$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa File: 86f379de-78d4-3374-b459-aea02f2a2a16.roa (raw, json) Hash identifier: DODaNHyByXu8VrD5i6MwzDVYPE/20MjpUNx17U6h1Jc= Subject key identifier: 78:3D:43:D1:76:6B:66:A8:9B:9E:18:31:D2:EA:EF:A3:91:59:06:F9 Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Certificate serial: 010D0C9F4328584CD99CE3EC9D5759D40BFCD5C0 Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 396416 IP address blocks: 2602:fb78:90::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:e3:ec:9d:57:59:d4:0b:fc:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=b0df3f32-5681-4080-8695-a30fb78a1c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:50:12:eb:d2:ce:87:a7:37:4a:f6:15:22: 69:29:6b:c4:15:82:90:2c:4d:24:e4:c7:91:ce:93: c6:e9:b1:94:d8:1f:df:cc:98:8c:e3:b7:e4:96:76: 61:cc:80:04:79:5b:c8:26:96:63:01:3c:33:71:3e: 1b:1d:e3:23:3f:09:10:7a:0b:45:db:9a:b9:b2:ce: cb:9e:af:4d:2e:eb:0d:f1:09:16:63:30:4f:99:08: 41:24:47:87:4a:e6:70:42:7e:04:be:a0:2f:bf:fb: 99:86:76:1a:fb:b9:26:1a:30:10:97:e1:a0:94:54: 98:ea:14:07:f5:a7:bb:a3:c0:48:ab:a2:6b:4b:95: 85:1e:0d:74:8d:b5:ec:41:e4:65:22:4c:13:50:63: 6b:90:e0:e7:8d:a2:82:d2:ae:2e:39:b9:07:da:4a: ea:e3:37:87:2c:38:00:32:9d:89:6d:7c:46:4e:e3: a9:04:c0:2c:9c:47:ea:e7:20:37:4a:ee:3c:aa:7b: 57:80:92:bd:15:a5:66:26:1a:06:33:83:34:81:7e: 1a:45:d6:d1:38:ab:f9:ee:52:43:66:e1:9d:ba:96: 7a:bb:5d:96:58:71:1f:a0:86:3c:17:19:10:f0:dc: 01:52:59:7d:af:80:54:9e:45:b2:f0:ff:d5:60:03: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3D:43:D1:76:6B:66:A8:9B:9E:18:31:D2:EA:EF:A3:91:59:06:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/86f379de-78d4-3374-b459-aea02f2a2a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl X509v3 Authority Key Identifier: keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb78:90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:33:a9:f9:ec:9e:07:8f:8e:b4:0f:05:48:5f:4c:75:95:b3: aa:05:a2:f2:e4:72:b5:09:9b:a9:1c:e9:bf:fb:5b:9a:37:fe: 95:8b:f1:0a:48:22:c2:29:73:cb:c2:25:68:95:ea:71:96:4f: b2:36:0e:64:b0:fd:99:5f:26:30:62:d9:8c:80:38:9e:12:a6: 75:df:f5:e9:2c:e8:bf:a8:e5:99:70:ca:df:f7:e1:60:05:95: 72:9e:86:de:51:6e:88:91:84:bb:de:65:84:69:8c:cf:bd:7d: cc:78:31:7c:bc:da:9b:1c:5d:20:2c:f7:cf:07:f3:3a:1f:e7: d6:93:62:25:79:ae:6e:10:c9:79:0e:20:c0:4b:cc:c4:70:2d: 4b:ea:65:a0:89:47:be:5d:03:a2:79:1e:5a:e1:d9:d4:80:95: 60:fa:cb:ad:10:95:c3:d7:ab:f7:9a:65:6f:e4:cc:8d:93:0a: 61:0c:9b:45:c2:75:57:64:a8:02:f0:83:ac:16:8a:74:43:54: 1f:dc:78:51:28:92:7c:bb:e4:9f:49:97:79:0e:b3:7e:e8:e5: 95:ad:67:fa:2c:40:af:95:a3:e6:39:e0:68:5c:cc:a2:10:ab: 9e:5a:4c:21:5d:ac:a8:e6:ba:36:5a:ce:24:89:5e:ee:fe:f5: d4:26:e8:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzZnOPsnVdZ1Av81cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNzExYjUtZDE2Zi00NTQ5LTllNzUtYmQyMDFmNWI3 YTEzMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk YjBkZjNmMzItNTY4MS00MDgwLTg2OTUtYTMwZmI3OGExYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFlQEuvSzoenN0r2FSJpKWvEFYKQLE0k5MeR zpPG6bGU2B/fzJiM47fklnZhzIAEeVvIJpZjATwzcT4bHeMjPwkQegtF25q5ss7L nq9NLusN8QkWYzBPmQhBJEeHSuZwQn4EvqAvv/uZhnYa+7kmGjAQl+GglFSY6hQH 9ae7o8BIq6JrS5WFHg10jbXsQeRlIkwTUGNrkODnjaKC0q4uObkH2krq4zeHLDgA Mp2JbXxGTuOpBMAsnEfq5yA3Su48qntXgJK9FaVmJhoGM4M0gX4aRdbROKv57lJD ZuGdupZ6u12WWHEfoIY8FxkQ8NwBUll9r4BUnkWy8P/VYAORkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHg9Q9F2a2aom54YMdLq76ORWQb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3 MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIwMWY1YjdhMTMvODZmMzc5ZGUtNzhkNC0z Mzc0LWI0NTktYWVhMDJmMmEyYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRkNzExYjUtZDE2Zi00NTQ5LTll NzUtYmQyMDFmNWI3YTEzL2ZkZDcxMWI1LWQxNmYtNDU0OS05ZTc1LWJkMjAxZjVi N2ExMy5jcmwwHwYDVR0jBBgwFoAUHHKGSiScg7PMA5PUnLiNgqiJlT8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGQ3MTFiNS1kMTZmLTQ1NDktOWU3NS1iZDIw MWY1YjdhMTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7eACQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQzqfnsngePjrQPBUhfTHWVs6oFovLkcrUJm6kc6b/7W5o3/pWL 8QpIIsIpc8vCJWiV6nGWT7I2DmSw/ZlfJjBi2YyAOJ4SpnXf9eks6L+o5Zlwyt/3 4WAFlXKeht5RboiRhLveZYRpjM+9fcx4MXy82pscXSAs988H8zof59aTYiV5rm4Q yXkOIMBLzMRwLUvqZaCJR75dA6J5Hlrh2dSAlWD6y60QlcPXq/eaZW/kzI2TCmEM m0XCdVdkqALwg6wWinRDVB/ceFEokny75J9Jl3kOs37o5ZWtZ/osQK+Vo+Y54Ghc zKIQq55aTCFdrKjmujZaziSJXu7+9dQm6Kc= -----END CERTIFICATE-----Generated at Sun Mar 1 14:57:40 2026 by rpki-client