$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa File: 829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa (raw, json) Hash identifier: YOieDwhjArWd5ysalYYpKQQLPajn90whRPs1DPawLmA= Subject key identifier: 0E:8E:E3:1F:91:B4:21:EA:97:3A:D7:CF:A8:82:7A:1A:C8:48:62:2B Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584CF8335350E9DB49D3C238B000 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa Signing time: Tue 24 Feb 2026 12:58:31 +0000 ROA not before: Tue 24 Feb 2026 12:58:31 +0000 ROA not after: Mon 25 May 2026 11:58:31 +0000 asID: 25645 IP address blocks: 2605:8300:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:33:53:50:e9:db:49:d3:c2:38:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Feb 24 12:58:31 2026 GMT Not After : May 25 11:58:31 2026 GMT Subject: CN=60fbc2e6-3501-4108-9955-f41573ec50b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:83:72:c5:0e:b4:c7:ab:44:9c:dd:ac:f8: a4:89:af:64:72:e9:ae:3f:18:a0:54:0f:6e:4c:ee: 95:1c:36:3d:af:2e:69:c6:52:66:a2:a1:9d:46:5a: 1f:66:c6:73:bb:5c:b0:ae:3d:2a:37:7f:eb:80:35: df:f2:86:52:69:bb:e6:6b:fc:8f:92:2c:2a:b5:45: 42:d1:28:3c:b6:20:56:a2:c8:66:2a:60:13:ca:96: 3b:65:4d:da:6b:6c:97:9f:4b:3d:c6:92:16:c0:0a: d5:ec:d1:ea:9e:a5:c2:cf:12:ac:ec:db:83:96:8d: eb:ab:2b:68:a4:b2:e5:ef:91:96:9b:84:9b:4d:eb: 87:de:ea:78:1a:55:e3:27:3f:14:83:a3:96:32:22: 74:93:f5:42:99:b0:bc:26:b0:7c:a9:d2:80:92:52: de:85:40:cf:2c:03:4d:91:3c:91:21:bf:d8:be:61: b5:ce:e6:23:59:88:21:33:d1:1d:78:05:84:db:1c: 2d:92:a0:d2:c7:0a:d4:d6:6b:1c:5d:ae:18:72:c7: 58:7f:c5:ef:1a:37:8c:9c:12:fe:fa:9c:24:5e:76: 7a:b0:56:b9:e0:9b:09:c6:b9:0c:24:3a:ed:ab:b6: 85:64:1a:e2:5e:d7:e5:92:64:6b:a9:34:fd:aa:10: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8E:E3:1F:91:B4:21:EA:97:3A:D7:CF:A8:82:7A:1A:C8:48:62:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/829d81f5-2c8a-3efc-b890-4c50ac96d9ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv6: 2605:8300:c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d8:12:ec:87:83:36:1b:b0:df:a9:54:a8:14:9a:f3:77:c8: 1d:ee:d7:ae:ad:2f:e4:52:e7:16:61:ef:b1:3a:25:7d:20:aa: 1d:26:b3:4f:fd:99:c5:a5:cd:b1:d2:55:1e:db:38:b5:1b:9e: e0:20:20:f1:ff:4c:3a:e6:5d:89:d5:be:9c:e7:d9:01:af:54: 0a:58:87:e9:01:53:37:bc:f4:80:33:33:03:1e:99:0b:be:25: cc:71:eb:b0:77:a4:d0:0c:a3:14:31:93:bc:81:ec:3c:4d:1f: 55:a0:5d:b3:25:5f:d1:e6:f8:1d:b5:3e:46:03:b9:aa:9c:a4: 07:86:a4:53:73:d9:db:78:46:e5:65:b3:c1:35:ad:11:21:b4: d9:10:3f:4d:ac:d8:3a:b9:23:8e:64:bb:56:53:30:18:64:2f: 76:93:cf:e7:8b:ad:ef:99:c0:08:5b:77:cc:27:7a:61:fb:b8: 89:a9:a2:e7:9e:c0:d8:e5:7f:1e:46:3e:e1:11:ad:18:5d:34: 59:03:65:91:2a:3c:d8:d2:e1:18:8a:da:b4:e3:cd:af:52:19: 05:c8:b4:41:5a:f0:d9:fd:78:6c:69:3c:11:b4:22:23:85:0b: 1d:e1:27:b6:7d:7f:63:a9:36:b2:f3:98:06:09:ef:e5:f6:36: a8:30:ac:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz4M1NQ6dtJ08I4sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDIyNDEyNTgzMVoXDTI2MDUyNTExNTgzMVowLzEtMCsGA1UEAxMk NjBmYmMyZTYtMzUwMS00MTA4LTk5NTUtZjQxNTczZWM1MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJiDcsUOtMerRJzdrPikia9kcumuPxigVA9u TO6VHDY9ry5pxlJmoqGdRlofZsZzu1ywrj0qN3/rgDXf8oZSabvma/yPkiwqtUVC 0Sg8tiBWoshmKmATypY7ZU3aa2yXn0s9xpIWwArV7NHqnqXCzxKs7NuDlo3rqyto pLLl75GWm4SbTeuH3up4GlXjJz8Ug6OWMiJ0k/VCmbC8JrB8qdKAklLehUDPLANN kTyRIb/YvmG1zuYjWYghM9EdeAWE2xwtkqDSxwrU1mscXa4YcsdYf8XvGjeMnBL+ +pwkXnZ6sFa54JsJxrkMJDrtq7aFZBriXtflkmRrqTT9qhCnrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6O4x+RtCHqlzrXz6iCehrISGIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvODI5ZDgxZjUtMmM4YS0z ZWZjLWI4OTAtNGM1MGFjOTZkOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWDAAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIzYEuyHgzYbsN+pVKgUmvN3yB3u166tL+RS5xZh77E6JX0gqh0m s0/9mcWlzbHSVR7bOLUbnuAgIPH/TDrmXYnVvpzn2QGvVApYh+kBUze89IAzMwMe mQu+Jcxx67B3pNAMoxQxk7yB7DxNH1WgXbMlX9Hm+B21PkYDuaqcpAeGpFNz2dt4 RuVls8E1rREhtNkQP02s2Dq5I45ku1ZTMBhkL3aTz+eLre+ZwAhbd8wnemH7uImp oueewNjlfx5GPuERrRhdNFkDZZEqPNjS4RiK2rTjza9SGQXItEFa8Nn9eGxpPBG0 IiOFCx3hJ7Z9f2OpNrLzmAYJ7+X2NqgwrLs= -----END CERTIFICATE-----Generated at Mon Mar 2 07:53:33 2026 by rpki-client