$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa File: 8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa (raw, json) Hash identifier: 8TW6QjQ4ceHBEkIxTqEvSm6fsTxHzI7HbyCd09Q3eYk= Subject key identifier: 55:02:98:5C:8A:1F:A6:45:D9:53:54:6E:48:CC:27:43:31:80:17:C6 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584C751C2860B99C6D824E1A8C00 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 20253 IP address blocks: 2606:bc40:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:28:60:b9:9c:6d:82:4e:1a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=4a4d5674-0746-49b9-b9fc-968425ade2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b2:eb:2d:a0:54:42:6b:27:17:ba:ad:8a:94: ef:85:e7:2a:d3:11:0b:bf:c3:eb:db:e6:c5:71:11: 31:f4:b2:fa:43:8d:98:5d:8e:c7:8e:4e:ac:4a:b3: bf:a8:8f:80:3a:2c:1c:78:e4:98:2e:18:2e:02:ae: 68:0c:ee:48:9c:b9:9a:77:3a:e3:f5:31:53:9f:93: 2e:b3:22:39:c1:8b:e9:75:6a:ab:6b:d5:04:b8:22: 5e:9d:df:7d:d5:58:2e:b8:9d:aa:ad:73:9d:2f:1b: 3d:9b:e2:cd:5a:4d:dd:6f:94:52:d4:ec:26:9c:8a: 7e:1f:3a:e6:97:09:3c:75:37:3a:97:96:cf:46:2f: 7f:2b:83:9c:6f:8b:46:ad:16:b3:17:7e:29:cd:0f: f0:aa:0b:01:2d:05:e0:b4:a5:7a:a2:70:56:27:e6: a0:b7:69:66:df:7f:5c:13:19:4a:8b:7c:65:3e:47: b6:47:93:b0:a0:ac:24:12:ca:57:63:fd:ac:32:b3: e6:08:db:f2:ba:48:29:05:e3:51:44:6e:19:67:0d: 88:d6:a7:84:ad:e5:b9:c8:14:a1:e0:1a:08:22:a3: 80:33:f3:7c:a5:48:58:d8:a1:60:f3:98:55:9a:cd: 69:dc:30:d8:a2:2b:e9:16:ea:30:1c:c8:2b:e1:53: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:98:5C:8A:1F:A6:45:D9:53:54:6E:48:CC:27:43:31:80:17:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/8d3a2844-3c89-3bb9-9aa2-4f02daa49715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:105::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:38:27:e1:7c:b3:50:10:23:2a:9f:8d:0b:58:dc:ff:42:64: ad:76:15:c7:61:1e:74:26:fa:91:f0:39:3e:35:e2:39:f3:ee: 73:66:bd:89:8b:20:97:bd:43:04:ca:bd:85:71:d6:93:a9:0e: 3b:fa:3a:f0:ae:e2:1d:ee:17:ff:4a:74:ce:59:ad:03:c2:c1: 91:20:e4:cc:a6:58:78:fe:8a:33:98:e2:77:c7:05:49:b3:b4: b2:90:49:43:6e:f3:c9:b7:73:d2:4e:3e:06:7d:d2:98:0d:7a: 43:f7:ae:86:bf:df:a9:89:8f:f1:60:32:b8:fe:a5:79:c8:8c: 08:ae:32:cf:ca:44:6c:19:fb:dd:06:a8:3d:9b:e3:62:35:c6: 00:e0:1b:60:88:57:9c:b0:fb:80:25:b5:63:e0:ea:b3:46:cc: 6e:45:2e:98:1e:66:6b:06:f7:0b:8c:be:6c:53:1a:f5:69:2e: a1:7a:85:ca:80:f9:85:b6:84:0a:df:af:2c:7e:3d:e6:9f:76: a8:37:86:ea:8b:b9:38:3a:b6:9a:15:f9:a5:78:d3:ff:83:d9: 80:f0:81:90:01:be:af:50:fb:70:9c:aa:a2:d3:e4:2e:b9:32: 8f:9d:ab:1f:7d:38:41:fa:af:61:c8:13:c1:a4:ee:a4:00:3a: f4:c1:7e:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx1HChguZxtgk4ajAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NGE0ZDU2NzQtMDc0Ni00OWI5LWI5ZmMtOTY4NDI1YWRlMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLLrLaBUQmsnF7qtipTvhecq0xELv8Pr2+bF cREx9LL6Q42YXY7Hjk6sSrO/qI+AOiwceOSYLhguAq5oDO5InLmadzrj9TFTn5Mu syI5wYvpdWqra9UEuCJend991VguuJ2qrXOdLxs9m+LNWk3db5RS1OwmnIp+Hzrm lwk8dTc6l5bPRi9/K4Ocb4tGrRazF34pzQ/wqgsBLQXgtKV6onBWJ+agt2lm339c ExlKi3xlPke2R5OwoKwkEspXY/2sMrPmCNvyukgpBeNRRG4ZZw2I1qeEreW5yBSh 4BoIIqOAM/N8pUhY2KFg85hVms1p3DDYoivpFuowHMgr4VMJqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUCmFyKH6ZF2VNUbkjMJ0MxgBfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvOGQzYTI4NDQtM2M4OS0z YmI5LTlhYTItNGYwMmRhYTQ5NzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAEF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQ4J+F8s1AQIyqfjQtY3P9CZK12FcdhHnQm+pHwOT414jnz7nNm vYmLIJe9QwTKvYVx1pOpDjv6OvCu4h3uF/9KdM5ZrQPCwZEg5MymWHj+ijOY4nfH BUmztLKQSUNu88m3c9JOPgZ90pgNekP3roa/36mJj/FgMrj+pXnIjAiuMs/KRGwZ +90GqD2b42I1xgDgG2CIV5yw+4AltWPg6rNGzG5FLpgeZmsG9wuMvmxTGvVpLqF6 hcqA+YW2hArfryx+Peafdqg3huqLuTg6tpoV+aV40/+D2YDwgZABvq9Q+3CcqqLT 5C65Mo+dqx99OEH6r2HIE8Gk7qQAOvTBfiI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:01 2026 by rpki-client