$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d04ae78c-b30f-3725-94e1-a24cb6e39479.roa File: d04ae78c-b30f-3725-94e1-a24cb6e39479.roa (raw, json) Hash identifier: 7Jf+zq8QQ4SOCxJczVwNTgbzI7pInax1YGZTdj+/zZQ= Subject key identifier: 90:F7:61:21:42:02:99:47:F6:5C:1D:79:10:3B:9A:3F:55:CF:9A:A1 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F4328584CB551E552EEB30A5BF34E5A00 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d04ae78c-b30f-3725-94e1-a24cb6e39479.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 399976 IP address blocks: 2602:80c:20c0::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:e5:52:ee:b3:0a:5b:f3:4e:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=db79b5a8-5c1b-4485-b810-d0d9b83b6ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:17:0b:c1:5e:c2:d1:85:83:bd:cd:72:d5: 8f:b9:27:57:f1:5e:37:06:bf:b4:69:01:e5:b9:44: 4e:26:38:23:30:32:29:4f:05:51:8f:ad:a3:db:e6: 93:0c:fd:d0:78:57:7c:5c:8a:61:af:89:82:8a:ff: ce:3b:c5:2e:2b:5b:b4:44:10:f9:3a:5e:ea:15:be: df:55:e1:62:7e:cf:2b:f0:7c:70:52:cf:02:1e:74: cb:18:29:99:ca:d8:48:cd:bd:85:65:ea:3b:10:01: b6:c3:da:b1:56:d7:9c:5a:89:6a:b1:0d:50:dd:a3: 5a:e5:74:3e:9d:31:a2:a0:3c:52:fe:33:e2:80:d7: d6:ad:79:f8:b4:a5:9f:e2:90:24:0a:fe:e9:a9:2e: 4d:5c:5b:d8:1a:9a:ec:80:8a:27:da:72:c7:93:43: f9:3c:bc:56:a8:49:43:cf:b2:89:db:55:72:9e:0c: df:4e:cb:4b:f3:f7:a5:1a:33:f6:21:a9:a7:56:58: ff:06:99:1d:0b:a5:65:37:ec:92:0d:bf:19:37:66: 4a:41:0f:a0:4f:18:9b:fd:3a:8b:7a:83:dd:92:da: 40:cf:d7:28:48:f5:03:f4:9f:ad:c6:29:21:25:13: 2d:fd:b1:8b:af:d9:8e:f3:60:fe:c2:88:ff:5c:64: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:61:21:42:02:99:47:F6:5C:1D:79:10:3B:9A:3F:55:CF:9A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d04ae78c-b30f-3725-94e1-a24cb6e39479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:20c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:57:3e:fc:0f:f1:20:93:f0:2a:ca:ca:e0:07:f2:9c:ad:b7: 30:25:14:ab:c1:99:ff:1e:ce:2b:d9:d5:d4:36:f2:32:a2:1c: b6:ec:08:b3:51:81:1d:8b:1d:b4:fa:f4:83:ad:7e:0f:e5:2b: c3:52:91:4e:32:a1:a8:45:b2:01:d4:83:1e:09:c4:55:4e:b8: 08:f3:bd:91:7e:88:fa:0d:87:1e:84:c4:76:e2:9a:c0:89:3f: c7:24:74:e6:23:a7:7d:db:f1:47:e1:a9:3a:99:3d:51:87:6c: af:bd:b7:7c:68:9f:1d:88:4c:b5:a1:5d:a0:ee:f0:c6:8c:0a: cc:10:48:97:dd:45:4e:2b:79:87:0e:5a:e5:8e:fe:00:8e:a0: e2:b1:6f:8b:3a:d3:5d:cd:68:32:29:2c:39:12:bb:6f:37:5c: d5:b6:de:d8:8a:43:5e:1a:8f:40:ce:98:ee:30:d4:c3:11:65: d0:6b:31:46:8f:ab:15:03:32:01:13:f7:98:33:9a:54:40:9f: 1f:13:66:18:5d:97:01:38:28:55:55:e8:a2:b0:18:f2:39:f5: bd:70:33:88:e4:bb:ba:a0:94:23:e3:d8:f1:42:ac:00:82:f5: cb:09:19:c7:8c:1a:6d:82:e9:f7:fa:e6:6c:09:18:1a:d6:c4: e5:ce:e1:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy1UeVS7rMKW/NOWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZGI3OWI1YTgtNWMxYi00NDg1LWI4MTAtZDBkOWI4M2I2ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4wXC8FewtGFg73NctWPuSdX8V43Br+0aQHl uUROJjgjMDIpTwVRj62j2+aTDP3QeFd8XIphr4mCiv/OO8UuK1u0RBD5Ol7qFb7f VeFifs8r8HxwUs8CHnTLGCmZythIzb2FZeo7EAG2w9qxVtecWolqsQ1Q3aNa5XQ+ nTGioDxS/jPigNfWrXn4tKWf4pAkCv7pqS5NXFvYGprsgIon2nLHk0P5PLxWqElD z7KJ21VyngzfTstL8/elGjP2IamnVlj/BpkdC6VlN+ySDb8ZN2ZKQQ+gTxib/TqL eoPdktpAz9coSPUD9J+txikhJRMt/bGLr9mO82D+woj/XGQlTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJD3YSFCAplH9lwdeRA7mj9Vz5qhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZDA0YWU3OGMtYjMwZi0z NzI1LTk0ZTEtYTI0Y2I2ZTM5NDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAdXPvwP8SCT8CrKyuAH8pyttzAlFKvBmf8ezivZ1dQ28jKiHLbs CLNRgR2LHbT69IOtfg/lK8NSkU4yoahFsgHUgx4JxFVOuAjzvZF+iPoNhx6ExHbi msCJP8ckdOYjp33b8UfhqTqZPVGHbK+9t3xonx2ITLWhXaDu8MaMCswQSJfdRU4r eYcOWuWO/gCOoOKxb4s6013NaDIpLDkSu283XNW23tiKQ14aj0DOmO4w1MMRZdBr MUaPqxUDMgET95gzmlRAnx8TZhhdlwE4KFVV6KKwGPI59b1wM4jku7qglCPj2PFC rACC9csJGceMGm2C6ff65mwJGBrWxOXO4RM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:11 2026 by rpki-client