$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa File: 8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa (raw, json) Hash identifier: 6A6SdvTliS9uRBYvbc0Uo8DxKIq3yk4ZUk0dfdnn4B4= Subject key identifier: AF:C7:7B:19:38:4C:7A:0A:4D:64:99:07:0E:6B:08:57:09:7B:87:39 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584C6E2189EDAB5B56ED3CA7EEC0 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 20253 IP address blocks: 2606:bc40:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:89:ed:ab:5b:56:ed:3c:a7:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=790d0cfe-0926-49cc-997b-02698fd4c9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2b:bc:92:8a:41:44:e4:54:5b:d1:c2:8a:7a: c6:ee:6e:11:d4:74:88:94:0c:0b:98:0d:1f:95:c2: 58:78:69:2e:53:93:46:fa:74:88:e5:13:66:ff:e5: d9:37:83:38:68:0a:51:c6:47:23:17:ab:b4:30:68: 28:73:56:ff:12:90:13:5c:66:d7:a3:18:2a:9c:6f: a5:86:db:a1:b3:4b:f6:e4:1f:03:09:93:80:bc:48: 09:e2:8a:7b:17:d8:ff:cd:6c:04:08:8a:c5:e1:2c: ef:ec:f0:92:8a:a1:9b:9b:de:15:68:c6:2e:a1:3e: f4:91:61:5c:e4:27:30:f4:87:d4:b7:cd:67:e2:1c: 10:6e:bc:4d:ce:b9:74:56:3f:14:64:4b:92:dc:4a: 82:f2:4e:e3:4f:46:4c:b4:26:bf:1b:e3:a5:13:85: 45:0a:a7:c5:34:00:e0:f2:a5:93:4e:81:05:32:95: e8:93:d6:fc:45:75:a8:52:25:94:d9:65:6e:45:60: c2:e6:66:6e:96:28:fc:28:a5:c2:e0:63:2e:49:bd: c4:42:aa:7e:82:1d:aa:05:12:5e:90:b6:53:10:18: 12:94:79:bb:81:9d:01:7e:33:50:b0:59:97:d6:93: 07:94:95:5d:7d:8c:05:46:b5:0a:c0:48:48:1b:6a: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:7B:19:38:4C:7A:0A:4D:64:99:07:0E:6B:08:57:09:7B:87:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8029ca08-8f5e-39bb-983d-9cde1d0c2b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f9:7e:bc:74:26:18:0d:3f:fc:df:1e:cb:4c:8a:de:2a:4d: ff:6d:6f:15:ca:cb:25:6e:a9:57:94:b6:df:f0:2d:bd:73:f4: 18:e2:e6:76:17:83:f4:5a:94:18:89:df:7b:81:30:a6:e5:34: a2:b7:4d:69:ff:59:88:62:60:d7:28:5c:fa:a3:c3:80:7f:06: 54:8b:99:10:d3:d5:5e:c4:45:73:3f:26:4d:1d:e7:00:0f:2c: 49:c5:b0:89:9f:72:31:d5:de:15:e8:8c:71:fd:9c:5a:ec:5e: 74:6f:01:ca:7b:35:a4:16:58:1f:79:21:3b:f7:16:b2:ef:83: 92:b6:c5:14:a0:76:55:19:ec:94:0c:49:84:d3:d8:c6:88:a0: fd:76:53:1b:d0:02:5d:61:70:a7:e5:6e:64:d5:f9:7a:ce:9b: 30:00:4c:34:b4:e0:5d:8a:e5:6e:58:1c:34:78:57:cd:01:5f: 4a:f2:ec:96:4d:48:cf:ea:8a:7b:39:b0:aa:38:5b:09:1f:57: d4:b6:19:5a:72:4d:a9:1a:bf:bc:5c:c4:1c:51:a9:b9:9c:fa: b9:59:38:0a:2a:70:8f:83:e5:45:b8:14:f9:b9:9d:96:1c:ae: bf:f5:3f:96:10:bf:3b:70:80:97:7a:0d:0f:64:fb:6e:99:7e: 96:6b:07:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExuIYntq1tW7Tyn7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk NzkwZDBjZmUtMDkyNi00OWNjLTk5N2ItMDI2OThmZDRjOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Cu8kopBRORUW9HCinrG7m4R1HSIlAwLmA0f lcJYeGkuU5NG+nSI5RNm/+XZN4M4aApRxkcjF6u0MGgoc1b/EpATXGbXoxgqnG+l htuhs0v25B8DCZOAvEgJ4op7F9j/zWwECIrF4Szv7PCSiqGbm94VaMYuoT70kWFc 5Ccw9IfUt81n4hwQbrxNzrl0Vj8UZEuS3EqC8k7jT0ZMtCa/G+OlE4VFCqfFNADg 8qWTToEFMpXok9b8RXWoUiWU2WVuRWDC5mZulij8KKXC4GMuSb3EQqp+gh2qBRJe kLZTEBgSlHm7gZ0BfjNQsFmX1pMHlJVdfYwFRrUKwEhIG2pr7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/Hexk4THoKTWSZBw5rCFcJe4c5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvODAyOWNhMDgtOGY1ZS0z OWJiLTk4M2QtOWNkZTFkMGMyYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHT5frx0JhgNP/zfHstMit4qTf9tbxXKyyVuqVeUtt/wLb1z9Bji 5nYXg/RalBiJ33uBMKblNKK3TWn/WYhiYNcoXPqjw4B/BlSLmRDT1V7ERXM/Jk0d 5wAPLEnFsImfcjHV3hXojHH9nFrsXnRvAcp7NaQWWB95ITv3FrLvg5K2xRSgdlUZ 7JQMSYTT2MaIoP12UxvQAl1hcKflbmTV+XrOmzAATDS04F2K5W5YHDR4V80BX0ry 7JZNSM/qins5sKo4WwkfV9S2GVpyTakav7xcxBxRqbmc+rlZOAoqcI+D5UW4FPm5 nZYcrr/1P5YQvztwgJd6DQ9k+26ZfpZrB4w= -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:27 2026 by rpki-client