5:5d:1d:80:55: d4:2c:87:e3:45:ec:95:9f:72:d0:dc:45:7e:aa:d6:6f:b6:14: 06:5b:47:09:76:bc:d7:88:1f:52:79:04:bd:4b:2e:4c:f0:f7: c2:0c:da:a4:58:99:43:32:34:0f:9d:5e:f9:76:be:78:a7:44: 1e:0b:b9:4f:e3:ea:01:81:4b:46:f0:0d:29:57:29:bf:03:bc: db:8d:57:ee:24:67:5c:10:b5:ab:f2:dd:5a:07:7e:f4:f8:a2: 26:d7:d1:dd:70:7b:1b:36:ca:73:c0:e4:0d:fb:8d:0e:41:93: a8:53:73:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhXoIZeLWl9VcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk ZjY0OWZlYjgtMDM0Ny00YTEzLTlkNDYtNzlkODE4MzU1OGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLz7PGy9N+yXNcG64eyERgiAp78BR1GNK6f9 eUPLv8IyGuQ66ZHf0sZUz0vD0N/u/gA7CUosxBX809EtWKv2BMlEAzXwU53/g2x7 rc5UjWvQ23NTo6xOptAoHY4PJpUrrnKmB+ssmYIldONEeRC6wZ8OXvUf9eY9VDpg DFHW/N9uQt/Zyd5SKtx6y18mPR0PILWx23S5WNVZsQuotFrDVaUC1uZzYtT64fWC zGpaKiWIShODaz846P3JETJFjglBjztMekMAuw5OdmyqJej8HI5nkqfOXZZQq5aD RBI/ahAamfNk12WctroyHJQSV4/m6oPupLfqagfZAB19lh8g+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEM+J+c8FttnhgQM/4IRHGZdUhb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZGQ4NmUzOGItZGZlNS0z MjFiLWI2N2QtNzQ2ZmM2MzE5OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCcC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIr1dWouTqF14CvwImRiLp/ke0b8iQx004Q1xeTVy79Km8l/pXtG qNgLnIRsoDRkqEu2KoEvqGK7+DOdP/qLdQXFeCllP7VKbH/kWqFe2C4s6L4Rt9XD DtoujLYV+5PIlxY9N63/ix5SGJ/1xsxePhpdoLqV4KWblGD4zDEZgXaEEGJcjgx5 vkDsVGjFXR2AVdQsh+NF7JWfctDcRX6q1m+2FAZbRwl2vNeIH1J5BL1LLkzw98IM 2qRYmUMyNA+dXvl2vninRB4LuU/j6gGBS0bwDSlXKb8DvNuNV+4kZ1wQtavy3VoH fvT4oibX0d1wexs2ynPA5A37jQ5Bk6hTc9s= -----END CERTIFICATE-----Generated at Mon Mar 2 14:16:08 2026 by rpki-client