$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa File: 5df2f2dc-f00c-33b4-a473-55bf6827f226.roa (raw, json) Hash identifier: 8Ibz78YYU9VqUF8KhloB8ej1Gs8fZThiPEkZIybko+o= Subject key identifier: 3B:AF:A5:0E:81:BB:1B:3C:65:6E:8B:43:50:12:8E:ED:4B:31:2A:7A Certificate issuer: /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Certificate serial: 010D0C9F4328584CF42240D18F942D4068875980 Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 401612 IP address blocks: 2602:fb87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:40:d1:8f:94:2d:40:68:87:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=d53b2636-6b92-4dff-8a47-01d77922d5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:a5:f4:95:0e:28:6b:15:c1:c6:1e:67:1c: e0:c8:4e:8a:e0:1f:5f:8b:17:42:71:d8:6e:74:32: f1:73:71:5a:b4:c3:86:8d:f2:f7:6a:91:1d:44:d9: ee:81:64:5d:d9:15:3c:e6:15:59:aa:3e:61:02:b5: eb:b2:5e:97:2b:24:6a:ef:e6:6f:30:75:34:73:f8: b6:76:a0:3f:8c:19:0e:b2:59:7d:dd:9e:33:04:82: ec:60:2a:c2:dd:1e:f6:07:85:f3:92:93:c8:61:35: d4:c6:db:c2:83:51:71:0d:ca:e4:5d:b5:24:81:f7: 1a:57:29:f8:7a:4d:5a:e7:12:0e:3d:66:9d:af:86: 66:76:d9:b4:c6:ef:96:74:df:8d:fd:21:35:75:3b: 0d:fa:a6:21:5e:14:78:40:30:db:16:92:d2:ab:4e: 12:81:49:7d:10:07:ef:26:91:e3:ff:f1:dd:af:8d: dd:84:47:49:7d:c3:68:0c:48:ad:41:29:46:79:7d: 83:a7:9e:93:a2:6b:70:27:29:1c:50:da:c8:36:28: 55:d8:a8:65:21:65:5e:92:5e:66:47:cb:db:ae:28: 64:72:00:fa:3a:a1:52:f3:d5:e2:f3:11:6f:9d:f4: 62:5c:8c:54:81:16:38:1c:9c:c1:4d:aa:d9:f3:bd: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:A5:0E:81:BB:1B:3C:65:6E:8B:43:50:12:8E:ED:4B:31:2A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/5df2f2dc-f00c-33b4-a473-55bf6827f226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl X509v3 Authority Key Identifier: keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb87::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:db:5f:a1:0a:0b:2f:6d:53:a4:dd:f8:92:e0:af:9c:32:66: ef:ae:79:4b:38:f4:b5:33:d9:78:da:74:ff:fc:11:18:a4:31: 1e:9a:b0:f0:73:6c:b2:0d:dd:6d:59:91:46:33:7f:2c:aa:9d: 65:a3:75:9e:74:9e:ab:c3:71:16:49:de:f0:66:04:08:5d:7d: 90:a0:ca:b8:44:dd:f6:f1:5e:af:12:8a:c7:72:2e:b3:09:c5: e1:51:4e:76:a4:5a:25:78:3f:c0:51:d8:98:45:e2:74:c2:0c: a3:dd:bc:4f:50:fa:2f:26:ab:62:58:47:7a:46:81:6e:2d:16: 50:e3:a8:27:bd:54:bb:0b:6c:44:bb:ea:3d:4d:f7:2f:3d:28: a6:7d:bc:1c:87:c3:97:3c:ca:67:e8:03:49:6c:67:a8:ed:2b: e2:c5:23:9d:63:1e:72:d0:60:20:72:96:50:66:ed:d0:50:db: de:0b:91:59:5f:f6:3a:fb:c9:ed:a3:05:1e:d4:5f:ca:30:ae: c5:ea:42:d5:d9:f2:e8:8b:85:f6:da:fe:a9:c9:a7:d9:62:32: 5f:b8:9a:e9:26:78:48:cf:3c:11:ce:a0:cd:ea:ad:cb:cc:f6: a9:9a:e7:d2:de:81:f9:d1:4d:01:1c:61:10:64:9b:d3:08:b4: 90:42:93:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz0IkDRj5QtQGiHWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5 YzQ4MB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk ZDUzYjI2MzYtNmI5Mi00ZGZmLThhNDctMDFkNzc5MjJkNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp6l9JUOKGsVwcYeZxzgyE6K4B9fixdCcdhu dDLxc3FatMOGjfL3apEdRNnugWRd2RU85hVZqj5hArXrsl6XKyRq7+ZvMHU0c/i2 dqA/jBkOsll93Z4zBILsYCrC3R72B4XzkpPIYTXUxtvCg1FxDcrkXbUkgfcaVyn4 ek1a5xIOPWadr4Zmdtm0xu+WdN+N/SE1dTsN+qYhXhR4QDDbFpLSq04SgUl9EAfv JpHj//Hdr43dhEdJfcNoDEitQSlGeX2Dp56TomtwJykcUNrINihV2KhlIWVekl5m R8vbrihkcgD6OqFS89Xi8xFvnfRiXIxUgRY4HJzBTarZ872sfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDuvpQ6Buxs8ZW6LQ1ASju1LMSp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvNWRmMmYyZGMtZjAwYy0z M2I0LWE0NzMtNTViZjY4MjdmMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2 OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky YzFmNjljNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7hwAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrbX6EKCy9tU6Td+JLgr5wyZu+ueUs49LUz2XjadP/8ERikMR6a sPBzbLIN3W1ZkUYzfyyqnWWjdZ50nqvDcRZJ3vBmBAhdfZCgyrhE3fbxXq8Sisdy LrMJxeFRTnakWiV4P8BR2JhF4nTCDKPdvE9Q+i8mq2JYR3pGgW4tFlDjqCe9VLsL bES76j1N9y89KKZ9vByHw5c8ymfoA0lsZ6jtK+LFI51jHnLQYCByllBm7dBQ294L kVlf9jr7ye2jBR7UX8owrsXqQtXZ8uiLhfba/qnJp9liMl+4mukmeEjPPBHOoM3q rcvM9qma59LegfnRTQEcYRBkm9MItJBCk90= -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:28 2026 by rpki-client