$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ced4035b-910a-32b6-9dd1-56534b05f2a3.roa File: ced4035b-910a-32b6-9dd1-56534b05f2a3.roa (raw, json) Hash identifier: ZBPNWSyOB9ZQL3bef+/u9tX0jeItBMEbihDhobzfS6w= Subject key identifier: 7B:70:C2:C6:2E:6E:E1:C7:0B:03:56:81:F8:F3:6E:9A:84:F7:14:91 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584C9ACC5A4CEA22C97B95875580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ced4035b-910a-32b6-9dd1-56534b05f2a3.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 13335 IP address blocks: 2606:4700:3111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:5a:4c:ea:22:c9:7b:95:87:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=60fd1c7b-4763-4a11-81b8-6e54ff7e080f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:25:d4:07:38:83:a1:a2:d1:23:b1:53:df: 97:cf:85:cd:5c:53:ec:ab:5a:15:e5:d0:52:f8:06: d7:11:99:52:d8:c2:d3:f4:35:8a:55:e3:0e:01:b9: 2b:8a:4f:00:bc:4a:ae:90:7e:c4:42:25:95:7a:1e: 75:c6:d7:ef:58:e4:f3:de:0f:2c:82:a4:90:3e:36: 55:a4:cb:ae:be:92:7e:d7:21:5f:13:a1:9f:70:be: 3c:f8:87:93:a4:1d:a1:3a:f4:26:87:29:7a:0a:5d: 88:b2:03:42:f2:9d:28:fe:fc:70:9e:7c:15:43:92: 6d:0a:b3:9e:f2:01:f6:a7:0b:d0:43:a7:c2:8b:82: 6d:71:2f:0b:c5:13:6f:dd:39:c7:27:1b:85:a6:8c: d1:04:28:00:dd:9a:cd:12:fc:c6:e3:ee:81:8d:dd: ca:13:0c:f6:13:35:4b:bf:ae:2e:f7:5f:89:06:b9: b9:a7:f9:a9:82:a1:29:f8:1d:8c:2b:75:68:7a:f2: 30:fa:42:de:d8:42:3b:60:80:12:c7:f1:a3:be:10: a3:cf:f1:d7:7e:15:88:2c:b2:a0:ad:7a:40:53:59: 46:44:84:66:c2:98:99:60:6c:31:d8:c7:cd:4d:e3: 46:e8:38:0d:29:b9:ce:5b:08:d8:e0:7a:d1:ac:33: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:70:C2:C6:2E:6E:E1:C7:0B:03:56:81:F8:F3:6E:9A:84:F7:14:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ced4035b-910a-32b6-9dd1-56534b05f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:ff:3a:7b:36:1f:29:24:16:82:a9:56:55:f8:2e:79:97: bf:86:a5:4c:49:f6:f6:b4:a9:c3:28:d7:c7:63:6a:a0:43:35: 48:cb:be:ed:fb:d5:e6:40:cd:e0:7a:fe:a8:7e:d5:02:bc:5f: f1:90:12:85:bb:a1:e7:da:c5:15:eb:f9:dc:75:c7:c1:71:51: e6:2a:65:4b:59:d6:ae:b7:2b:c9:ff:b6:f7:ed:81:2a:a1:3e: 26:5e:61:21:e2:93:e1:f7:2b:45:32:1e:11:d7:51:3c:9f:13: 73:26:08:ae:de:56:4c:97:78:b5:19:eb:38:a1:50:f8:fa:1f: 61:54:5e:16:a5:12:41:bc:ef:c1:e4:3a:0e:42:8b:b4:53:8e: c5:f1:8e:b4:79:0a:01:98:0f:fc:5c:3f:94:60:77:69:81:1e: c2:f0:b7:c5:04:a9:28:9b:5b:1c:63:02:46:7e:c9:fb:d4:ba: 55:70:8f:89:78:02:0b:2b:13:4b:a0:5a:fa:e4:19:77:e3:3a: 37:10:d7:e8:93:0a:1b:bd:38:c0:e4:fe:6d:ba:7f:c0:32:06: a6:15:ba:7b:2d:de:45:a2:09:07:e4:b2:e0:66:5a:a8:b3:36: fc:06:65:61:69:80:76:47:9e:3e:56:71:0d:54:1c:0d:91:e2: 14:37:d7:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyazFpM6iLJe5WHVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjBmZDFjN2ItNDc2My00YTExLTgxYjgtNmU1NGZmN2UwODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxUl1Ac4g6Gi0SOxU9+Xz4XNXFPsq1oV5dBS +AbXEZlS2MLT9DWKVeMOAbkrik8AvEqukH7EQiWVeh51xtfvWOTz3g8sgqSQPjZV pMuuvpJ+1yFfE6GfcL48+IeTpB2hOvQmhyl6Cl2IsgNC8p0o/vxwnnwVQ5JtCrOe 8gH2pwvQQ6fCi4JtcS8LxRNv3TnHJxuFpozRBCgA3ZrNEvzG4+6Bjd3KEwz2EzVL v64u91+JBrm5p/mpgqEp+B2MK3VoevIw+kLe2EI7YIASx/GjvhCjz/HXfhWILLKg rXpAU1lGRIRmwpiZYGwx2MfNTeNG6DgNKbnOWwjY4HrRrDOLdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHtwwsYubuHHCwNWgfjzbpqE9xSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VkNDAzNWItOTEwYS0z MmI2LTlkZDEtNTY1MzRiMDVmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADE7/zp7Nh8pJBaCqVZV+C55l7+GpUxJ9va0qcMo18djaqBDNUjL vu371eZAzeB6/qh+1QK8X/GQEoW7oefaxRXr+dx1x8FxUeYqZUtZ1q63K8n/tvft gSqhPiZeYSHik+H3K0UyHhHXUTyfE3MmCK7eVkyXeLUZ6zihUPj6H2FUXhalEkG8 78HkOg5Ci7RTjsXxjrR5CgGYD/xcP5Rgd2mBHsLwt8UEqSibWxxjAkZ+yfvUulVw j4l4AgsrE0ugWvrkGXfjOjcQ1+iTChu9OMDk/m26f8AyBqYVunst3kWiCQfksuBm WqizNvwGZWFpgHZHnj5WcQ1UHA2R4hQ314U= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:11 2026 by rpki-client