$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa File: 7f57ab54-4400-3df5-a895-a6e848077c75.roa (raw, json) Hash identifier: BqgWJ9pa/fAhk4Rn9hS09xjHOpsJEvaIQ5QDrRh6wDU= Subject key identifier: 2A:E2:08:6F:24:3A:E9:86:F4:4C:54:1D:A7:FB:AB:78:BC:6F:C4:3E Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584CB981DA1363DDC674F4771880 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 61112 IP address blocks: 2602:fa4f:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:da:13:63:dd:c6:74:f4:77:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=d7a67e6c-b94b-441a-b510-7704e5550032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:3b:29:22:5d:cd:9c:d4:b1:9e:56:7a:68: f9:ba:a6:77:76:4c:ee:ef:1f:7b:c7:84:bb:09:52: aa:40:43:00:4a:c6:af:9d:53:4c:6a:86:42:84:13: ac:8b:18:0d:6f:d9:47:5c:a6:17:ee:39:7f:f0:14: c8:81:88:a2:db:b4:4b:44:b1:24:4b:1b:88:6e:a5: 04:71:2d:ee:bc:be:51:6f:9c:27:bb:89:e9:09:eb: b1:06:26:cf:15:54:46:6d:5f:5c:b0:95:8d:a2:5b: 69:f7:c6:19:cf:15:d5:fd:dd:24:af:89:07:23:ab: b7:29:67:a4:7e:47:e8:0a:c6:ea:7c:c2:31:9c:39: b2:df:22:ff:a9:b6:a8:ee:5e:ca:15:a6:81:d2:ed: c4:50:aa:a0:8b:37:f8:e4:2d:cc:bb:62:dc:8b:c1: ca:dd:ba:7c:36:2b:4c:96:f7:55:97:aa:20:e5:17: 87:50:b4:5e:6c:21:5f:00:35:60:ae:6d:e2:cc:49: fa:1b:13:14:a0:fc:4d:27:90:a9:de:be:72:80:88: 34:86:e9:92:42:20:b1:66:57:71:46:49:74:70:c0: 34:89:a1:d3:d9:bd:bf:c0:15:47:e1:89:ec:bb:f5: cd:0c:1c:af:1c:a3:1b:58:53:b9:b8:51:9c:d3:80: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:08:6F:24:3A:E9:86:F4:4C:54:1D:A7:FB:AB:78:BC:6F:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7f57ab54-4400-3df5-a895-a6e848077c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8f:c0:24:39:cb:1d:4b:76:0c:5e:1b:ff:d5:e6:37:6c:d1: 63:8f:91:f7:05:ad:e9:57:4e:bc:b8:21:9a:9d:48:26:18:e2: 30:9b:5b:a2:ca:ee:eb:e0:63:09:a4:3d:53:dd:77:31:3b:10: 12:28:5e:45:c9:4e:e3:8a:19:b7:41:19:b5:97:84:b8:88:ae: b7:cb:6c:89:31:ea:0d:0d:eb:e0:50:65:9f:4f:c8:c2:66:25: 3f:92:36:e9:5b:91:cb:b7:ca:7f:55:63:53:f0:8d:cd:a7:cd: fa:c0:79:36:8a:99:53:85:99:1a:fb:dd:a5:34:3c:b3:69:e5: 02:1d:36:61:4c:39:62:82:29:a4:f0:6b:06:18:1e:73:ac:1f: 2b:ef:a7:b6:19:96:99:fc:24:2a:f5:25:41:42:ad:89:f0:f9: d8:5b:c3:39:93:94:e8:e4:58:b7:4c:d6:e3:97:c0:a2:c1:62: eb:9d:f3:d3:d7:d3:3f:b5:0f:03:31:4a:85:5b:0c:2a:9f:67: f7:91:92:eb:04:7c:74:18:7f:bf:85:6b:2a:50:db:82:d9:35: b2:66:d5:d9:61:d8:73:b5:64:41:dd:f2:0f:41:0c:05:09:f3: f7:07:17:19:26:97:95:a0:5d:fc:cf:fd:b2:71:82:c5:ea:b8: 0a:84:bd:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy5gdoTY93GdPR3GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDdhNjdlNmMtYjk0Yi00NDFhLWI1MTAtNzcwNGU1NTUwMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xo7KSJdzZzUsZ5Wemj5uqZ3dkzu7x97x4S7 CVKqQEMASsavnVNMaoZChBOsixgNb9lHXKYX7jl/8BTIgYii27RLRLEkSxuIbqUE cS3uvL5Rb5wnu4npCeuxBibPFVRGbV9csJWNoltp98YZzxXV/d0kr4kHI6u3KWek fkfoCsbqfMIxnDmy3yL/qbao7l7KFaaB0u3EUKqgizf45C3Mu2Lci8HK3bp8NitM lvdVl6og5ReHULRebCFfADVgrm3izEn6GxMUoPxNJ5Cp3r5ygIg0humSQiCxZldx Rkl0cMA0iaHT2b2/wBVH4Ynsu/XNDByvHKMbWFO5uFGc04DfQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCriCG8kOumG9ExUHaf7q3i8b8Q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvN2Y1N2FiNTQtNDQwMC0z ZGY1LWE4OTUtYTZlODQ4MDc3Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAf4/AJDnLHUt2DF4b/9XmN2zRY4+R9wWt6VdOvLghmp1IJhjiMJtb osru6+BjCaQ9U913MTsQEiheRclO44oZt0EZtZeEuIiut8tsiTHqDQ3r4FBln0/I wmYlP5I26VuRy7fKf1VjU/CNzafN+sB5NoqZU4WZGvvdpTQ8s2nlAh02YUw5YoIp pPBrBhgec6wfK++nthmWmfwkKvUlQUKtifD52FvDOZOU6ORYt0zW45fAosFi653z 09fTP7UPAzFKhVsMKp9n95GS6wR8dBh/v4VrKlDbgtk1smbV2WHYc7VkQd3yD0EM BQnz9wcXGSaXlaBd/M/9snGCxeq4CoS9bA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:16 2026 by rpki-client