$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e2d3aafe-dcb5-3eb2-8cbc-1ceb4b2fd319.roa File: e2d3aafe-dcb5-3eb2-8cbc-1ceb4b2fd319.roa (raw, json) Hash identifier: iMHLoYaMg7A0aYg8kbsEKHyePKjKLapOR7G9YVNKwtk= Subject key identifier: 96:B8:43:35:B4:AD:9F:81:3C:5B:8F:FA:F3:A8:82:0F:62:87:11:A9 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584CC612164ACC40DAACD8A5F180 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e2d3aafe-dcb5-3eb2-8cbc-1ceb4b2fd319.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 16509 IP address blocks: 2620:147:c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:12:16:4a:cc:40:da:ac:d8:a5:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=7db2a818-b6c0-4c8c-b065-72dcbe4a0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:23:bf:bd:c4:d6:95:68:a6:c1:ea:4a:7e: 1f:cd:23:f8:1a:5f:9f:33:e6:0b:34:b0:63:fd:df: f2:53:15:8e:4b:ec:1a:c6:56:bf:1c:bc:b8:d8:e2: 85:ad:37:be:da:83:9a:d7:90:79:49:e8:d5:14:dd: b1:c6:54:77:1e:c4:04:8b:88:0a:a2:23:26:d9:3d: b6:c5:4d:5a:aa:9f:96:3c:0c:e0:b2:73:6c:af:85: 3b:4f:fc:a2:c0:cc:4e:da:86:95:41:37:f9:76:32: 28:75:07:05:86:7e:05:e4:3d:db:5d:4a:46:15:d4: 94:d9:97:06:d7:3d:c4:3c:c2:9e:99:81:bd:87:d4: f5:6e:a4:ec:28:3b:7a:ec:e7:18:9d:48:f8:0c:46: 3a:36:6a:64:53:dc:f8:df:8a:40:44:09:4c:bc:33: 17:e0:3c:e6:38:db:4d:b9:c3:06:cf:bf:18:06:3c: 57:12:08:fd:e9:5c:ca:1a:cd:f9:06:2b:50:76:c3: a5:e8:d1:34:5a:a5:40:b5:ab:a3:d2:99:ab:53:65: 37:bc:35:c6:3a:57:ff:82:04:9c:21:bc:2a:4d:7d: d7:74:4a:1a:5d:5e:fd:b9:b6:db:d2:cd:16:fa:b0: 6b:b6:9a:aa:c7:c3:58:61:21:de:de:8a:9a:45:ec: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B8:43:35:B4:AD:9F:81:3C:5B:8F:FA:F3:A8:82:0F:62:87:11:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/e2d3aafe-dcb5-3eb2-8cbc-1ceb4b2fd319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:11:8e:73:9d:88:6e:48:d3:2d:ce:b7:71:6a:a1:b4:8c:60: c8:67:62:22:24:43:09:4c:88:a5:ab:d3:89:62:a0:9b:dc:38: 59:0d:b7:e6:8d:5b:38:d6:c3:01:4f:d7:43:70:ed:2e:31:92: 0a:c4:2a:b5:51:88:7e:02:47:71:a4:8e:89:cb:90:7a:fe:b1: 7f:45:0c:44:00:d1:e9:59:44:00:0c:d5:e8:fc:17:4d:8f:6e: 2d:ef:85:fc:a9:a6:e3:4e:4f:0c:32:20:0e:bf:49:fd:59:45: 21:10:e3:34:95:60:bf:c7:c1:88:51:a4:76:2f:ca:4c:94:d7: 02:16:19:41:57:e9:2f:f8:f7:ad:c4:b8:89:b4:04:6d:ca:6a: 74:a6:83:75:a7:ee:23:4a:bb:84:f9:2b:7a:5e:e7:46:e0:36: 6a:cd:8b:81:d4:7a:b6:ab:87:81:99:26:3d:d6:7c:7a:51:49: 2f:01:bc:0b:d4:4b:96:12:8d:75:df:f7:ba:40:91:2b:7c:7f: 6b:8d:f4:a3:64:18:79:9d:61:8f:46:f6:f7:a1:ad:17:cf:e6: c3:8f:b4:be:bb:f8:5d:04:d0:f2:4e:36:95:1a:ab:03:63:ae: da:83:6a:3e:59:b6:e6:e5:ef:b2:a7:53:96:e4:8c:85:f1:cb: e5:b5:57:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhZKzEDarNil8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk N2RiMmE4MTgtYjZjMC00YzhjLWIwNjUtNzJkY2JlNGEwMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Ejv73E1pVopsHqSn4fzSP4Gl+fM+YLNLBj /d/yUxWOS+waxla/HLy42OKFrTe+2oOa15B5SejVFN2xxlR3HsQEi4gKoiMm2T22 xU1aqp+WPAzgsnNsr4U7T/yiwMxO2oaVQTf5djIodQcFhn4F5D3bXUpGFdSU2ZcG 1z3EPMKemYG9h9T1bqTsKDt67OcYnUj4DEY6NmpkU9z434pARAlMvDMX4DzmONtN ucMGz78YBjxXEgj96VzKGs35BitQdsOl6NE0WqVAtauj0pmrU2U3vDXGOlf/ggSc IbwqTX3XdEoaXV79ubbb0s0W+rBrtpqqx8NYYSHe3oqaReymBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJa4QzW0rZ+BPFuP+vOogg9ihxGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZTJkM2FhZmUtZGNiNS0z ZWIyLThjYmMtMWNlYjRiMmZkMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIRjnOdiG5I0y3Ot3FqobSMYMhnYiIkQwlMiKWr04lioJvcOFkN t+aNWzjWwwFP10Nw7S4xkgrEKrVRiH4CR3GkjonLkHr+sX9FDEQA0elZRAAM1ej8 F02Pbi3vhfyppuNOTwwyIA6/Sf1ZRSEQ4zSVYL/HwYhRpHYvykyU1wIWGUFX6S/4 963EuIm0BG3KanSmg3Wn7iNKu4T5K3pe50bgNmrNi4HUerarh4GZJj3WfHpRSS8B vAvUS5YSjXXf97pAkSt8f2uN9KNkGHmdYY9G9vehrRfP5sOPtL67+F0E0PJONpUa qwNjrtqDaj5Ztubl77KnU5bkjIXxy+W1VwM= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:51 2026 by rpki-client