$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98c6a577-10df-32f0-b2de-a8ba29715e15.roa File: 98c6a577-10df-32f0-b2de-a8ba29715e15.roa (raw, json) Hash identifier: 3DT0fVnxb8TLs7gq3oZgTcBPDuSNKf4FBsYXfw+qfHk= Subject key identifier: A9:AB:69:64:DF:2C:74:E8:C2:A5:E7:D7:5A:A3:1C:5C:88:10:CE:06 Certificate issuer: /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Certificate serial: 010D0C9F4328584CBDB1E759E21D966C5D394080 Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98c6a577-10df-32f0-b2de-a8ba29715e15.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 53535 IP address blocks: 2620:38:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:e7:59:e2:1d:96:6c:5d:39:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=234fe986-aba0-4259-93ff-7bab741fbeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0d:11:90:fa:39:7d:69:18:92:17:96:d4:c2: b8:67:f9:7e:5d:8f:58:5b:72:5b:6e:e3:32:7a:5b: ac:90:f7:25:94:c1:ac:06:19:c6:78:26:6b:4e:73: 80:d8:4e:35:48:e6:4a:b4:ef:49:98:75:c4:74:27: 40:a4:20:0e:69:1a:bb:85:a7:57:25:12:ed:af:19: db:68:db:a8:0b:75:2d:7f:44:94:ae:f2:87:2b:28: 52:25:8a:fc:7a:ac:1d:00:0f:73:24:c6:0f:1f:8f: 88:a3:a7:22:f9:63:c5:ec:38:e9:3d:ec:da:24:6e: c1:6b:d3:bf:be:ce:59:64:b2:fa:2c:ff:7d:a5:6f: b3:ed:20:2d:14:b1:eb:52:67:46:57:1e:2e:e9:38: bb:d7:77:d6:37:7f:9f:f6:75:f4:c8:0d:bf:70:8c: 4a:49:6e:e6:6f:db:c0:95:8f:51:34:af:34:2b:44: 8d:c8:02:e0:24:35:aa:b1:18:a9:ac:d1:dd:05:ed: f9:4f:23:66:02:28:f0:5e:49:07:33:85:d0:4a:22: e3:34:7b:60:64:9d:de:e7:2a:26:b2:3e:ff:11:37: 1b:a7:c5:98:52:52:ba:31:d3:a2:a7:9d:c5:d6:e3: 2f:1a:46:69:83:c3:92:7e:99:f2:fd:08:36:26:f7: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AB:69:64:DF:2C:74:E8:C2:A5:E7:D7:5A:A3:1C:5C:88:10:CE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/98c6a577-10df-32f0-b2de-a8ba29715e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl X509v3 Authority Key Identifier: keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer sbgp-ipAddrBlock: critical IPv6: 2620:38:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:61:c9:f9:e6:6f:1f:4d:5f:cf:9c:75:a5:82:89:23:f4: b9:b3:6a:cf:e4:29:97:a7:b6:35:db:d8:07:b7:b1:d7:65:f0: 3f:ac:4f:eb:98:f0:fe:89:ca:e1:fa:3c:73:f6:fa:e1:c0:cc: 28:4a:89:f5:cc:37:26:60:17:15:73:88:33:70:60:2c:76:ee: 1b:69:ba:74:ad:98:93:fa:d0:42:95:df:8d:52:5d:41:af:8c: a2:91:b3:dc:5d:48:b5:0b:d0:6f:d1:32:fe:6f:78:b8:ff:be: 14:3a:05:5b:d2:c2:78:ee:9b:08:0c:9b:b7:0a:43:6a:dd:65: 51:af:fd:ca:dc:fc:5e:f8:1e:30:f4:bb:eb:aa:27:02:69:ad: 13:c2:0b:3c:ef:33:f0:90:f3:70:12:be:12:d4:c3:76:f7:e6: e5:a5:a3:82:54:c9:80:74:f1:42:21:36:78:3c:51:a1:a0:e9: 9f:83:5e:2d:3e:38:14:80:3d:08:7b:7d:5a:71:b9:e1:d4:a8: 3b:a2:c6:f3:00:23:43:b5:42:72:18:b3:36:03:72:a5:6f:92: 93:ff:d2:7a:12:50:6b:f7:43:ca:3e:14:58:0f:92:03:60:1d: b6:81:fd:40:49:38:7e:29:29:72:10:17:17:06:41:b0:a5:4e: fd:26:38:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9sedZ4h2WbF05QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2NTU2ZDctNjBhNC00MzE4LTlkMTEtNDY0ZmI4Mzk2 ZDNlMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MjM0ZmU5ODYtYWJhMC00MjU5LTkzZmYtN2JhYjc0MWZiZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA0RkPo5fWkYkheW1MK4Z/l+XY9YW3JbbuMy eluskPcllMGsBhnGeCZrTnOA2E41SOZKtO9JmHXEdCdApCAOaRq7hadXJRLtrxnb aNuoC3Utf0SUrvKHKyhSJYr8eqwdAA9zJMYPH4+Io6ci+WPF7DjpPezaJG7Ba9O/ vs5ZZLL6LP99pW+z7SAtFLHrUmdGVx4u6Ti713fWN3+f9nX0yA2/cIxKSW7mb9vA lY9RNK80K0SNyALgJDWqsRiprNHdBe35TyNmAijwXkkHM4XQSiLjNHtgZJ3e5yom sj7/ETcbp8WYUlK6MdOip53F1uMvGkZpg8OSfpny/Qg2JvfVCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKmraWTfLHTowqXn11qjHFyIEM4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1 NTZkNy02MGE0LTQzMTgtOWQxMS00NjRmYjgzOTZkM2UvOThjNmE1NzctMTBkZi0z MmYwLWIyZGUtYThiYTI5NzE1ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ2NTU2ZDctNjBhNC00MzE4LTlk MTEtNDY0ZmI4Mzk2ZDNlL2FkNjU1NmQ3LTYwYTQtNDMxOC05ZDExLTQ2NGZiODM5 NmQzZS5jcmwwHwYDVR0jBBgwFoAUXcH9mmOFwY9GUkq4xGL1NCS8r44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZDY1NTZkNy02MGE0LTQzMTgtOWQxMS00NjRm YjgzOTZkM2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAOCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOPYcn55m8fTV/PnHWlgokj9Lmzas/kKZentjXb2Ae3sddl8D+s T+uY8P6JyuH6PHP2+uHAzChKifXMNyZgFxVziDNwYCx27htpunStmJP60EKV341S XUGvjKKRs9xdSLUL0G/RMv5veLj/vhQ6BVvSwnjumwgMm7cKQ2rdZVGv/crc/F74 HjD0u+uqJwJprRPCCzzvM/CQ83ASvhLUw3b35uWlo4JUyYB08UIhNng8UaGg6Z+D Xi0+OBSAPQh7fVpxueHUqDuixvMAI0O1QnIYszYDcqVvkpP/0noSUGv3Q8o+FFgP kgNgHbaB/UBJOH4pKXIQFxcGQbClTv0mOHM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:57 2026 by rpki-client