$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa File: a46317f9-5181-35a7-ab20-00bacf68bf4e.roa (raw, json) Hash identifier: XblC5l2CIjA9bdhRgWmyH2MQp9mRsHZNgup3M+Gkt8k= Subject key identifier: 50:50:7A:D3:72:6B:DF:52:6D:CE:8E:D9:03:C6:05:9A:10:E5:F6:BA Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584CED279384356E663709CFE580 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 6391 IP address blocks: 2605:8c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:93:84:35:6e:66:37:09:cf:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=e4a17c5c-ed7d-493b-8e01-3d34bf06cfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:b5:b5:3e:23:a7:fc:ae:91:66:0a:33:23: 90:04:6d:16:60:9c:30:55:1c:21:eb:99:fa:d0:63: f4:bf:3f:cb:ba:f8:f9:2c:16:c3:17:2f:04:4f:0c: 19:ab:95:d3:5d:57:85:df:d5:21:81:93:59:8f:f3: de:ce:c5:0f:77:1e:20:aa:c2:53:a2:6c:05:ee:f8: ff:c4:90:f0:78:0b:9d:00:c2:78:43:f9:9b:bd:43: c2:c0:58:de:78:82:a1:74:8e:40:ed:a4:19:4d:35: 20:fb:e6:e6:98:4c:a4:34:62:d9:8d:1e:d2:9f:75: 86:b1:b4:13:97:8e:7d:82:98:6f:cc:c1:cd:4c:ca: e5:6c:10:bf:65:ad:2d:d1:d7:43:d9:7a:23:b2:f0: 80:93:ce:c1:55:94:ec:26:f4:47:51:a2:1c:e3:2e: 21:69:5b:13:28:0c:17:41:10:c1:01:91:41:15:70: 03:7b:d1:60:50:23:a6:90:5a:ca:44:05:72:31:18: 5a:0f:9c:ed:51:7f:da:a8:3c:42:c3:4c:c2:50:d0: 64:59:e6:ae:dc:5f:0b:0c:a2:a6:1d:ac:31:ad:04: 21:f3:61:20:fc:59:24:77:7c:c1:b3:8d:d9:18:5d: 88:5d:ed:5d:d6:85:c4:09:ca:af:c0:4e:a7:b3:2a: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:7A:D3:72:6B:DF:52:6D:CE:8E:D9:03:C6:05:9A:10:E5:F6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a46317f9-5181-35a7-ab20-00bacf68bf4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:9f:36:ee:43:6e:e0:33:5e:ed:76:bc:41:8b:18:ea:77:a8: 87:63:df:04:15:ad:fd:4f:47:19:aa:e8:ce:34:e2:99:08:68: 98:f2:fe:14:6f:50:49:87:35:af:e7:b5:d8:3d:49:b1:65:e1: f7:ca:9f:20:ba:26:89:4f:ee:c0:35:21:b5:b9:8b:e2:44:73: 81:70:0c:4b:32:61:15:23:f4:5c:67:93:42:08:23:fb:55:2d: 68:ec:16:6b:b4:93:ed:d4:d0:1f:e7:ec:c7:dc:53:d9:da:ae: cf:7c:d0:a0:da:15:0c:31:1e:f7:9c:23:63:3a:2e:75:90:57: df:2e:fa:cf:16:c6:0c:2c:94:63:ec:2f:0b:94:af:ed:e8:4b: d2:55:e7:5b:b9:6c:95:2b:60:7d:b5:6a:ed:77:29:09:7a:02: 97:73:91:1b:d4:30:b0:6e:37:d2:ac:9a:43:7e:1e:08:c4:e6: 2e:4a:f0:ad:da:b0:88:d7:a6:e9:bd:a4:e2:91:13:53:81:d5: 24:53:4d:7f:ba:db:70:df:7d:01:fc:e8:ba:1b:c0:f2:fa:8c: 0a:cf:f4:47:ad:65:f4:1a:54:df:72:69:69:8c:43:c1:d0:51: 90:22:4a:6d:5e:e5:db:64:66:26:a8:00:6f:38:ee:9d:a6:48: c2:24:48:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEztJ5OENW5mNwnP5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk ZTRhMTdjNWMtZWQ3ZC00OTNiLThlMDEtM2QzNGJmMDZjZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha21tT4jp/yukWYKMyOQBG0WYJwwVRwh65n6 0GP0vz/Luvj5LBbDFy8ETwwZq5XTXVeF39UhgZNZj/PezsUPdx4gqsJTomwF7vj/ xJDweAudAMJ4Q/mbvUPCwFjeeIKhdI5A7aQZTTUg++bmmEykNGLZjR7Sn3WGsbQT l459gphvzMHNTMrlbBC/Za0t0ddD2XojsvCAk87BVZTsJvRHUaIc4y4haVsTKAwX QRDBAZFBFXADe9FgUCOmkFrKRAVyMRhaD5ztUX/aqDxCw0zCUNBkWeau3F8LDKKm HawxrQQh82Eg/Fkkd3zBs43ZGF2IXe1d1oXECcqvwE6nsyrEfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFBQetNya99Sbc6O2QPGBZoQ5fa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTQ2MzE3ZjktNTE4MS0z NWE3LWFiMjAtMDBiYWNmNjhiZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9nzbuQ27gM17tdrxBixjqd6iHY98EFa39T0cZqujONOKZCGiY8v4U b1BJhzWv57XYPUmxZeH3yp8guiaJT+7ANSG1uYviRHOBcAxLMmEVI/RcZ5NCCCP7 VS1o7BZrtJPt1NAf5+zH3FPZ2q7PfNCg2hUMMR73nCNjOi51kFffLvrPFsYMLJRj 7C8LlK/t6EvSVedbuWyVK2B9tWrtdykJegKXc5Eb1DCwbjfSrJpDfh4IxOYuSvCt 2rCI16bpvaTikRNTgdUkU01/uttw330B/Oi6G8Dy+owKz/RHrWX0GlTfcmlpjEPB 0FGQIkptXuXbZGYmqABvOO6dpkjCJEiA -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:32 2026 by rpki-client