$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: 8zeuGzwAmYhpjjOhdlwmC5/+n6uxTkYvkkm04QTHmI0= Subject key identifier: 41:FA:CF:47:FB:6A:F6:E9:AD:E1:19:3A:BA:68:31:97:5E:40:A6:35 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584CEFF248F5D2B651452AEB7620 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:48:f5:d2:b6:51:45:2a:eb:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=5673deef-68d7-4c0a-8164-a1ad0ed64185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4c:5f:36:91:80:3c:31:d3:f3:cf:31:eb:45: e1:d7:8e:4a:63:e5:ee:df:21:61:9e:69:a8:e8:a1: 59:e7:0a:c6:d4:5d:7c:5c:4d:a5:61:3a:5a:c4:5f: a1:db:74:3c:e5:f6:8d:dd:a9:bb:89:49:23:71:db: 97:ef:6b:a0:f7:32:5a:1a:d5:fc:96:78:75:0d:dc: 85:32:ef:e0:8c:34:46:90:dd:6f:af:b7:d9:3d:86: 04:00:d6:0d:e9:8b:e8:4a:62:a6:42:f7:09:4f:e1: 1f:3d:f7:42:99:8e:e5:0f:40:46:82:36:0d:2e:48: 54:17:ad:a7:fb:f4:2f:38:82:ec:0d:9b:28:6a:40: e0:c9:18:ce:a3:03:bd:da:b1:aa:c2:d2:d6:e4:ab: 65:8d:11:1d:e2:a1:27:2c:02:24:3e:0d:2f:20:ac: c9:83:04:98:7d:dd:b7:7f:ef:4d:0a:cd:dd:c6:80: bb:19:71:35:1f:59:d6:7b:35:9c:fc:2c:fa:04:89: 43:02:11:6d:58:9a:f9:84:b1:f8:af:f2:a2:3d:9c: 53:85:a5:52:2d:6e:f8:b7:6a:32:d4:2f:89:3d:83: a1:94:78:48:73:ea:88:3b:cc:83:d0:90:68:7f:9f: 25:14:71:98:26:d4:af:2b:ef:6d:cb:7c:17:70:a6: e4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:CF:47:FB:6A:F6:E9:AD:E1:19:3A:BA:68:31:97:5E:40:A6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3b:7a:17:58:02:1d:a8:12:43:55:f5:0a:6f:e1:76:90:c6: 53:fc:c2:9b:b8:7a:11:f4:09:de:5a:8d:4d:fc:2c:92:03:be: a6:c7:f9:91:48:ab:ba:a8:77:75:72:da:b5:e5:4e:65:2a:b7: ae:5a:41:c8:ef:09:68:d0:42:5c:de:06:72:ad:f0:20:98:9e: 8a:1d:eb:8f:7a:5e:56:b7:e8:a4:17:32:d9:23:51:cc:82:3d: 3f:1d:26:9d:df:65:56:5c:5e:63:f8:0e:22:d9:d3:fc:ba:4e: 39:7d:ee:8a:15:cf:54:23:5e:87:94:1a:94:27:2a:a6:b9:a8: df:67:fb:8c:49:e2:84:bf:1c:70:11:6f:3b:29:5f:c0:14:bf: 77:9e:a2:64:84:b7:9a:6e:9c:0b:86:18:bd:2f:15:8e:20:a7: 25:45:33:8c:39:e5:8e:47:e0:5f:03:b8:2d:c6:c7:ec:61:73: 8e:bb:99:4c:35:bf:70:93:5f:f5:7c:38:d0:6c:1b:03:fe:f0: 96:3d:fc:ce:6c:14:9c:7f:c2:ef:3f:8e:91:45:3b:bc:05:d6: ef:f8:61:8e:ef:38:27:14:5e:ba:13:d6:f4:81:91:86:6d:a6: f7:49:c4:bd:d7:91:e8:10:07:dc:ce:64:1e:80:1e:e4:79:47: 84:b2:59:d1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzv8kj10rZRRSrrdiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NTY3M2RlZWYtNjhkNy00YzBhLTgxNjQtYTFhZDBlZDY0MTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUxfNpGAPDHT888x60Xh145KY+Xu3yFhnmmo 6KFZ5wrG1F18XE2lYTpaxF+h23Q85faN3am7iUkjcduX72ug9zJaGtX8lnh1DdyF Mu/gjDRGkN1vr7fZPYYEANYN6YvoSmKmQvcJT+EfPfdCmY7lD0BGgjYNLkhUF62n +/QvOILsDZsoakDgyRjOowO92rGqwtLW5KtljREd4qEnLAIkPg0vIKzJgwSYfd23 f+9NCs3dxoC7GXE1H1nWezWc/Cz6BIlDAhFtWJr5hLH4r/KiPZxThaVSLW74t2oy 1C+JPYOhlHhIc+qIO8yD0JBof58lFHGYJtSvK+9ty3wXcKbkQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEH6z0f7avbpreEZOrpoMZdeQKY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQzt6F1gCHagSQ1X1Cm/hdpDGU/zCm7h6EfQJ3lqNTfwskgO+psf5 kUiruqh3dXLateVOZSq3rlpByO8JaNBCXN4Gcq3wIJieih3rj3peVrfopBcy2SNR zII9Px0mnd9lVlxeY/gOItnT/LpOOX3uihXPVCNeh5QalCcqprmo32f7jEnihL8c cBFvOylfwBS/d56iZIS3mm6cC4YYvS8VjiCnJUUzjDnljkfgXwO4LcbH7GFzjruZ TDW/cJNf9Xw40GwbA/7wlj38zmwUnH/C7z+OkUU7vAXW7/hhju84JxReuhPW9IGR hm2m90nEvdeR6BAH3M5kHoAe5HlHhLJZ0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:53 2026 by rpki-client