$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa File: 7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa (raw, json) Hash identifier: 7XmFzDC9h2cNMGFy7eK8B8CO6XZpv56HEz7fmChxBKQ= Subject key identifier: 68:7C:B2:6E:B3:C5:38:DE:5E:AE:68:64:D0:F5:40:67:39:38:3E:FD Certificate issuer: /CN=bae7ed2b-d42a-42fa-947d-f719eddc984a Certificate serial: 010D0C9F4328584D00B27CF3CBE1A4BD7B64EA40 Authority key identifier: 88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 397423 IP address blocks: 2602:2c8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:7c:f3:cb:e1:a4:bd:7b:64:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bae7ed2b-d42a-42fa-947d-f719eddc984a Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=3258e317-c7c0-43bf-86ec-ffe9286eb47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:fa:ce:65:14:9c:12:32:8d:61:46:c1:d7: a3:1e:04:83:15:52:fd:9c:a9:c6:33:8f:d9:86:c4: 7c:47:e7:b4:9b:c6:3b:95:12:a3:21:75:85:04:ce: 7a:f3:eb:16:6c:2d:82:43:e7:e5:e3:ea:56:98:b5: 5a:c5:3b:db:6b:55:b1:4b:40:be:4a:08:96:83:ad: a8:77:f0:9b:95:1b:28:97:ad:b5:a0:d6:71:11:39: c2:87:d5:87:df:4a:84:58:27:bd:e2:f5:f6:6d:09: d6:8a:68:6c:c5:80:6d:5d:3d:75:3b:e4:a7:60:e9: 92:75:ef:6d:64:b6:6b:3c:e6:05:30:b6:c3:78:a9: a0:df:f9:6f:d3:7b:4e:b1:5d:a0:e6:75:5a:0c:6b: 2b:e9:b6:15:c9:5f:8b:40:a8:89:15:b8:49:d8:10: 89:be:98:23:51:03:60:68:4c:2c:98:2e:2b:b6:97: c7:9f:08:fe:61:1f:94:93:a2:d2:06:67:76:a6:5f: 9f:9a:5b:fa:23:89:1c:bd:9a:87:05:1e:ae:77:f7: b8:82:5f:d9:c4:5f:86:25:fd:f6:5c:fd:2a:cc:16: fb:ac:4f:70:9e:56:f7:b8:81:59:23:17:bb:ff:17: 53:41:8a:e9:2b:ee:83:e9:cb:49:91:75:f2:34:53: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7C:B2:6E:B3:C5:38:DE:5E:AE:68:64:D0:F5:40:67:39:38:3E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/7ff71d96-a125-37c4-b7c3-cf5b3b7092d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.crl X509v3 Authority Key Identifier: keyid:88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer sbgp-ipAddrBlock: critical IPv6: 2602:2c8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:75:08:1a:aa:93:5f:39:18:71:9d:b3:2d:6a:76:fb:25:91: b4:73:e0:2e:9a:97:58:c1:14:4c:a8:fd:37:33:07:8b:01:cb: 63:0e:ec:26:e6:8c:9f:41:39:a2:6d:0f:04:0c:cc:c2:13:9d: bc:1d:e9:da:c2:88:33:65:b0:e0:4c:76:30:71:31:ce:c3:6b: 5b:dd:63:0d:e9:b7:4b:30:6c:63:47:69:93:dc:8a:61:c6:df: 4b:e6:16:80:4c:8f:0e:13:16:04:30:5c:27:a7:dd:ef:72:c0: c6:ad:70:75:a1:3e:67:ce:2c:4d:38:0e:f8:da:0b:69:73:7d: 0e:d7:69:1f:ed:c9:d7:7c:2d:cb:fd:67:51:8b:f5:06:7b:5a: f0:48:5c:45:8a:5a:90:9e:5f:72:4e:1d:3c:5c:4e:1f:2d:58: 9f:89:e9:bb:92:a3:a1:9e:f9:17:2b:cd:93:b1:59:a7:1d:41: ea:6f:56:99:15:0d:78:70:a3:05:8b:dd:1e:0b:87:7a:af:08: 71:a9:ca:57:85:36:22:9a:40:38:ef:bd:89:89:d8:88:af:31: 3e:28:21:e1:8d:07:91:cd:25:a9:27:37:7d:53:0d:3b:cc:ef: c7:79:9f:23:b5:2a:07:30:ae:b6:5c:03:41:62:4f:90:39:2a: 6b:2d:f9:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Asnzzy+GkvXtk6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlN2VkMmItZDQyYS00MmZhLTk0N2QtZjcxOWVkZGM5 ODRhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MzI1OGUzMTctYzdjMC00M2JmLTg2ZWMtZmZlOTI4NmViNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknn6zmUUnBIyjWFGwdejHgSDFVL9nKnGM4/Z hsR8R+e0m8Y7lRKjIXWFBM568+sWbC2CQ+fl4+pWmLVaxTvba1WxS0C+SgiWg62o d/CblRsol621oNZxETnCh9WH30qEWCe94vX2bQnWimhsxYBtXT11O+SnYOmSde9t ZLZrPOYFMLbDeKmg3/lv03tOsV2g5nVaDGsr6bYVyV+LQKiJFbhJ2BCJvpgjUQNg aEwsmC4rtpfHnwj+YR+Uk6LSBmd2pl+fmlv6I4kcvZqHBR6ud/e4gl/ZxF+GJf32 XP0qzBb7rE9wnlb3uIFZIxe7/xdTQYrpK+6D6ctJkXXyNFOjTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGh8sm6zxTjeXq5oZND1QGc5OD79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3 ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5ZWRkYzk4NGEvN2ZmNzFkOTYtYTEyNS0z N2M0LWI3YzMtY2Y1YjNiNzA5MmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmFlN2VkMmItZDQyYS00MmZhLTk0 N2QtZjcxOWVkZGM5ODRhL2JhZTdlZDJiLWQ0MmEtNDJmYS05NDdkLWY3MTllZGRj OTg0YS5jcmwwHwYDVR0jBBgwFoAUiESzVgFRlSSpcJUrlYdnm2Td2zowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYWU3ZWQyYi1kNDJhLTQyZmEtOTQ3ZC1mNzE5 ZWRkYzk4NGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADx1CBqqk185GHGdsy1qdvslkbRz4C6al1jBFEyo/TczB4sBy2MO 7CbmjJ9BOaJtDwQMzMITnbwd6drCiDNlsOBMdjBxMc7Da1vdYw3pt0swbGNHaZPc imHG30vmFoBMjw4TFgQwXCen3e9ywMatcHWhPmfOLE04DvjaC2lzfQ7XaR/tydd8 Lcv9Z1GL9QZ7WvBIXEWKWpCeX3JOHTxcTh8tWJ+J6buSo6Ge+RcrzZOxWacdQepv VpkVDXhwowWL3R4Lh3qvCHGpyleFNiKaQDjvvYmJ2IivMT4oIeGNB5HNJaknN31T DTvM78d5nyO1KgcwrrZcA0FiT5A5Kmst+bk= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:57 2026 by rpki-client