$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa File: 397c8651-a597-3cf5-8c81-90307ce30cf8.roa (raw, json) Hash identifier: il4nCTD+9JyToLxqtAFeekykonRRdyw9d8lwRcr09n0= Subject key identifier: 01:CF:97:9A:6E:A0:23:15:23:C3:3F:E0:A7:04:B1:70:10:F8:92:58 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584D00B269D271D2E2CCF60D9560 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 395403 IP address blocks: 2620:4d:4022::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:69:d2:71:d2:e2:cc:f6:0d:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=19d88312-84fb-438b-bc35-2b7d3afc6fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:d3:88:ce:7b:45:41:92:d5:d5:c3:30:24: d4:95:c2:b8:a8:96:28:db:8b:ad:9f:71:58:51:b1: 1e:84:74:f5:01:43:d4:fb:2d:43:dc:a3:3e:ed:61: 1a:6b:06:10:4d:f3:4b:32:03:60:95:56:63:aa:7b: 8a:1b:05:d3:8d:29:d2:cd:fc:fc:89:80:56:2a:80: 35:8d:ab:67:98:db:26:3d:06:9d:7a:e7:81:fb:a2: 43:b6:41:70:ca:32:ab:ea:a7:82:c5:c4:5c:1d:92: 68:d2:57:65:db:25:d0:7a:5e:06:38:50:18:be:aa: a6:82:b5:8c:b4:68:fd:c9:db:93:b9:75:d9:a6:17: 0d:b2:41:ac:7b:b0:0d:7d:66:1b:74:0e:71:12:11: f5:32:5d:ed:ca:fe:cd:b8:40:0f:b1:4c:62:e3:bc: 4f:1d:7e:f5:40:69:f7:b9:1f:17:5a:a8:0d:fd:d0: fe:3f:f1:21:e9:b3:fb:dc:43:1b:8f:bf:c6:26:c6: 19:c5:44:85:63:e5:b5:32:95:1e:fe:0f:f0:8d:72: c0:61:72:77:21:6c:be:e9:a6:b4:ef:f3:2e:67:db: 03:f3:7c:6f:73:fd:02:a7:73:8b:36:70:d8:51:65: d1:74:51:80:c9:dd:79:df:74:b7:53:f8:80:19:5e: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:97:9A:6E:A0:23:15:23:C3:3F:E0:A7:04:B1:70:10:F8:92:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4022::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:25:46:14:2b:1e:87:d8:fd:df:4c:b5:cf:4a:b6:35:9c:0f: be:f3:62:21:1a:0d:0d:2f:9c:8b:26:88:72:06:fd:50:c5:09: ef:99:ce:87:4f:da:32:55:9a:08:97:e0:0c:47:ba:a5:7b:da: 37:0f:10:03:6d:8c:71:d3:93:c6:aa:b8:75:f7:11:39:e3:03: a1:5f:1f:2c:92:5e:ef:99:d6:d3:9f:93:e5:08:2b:3d:38:2c: 89:8a:71:07:04:88:80:d9:6e:32:75:09:16:68:26:1a:b8:62: 76:cb:9c:89:fc:80:bb:ea:02:43:6f:91:2a:96:11:82:94:7b: f8:5a:4b:ca:8c:b7:77:08:4a:da:27:d7:7b:1e:00:aa:1a:bd: ce:c7:e7:12:5b:03:92:45:69:12:3d:3b:f7:e5:99:26:21:3f: fb:ba:02:19:e5:33:69:6f:1b:fc:20:be:1d:2e:ba:13:25:68: e7:2f:93:83:c4:0e:d3:c3:8c:3c:c1:61:21:0f:da:c2:c6:58: 9b:f0:73:4a:4f:b4:ed:1f:ad:d6:30:18:1b:6d:00:50:75:92: 46:13:e5:01:21:53:43:3c:60:4a:69:0e:5f:e3:a8:47:ce:c2: 27:31:f4:27:c8:20:3d:9f:1a:00:4c:35:2a:7a:8a:63:52:f7: 8c:71:f8:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0AsmnScdLizPYNlWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MTlkODgzMTItODRmYi00MzhiLWJjMzUtMmI3ZDNhZmM2ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhjTiM57RUGS1dXDMCTUlcK4qJYo24utn3FY UbEehHT1AUPU+y1D3KM+7WEaawYQTfNLMgNglVZjqnuKGwXTjSnSzfz8iYBWKoA1 jatnmNsmPQadeueB+6JDtkFwyjKr6qeCxcRcHZJo0ldl2yXQel4GOFAYvqqmgrWM tGj9yduTuXXZphcNskGse7ANfWYbdA5xEhH1Ml3tyv7NuEAPsUxi47xPHX71QGn3 uR8XWqgN/dD+P/Eh6bP73EMbj7/GJsYZxUSFY+W1MpUe/g/wjXLAYXJ3IWy+6aa0 7/MuZ9sD83xvc/0Cp3OLNnDYUWXRdFGAyd1533S3U/iAGV6BbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHPl5puoCMVI8M/4KcEsXAQ+JJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMzk3Yzg2NTEtYTU5Ny0z Y2Y1LThjODEtOTAzMDdjZTMwY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYlRhQrHofY/d9Mtc9KtjWcD77zYiEaDQ0vnIsmiHIG/VDFCe+Z zodP2jJVmgiX4AxHuqV72jcPEANtjHHTk8aquHX3ETnjA6FfHyySXu+Z1tOfk+UI Kz04LImKcQcEiIDZbjJ1CRZoJhq4YnbLnIn8gLvqAkNvkSqWEYKUe/haS8qMt3cI Ston13seAKoavc7H5xJbA5JFaRI9O/flmSYhP/u6AhnlM2lvG/wgvh0uuhMlaOcv k4PEDtPDjDzBYSEP2sLGWJvwc0pPtO0frdYwGBttAFB1kkYT5QEhU0M8YEppDl/j qEfOwicx9CfIID2fGgBMNSp6imNS94xx+FI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:14:55 2026 by rpki-client