$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa File: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (raw, json) Hash identifier: 01BFVXiGsb+301Ll2EoFYXtqNbHDna0NZUKmE05mHy0= Subject key identifier: E9:27:24:CB:E9:04:54:0A:CA:E5:D5:6C:91:92:D4:89:30:C9:27:7D Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F4328584CAA270880BFBCA8E3C14A6E42 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 174 IP address blocks: 2602:fc39:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:08:80:bf:bc:a8:e3:c1:4a:6e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=7f7fb551-afbb-484b-b485-500ba51cee52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:c6:4f:ac:58:aa:fb:7e:97:b0:6e:df:c5: b0:09:03:67:64:b9:3a:ae:32:a6:5c:1e:fb:03:1a: d1:88:c9:8e:c3:64:ad:69:4a:ba:41:73:d3:c4:75: cc:f5:48:8c:c6:07:d0:77:81:b9:4b:33:29:5e:4a: 2c:64:5e:ba:28:4a:5e:59:47:8e:0d:34:0b:52:24: 25:df:92:75:d6:0f:ab:e5:a4:ef:67:c2:47:df:1c: 78:25:ba:11:f2:a1:ee:ae:9a:40:a4:62:99:8c:26: 88:3c:0b:40:28:16:eb:49:3b:fa:1c:76:b1:71:18: b6:bf:49:78:5b:27:73:3e:8f:31:44:44:79:85:a0: 51:b7:10:9c:c8:7b:14:07:f4:87:9b:e5:8a:de:61: 9a:89:f7:0c:ea:d2:fb:c2:a8:e2:b8:16:ee:fb:05: 21:4b:8b:bc:c4:2b:8e:99:f8:27:86:fc:31:04:d8: 0c:5e:f6:17:1d:af:b1:8a:d0:e7:06:26:ef:dc:31: 08:0a:87:87:69:b4:5c:8d:37:66:d2:19:a2:bf:2e: ac:67:4b:c1:1d:9b:db:30:49:7f:5e:cc:ab:0f:67: 42:e0:ad:1e:10:19:13:7f:a3:9e:21:ec:6a:1e:f5: ae:bf:db:92:ef:89:64:15:49:7f:39:ff:15:02:20: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:27:24:CB:E9:04:54:0A:CA:E5:D5:6C:91:92:D4:89:30:C9:27:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc39:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6e:a5:d9:cc:0e:4c:ec:b3:9a:fa:e9:6a:8d:f6:08:c3:fc: b5:d8:20:6a:ef:6d:c9:3c:de:dd:2d:51:b2:48:ea:83:c0:94: d1:c9:13:5c:aa:dc:44:41:cf:f1:1d:53:f2:50:30:ed:c9:e3: 91:87:da:1d:a0:72:5a:4b:32:c9:e2:70:9d:76:13:2f:85:d6: 56:94:64:ea:b7:91:86:47:f9:4e:aa:2c:a0:a9:5e:db:9c:fc: de:56:eb:71:9a:9c:dc:ee:29:d2:0f:fe:46:8b:f8:95:e5:91: f5:31:79:1b:e1:9b:8f:d9:e7:3e:33:46:88:2d:82:b6:07:de: 8a:b2:2a:c1:17:ca:f7:98:53:37:fe:b5:fc:c7:c5:e4:a9:f8: fa:9d:c3:f3:38:32:fb:4d:71:3e:3b:b0:a3:56:28:56:00:71: 09:96:a6:8f:d1:9b:53:b3:7b:ad:aa:de:4f:37:07:ac:65:fc: 4c:80:59:0d:1d:4c:86:e4:07:41:8e:c7:b3:33:e6:b9:74:7f: 57:3e:05:67:9c:ec:25:f1:d9:0f:14:f8:e8:05:ba:29:f9:40: 95:25:7b:bf:ee:ac:24:0c:e9:e0:41:21:6b:ec:5e:f1:db:e8: 79:3f:9c:d1:f2:df:88:45:e7:9c:e5:28:55:e5:7f:3a:7b:e6: 39:16:32:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyqJwiAv7yo48FKbkIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk N2Y3ZmI1NTEtYWZiYi00ODRiLWI0ODUtNTAwYmE1MWNlZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRrGT6xYqvt+l7Bu38WwCQNnZLk6rjKmXB77 AxrRiMmOw2StaUq6QXPTxHXM9UiMxgfQd4G5SzMpXkosZF66KEpeWUeODTQLUiQl 35J11g+r5aTvZ8JH3xx4JboR8qHurppApGKZjCaIPAtAKBbrSTv6HHaxcRi2v0l4 WydzPo8xRER5haBRtxCcyHsUB/SHm+WK3mGaifcM6tL7wqjiuBbu+wUhS4u8xCuO mfgnhvwxBNgMXvYXHa+xitDnBibv3DEICoeHabRcjTdm0hmivy6sZ0vBHZvbMEl/ XsyrD2dC4K0eEBkTf6OeIexqHvWuv9uS74lkFUl/Of8VAiCqHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOknJMvpBFQKyuXVbJGS1IkwySd9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZmZkOWY4ZDYtMGY5Ny0z ZmMyLTg3ZmMtNjNjYzA4ZDQ0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxupdnMDkzss5r66WqN9gjD/LXYIGrvbck83t0tUbJI6oPAlNHJ E1yq3ERBz/EdU/JQMO3J45GH2h2gclpLMsnicJ12Ey+F1laUZOq3kYZH+U6qLKCp Xtuc/N5W63GanNzuKdIP/kaL+JXlkfUxeRvhm4/Z5z4zRogtgrYH3oqyKsEXyveY Uzf+tfzHxeSp+Pqdw/M4MvtNcT47sKNWKFYAcQmWpo/Rm1Oze62q3k83B6xl/EyA WQ0dTIbkB0GOx7Mz5rl0f1c+BWec7CXx2Q8U+OgFuin5QJUle7/urCQM6eBBIWvs XvHb6Hk/nNHy34hF55zlKFXlfzp75jkWMog= -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:04 2026 by rpki-client