$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c81d013b-7c4b-3578-8e18-6cd4f3a6b754.roa File: c81d013b-7c4b-3578-8e18-6cd4f3a6b754.roa (raw, json) Hash identifier: ippk1T/I3GgDkEN0WX6Y1u/sKYgQXQJReL2YbOwnM/8= Subject key identifier: 80:60:F7:9C:FE:F3:18:D3:9E:D8:66:76:C7:D8:78:45:5E:51:60:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9106F81E9E4B1E8493C12EE0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c81d013b-7c4b-3578-8e18-6cd4f3a6b754.roa Signing time: Sun 18 Jan 2026 14:00:39 +0000 ROA not before: Sun 18 Jan 2026 14:00:39 +0000 ROA not after: Sat 18 Apr 2026 13:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:91:06:f8:1e:9e:4b:1e:84:93:c1:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 18 14:00:39 2026 GMT Not After : Apr 18 13:00:39 2026 GMT Subject: CN=1a159aff-e1b0-476b-a37d-e8665d7a66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:f2:2d:33:06:c0:50:30:7c:64:4d:30:c7: 50:37:5f:20:91:70:9d:0c:0d:83:cd:bb:bc:d7:81: 14:76:4c:0e:de:5b:fd:cb:6a:fd:9c:8b:1f:4c:d1: b2:52:b3:84:e8:aa:01:8f:98:ea:86:49:d3:47:de: f0:16:13:58:df:71:d6:74:cd:99:e8:cf:46:c1:86: 25:9b:1d:1f:43:c9:ed:ab:d2:bf:b7:dc:a2:25:71: 0f:d0:2e:ad:31:e1:bc:b4:72:e7:38:c6:21:b9:0d: 21:2f:a8:60:ba:74:c2:e9:2b:80:3f:8e:7b:46:7d: 31:b9:2d:b1:3c:3d:b1:df:a6:52:94:21:e6:34:3c: 3d:6b:92:c0:27:7b:7a:8a:43:d3:a6:bc:de:be:72: cc:04:32:c7:0a:85:04:8f:67:5d:24:6f:78:73:67: 8b:d1:48:45:63:36:98:f1:9a:40:a9:d6:db:b0:e8: 97:fa:6e:66:70:7c:00:d3:1e:a1:11:24:f2:45:7a: d5:a0:6b:7c:ec:14:1f:bb:8f:5b:6e:d6:13:74:92: 47:4d:a6:96:39:3c:8d:37:76:fb:1b:ac:2e:56:16: 3f:8f:b2:05:91:f1:94:a8:22:0a:d5:74:72:e2:8e: ea:58:e8:2d:90:15:1c:26:b0:cb:e3:6d:1e:4c:9d: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:60:F7:9C:FE:F3:18:D3:9E:D8:66:76:C7:D8:78:45:5E:51:60:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c81d013b-7c4b-3578-8e18-6cd4f3a6b754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:26:d0:b1:31:44:71:bd:1b:83:a5:d2:5a:3f:2e:0b:0b:a6: b0:51:0a:2e:11:10:ec:1e:c3:d4:92:f3:b4:29:d8:54:63:c9: b8:3e:b3:c5:74:f4:cc:e3:29:26:3d:34:3a:af:16:82:25:ae: a9:bd:2d:d1:5c:78:9b:04:77:a7:f0:94:34:e8:d0:6c:5c:8d: 25:9f:c1:a5:66:bf:8c:db:68:87:b4:ff:e7:7b:b6:02:ef:09: 4c:74:41:bd:43:16:58:78:33:75:62:e6:a7:0b:e2:72:db:ea: e8:7d:a8:7c:24:f8:ec:6a:35:05:f6:c2:34:77:fe:f4:b1:a3: b1:c6:a7:43:30:85:30:0b:6f:89:17:15:37:d3:c5:3e:74:5d: 0f:6a:03:52:37:b9:e9:58:5e:18:68:0a:63:84:a4:ef:fa:0d: 81:1c:3f:23:1e:dc:ae:87:78:4b:35:67:ee:73:13:78:5f:7e: e8:74:28:83:e1:ef:af:7a:ed:27:15:37:10:60:eb:3c:f0:55: 6f:37:f8:4f:49:8d:81:30:31:eb:c8:16:5a:d5:d2:93:33:4a: 07:27:14:99:b7:f8:23:d1:d6:70:89:87:c7:d2:27:87:03:75: f2:a7:21:cc:e0:1e:6b:13:4d:81:c8:37:11:b6:67:da:4b:d2: 47:c1:f9:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyRBvgenksehJPBLuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDExODE0MDAzOVoXDTI2MDQxODEzMDAzOVowLzEtMCsGA1UEAxMk MWExNTlhZmYtZTFiMC00NzZiLWEzN2QtZTg2NjVkN2E2NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipfyLTMGwFAwfGRNMMdQN18gkXCdDA2Dzbu8 14EUdkwO3lv9y2r9nIsfTNGyUrOE6KoBj5jqhknTR97wFhNY33HWdM2Z6M9GwYYl mx0fQ8ntq9K/t9yiJXEP0C6tMeG8tHLnOMYhuQ0hL6hgunTC6SuAP457Rn0xuS2x PD2x36ZSlCHmNDw9a5LAJ3t6ikPTprzevnLMBDLHCoUEj2ddJG94c2eL0UhFYzaY 8ZpAqdbbsOiX+m5mcHwA0x6hESTyRXrVoGt87BQfu49bbtYTdJJHTaaWOTyNN3b7 G6wuVhY/j7IFkfGUqCIK1XRy4o7qWOgtkBUcJrDL420eTJ0IGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBg95z+8xjTnthmdsfYeEVeUWCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzgxZDAxM2ItN2M0Yi0z NTc4LThlMTgtNmNkNGYzYTZiNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYm0LExRHG9G4Ol0lo/LgsLprBRCi4REOwew9SS87Qp2FRjybg+ s8V09MzjKSY9NDqvFoIlrqm9LdFceJsEd6fwlDTo0GxcjSWfwaVmv4zbaIe0/+d7 tgLvCUx0Qb1DFlh4M3Vi5qcL4nLb6uh9qHwk+OxqNQX2wjR3/vSxo7HGp0MwhTAL b4kXFTfTxT50XQ9qA1I3uelYXhhoCmOEpO/6DYEcPyMe3K6HeEs1Z+5zE3hffuh0 KIPh76967ScVNxBg6zzwVW83+E9JjYEwMevIFlrV0pMzSgcnFJm3+CPR1nCJh8fS J4cDdfKnIczgHmsTTYHINxG2Z9pL0kfB+f0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:47 2026 by rpki-client