$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa File: cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa (raw, json) Hash identifier: kWU1vAMwabwOrKgWJrtVQk+L0xka76FGm389FYb7Clk= Subject key identifier: 11:E2:61:17:5D:2E:72:3A:15:34:A8:EE:91:0F:E9:29:BE:0A:DB:9D Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584CAE5719523E68DF4C6A1B1F00 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 398395 IP address blocks: 2602:ffc5:10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:19:52:3e:68:df:4c:6a:1b:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=38c59d78-1964-48ff-8859-14f9ac934d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:7a:b5:32:ec:c8:6f:6b:4b:bd:33:ba:3c: 43:f0:87:ee:1a:64:9d:78:83:c0:91:f0:f3:8c:23: c2:76:e9:8a:94:8b:f4:c8:c6:94:35:4d:80:e4:a5: f2:20:09:b5:18:6b:5d:d5:01:a0:51:04:b5:3f:d4: 76:79:82:af:a7:da:83:3c:f8:32:6a:66:7e:09:a0: d0:b8:a2:3f:7a:60:c8:d1:38:bd:91:75:57:a3:85: 89:ca:c2:6c:41:27:4a:7c:8a:8a:ac:fb:99:54:38: dd:57:9c:65:b1:13:c9:b9:f0:4b:83:8c:45:23:25: 40:0b:de:9a:19:b5:ba:07:69:8c:14:57:ba:42:6e: fe:04:fb:9d:b8:64:58:60:69:d8:5c:58:e2:6c:e3: 03:77:37:eb:b9:ca:20:32:29:32:0a:22:56:d3:d1: 1e:e8:c0:4d:54:1a:86:3e:ca:1c:4b:f3:72:37:87: df:82:83:c5:68:45:1f:c6:7c:da:0d:90:24:ad:ea: fc:8c:73:c4:dc:00:ff:11:e8:0f:67:7e:76:ca:4d: 15:9b:52:49:08:ac:7e:b1:9e:92:a1:0e:01:4b:ee: 64:45:70:f0:29:cc:ea:61:87:c4:ca:a3:71:8f:0e: 3b:8a:69:05:75:a4:eb:4a:f5:e2:5e:c2:e5:92:38: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:61:17:5D:2E:72:3A:15:34:A8:EE:91:0F:E9:29:BE:0A:DB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/cd3f2e2a-0861-34b9-8eab-cca2dddf1680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffc5:10d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:57:ea:2a:a7:7e:d6:79:df:cb:69:cc:6b:55:31:f9:3a:9c: c3:0e:f6:35:4f:4d:c5:d7:10:6d:14:a9:27:8a:e7:7c:e5:99: fb:6e:92:a6:39:01:0b:2c:ee:63:d5:16:97:b6:45:93:a5:26: f6:60:2d:e0:27:e7:bf:9d:b1:d9:a3:d2:74:48:55:35:4b:96: c5:2e:01:c5:76:32:a7:1d:b8:95:91:76:0d:9d:cb:5f:78:78: 30:b4:dd:de:6f:a3:b1:a6:13:0f:ac:3d:5f:07:ec:0a:df:6c: 05:7b:89:b1:d3:1c:87:26:b4:90:32:98:75:bf:b1:15:09:e6: d5:28:84:32:b2:59:9c:c0:d3:b8:77:1d:33:d3:42:81:12:7f: ed:17:05:cd:4a:63:06:98:44:4a:85:cb:7c:52:14:fc:cf:02: a0:5c:2a:02:c9:ce:98:ce:9b:ac:96:b8:b4:13:4a:fa:61:74: 49:22:e0:28:73:ae:30:8f:6a:9d:7a:a8:55:e6:57:33:74:92: 17:70:ec:20:0b:e4:fc:77:bf:5e:ee:cf:9e:d0:44:61:aa:10: 68:e7:8e:0f:71:52:7b:ce:cc:23:83:b9:01:80:91:d5:7e:e7: cc:56:e8:2a:10:f3:48:b3:76:64:c8:ae:73:23:77:99:ac:50: e4:8f:28:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuVxlSPmjfTGobHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzhjNTlkNzgtMTk2NC00OGZmLTg4NTktMTRmOWFjOTM0ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtV6tTLsyG9rS70zujxD8IfuGmSdeIPAkfDz jCPCdumKlIv0yMaUNU2A5KXyIAm1GGtd1QGgUQS1P9R2eYKvp9qDPPgyamZ+CaDQ uKI/emDI0Ti9kXVXo4WJysJsQSdKfIqKrPuZVDjdV5xlsRPJufBLg4xFIyVAC96a GbW6B2mMFFe6Qm7+BPuduGRYYGnYXFjibOMDdzfrucogMikyCiJW09Ee6MBNVBqG PsocS/NyN4ffgoPFaEUfxnzaDZAkrer8jHPE3AD/EegPZ352yk0Vm1JJCKx+sZ6S oQ4BS+5kRXDwKczqYYfEyqNxjw47imkFdaTrSvXiXsLlkjjzRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBHiYRddLnI6FTSo7pEP6Sm+CtudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvY2QzZjJlMmEtMDg2MS0z NGI5LThlYWItY2NhMmRkZGYxNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/xQEN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9X6iqnftZ538tpzGtVMfk6nMMO9jVPTcXXEG0UqSeK53zlmftu kqY5AQss7mPVFpe2RZOlJvZgLeAn57+dsdmj0nRIVTVLlsUuAcV2MqcduJWRdg2d y194eDC03d5vo7GmEw+sPV8H7ArfbAV7ibHTHIcmtJAymHW/sRUJ5tUohDKyWZzA 07h3HTPTQoESf+0XBc1KYwaYREqFy3xSFPzPAqBcKgLJzpjOm6yWuLQTSvphdEki 4ChzrjCPap16qFXmVzN0khdw7CAL5Px3v17uz57QRGGqEGjnjg9xUnvOzCODuQGA kdV+58xW6CoQ80izdmTIrnMjd5msUOSPKAg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:43:28 2026 by rpki-client