$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa File: d9d50e0c-e315-3a3a-af07-d97371184c8b.roa (raw, json) Hash identifier: fwDtr4t9TYaItjLWHepe4ksqh1m1gi33pTRhpcmXdhM= Subject key identifier: 6E:F8:C7:04:14:4C:E0:81:3E:21:04:EE:AB:04:83:C1:EE:45:D5:88 Certificate issuer: /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Certificate serial: 010D0C9F4328584CF6ECD7E46524D348031D5A80 Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 14702 IP address blocks: 2620:0:2b80::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d7:e4:65:24:d3:48:03:1d:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=7103ea6a-e1ca-4b38-92d0-193e241b28b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b2:20:62:43:10:05:a7:76:cb:c6:eb:17:1f: 34:e3:a3:f5:e0:44:98:e9:f6:bc:c8:2f:70:a4:86: c3:06:6b:e1:a1:cc:b0:99:8a:a9:fb:27:7a:db:c0: 98:6f:28:e2:33:e9:49:31:4f:e5:24:22:6d:38:7b: cd:1e:58:01:a4:0b:19:bf:a9:09:3a:aa:b0:bb:66: a7:c3:31:cf:b9:7b:8e:bd:3a:ce:38:3b:38:82:f1: 87:01:52:47:de:68:9f:e6:9f:49:75:2b:2b:1b:3a: 90:18:7c:e6:88:66:3c:0a:8f:f3:bd:70:8c:8e:98: 50:26:8f:1f:b9:ab:84:fc:73:30:2b:7b:22:1f:fa: a1:91:fc:74:03:cb:01:3b:1e:60:7b:c5:88:25:91: 8b:02:a2:3b:e6:b9:c3:c3:97:53:fa:cc:7a:a6:97: db:0f:60:ff:d7:08:a5:ce:c6:9c:f8:df:d3:f7:86: e1:c2:9f:af:34:e1:a9:f8:4a:c1:46:88:3a:af:94: 02:66:c6:f3:7e:8a:73:a4:84:9d:1b:0e:b1:c6:eb: 39:cc:18:36:53:18:18:59:d0:ff:12:af:da:db:53: f9:33:39:4f:98:03:88:ba:9c:66:79:31:80:3e:ae: 99:dd:06:88:8f:3e:21:41:e4:90:34:b7:28:0a:52: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:C7:04:14:4C:E0:81:3E:21:04:EE:AB:04:83:C1:EE:45:D5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d9d50e0c-e315-3a3a-af07-d97371184c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl X509v3 Authority Key Identifier: keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:2b80::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:37:5a:4a:45:1a:ca:54:84:f3:44:cb:2c:26:3f:d5:62:49: 35:b3:bd:a7:94:b2:7f:03:59:8c:52:42:af:c3:ce:a3:2b:f4: fc:db:d4:d3:ae:09:23:f5:21:39:85:ec:66:36:d7:50:43:f6: 29:c5:00:e8:dc:bd:a0:1b:b4:f3:b7:c8:b3:21:18:02:18:d0: cb:a5:06:d0:25:90:54:55:61:f9:a8:48:3d:74:5d:ad:e3:33: bb:78:b4:4a:9f:bc:66:16:ca:81:c1:dd:07:db:e2:0e:54:83: 19:61:5e:17:32:9d:28:4c:30:9b:59:ed:09:32:7a:b6:70:f0: 8d:d2:16:95:2c:a9:98:31:da:43:5d:b2:31:3e:8d:86:f1:90: 36:e8:16:70:e2:86:75:95:c5:20:bf:8c:9d:77:4c:a5:36:55: 47:19:86:51:54:68:2f:75:cb:bd:24:39:b3:2a:74:f9:8f:7b: 94:5a:29:bb:0f:65:f2:dd:64:9d:25:13:47:69:ca:6a:7f:ac: 46:c8:64:fd:80:90:d7:12:e3:79:75:99:99:51:4b:d1:53:6e: 69:37:02:f5:94:88:3d:f0:07:91:ec:0b:68:40:de:d0:81:bd: cd:ba:b0:52:39:ab:37:d2:33:19:c2:54:87:79:49:33:a4:ed: 34:06:38:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz27NfkZSTTSAMdWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUx ZjE1MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzEwM2VhNmEtZTFjYS00YjM4LTkyZDAtMTkzZTI0MWIyOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLIgYkMQBad2y8brFx8046P14ESY6fa8yC9w pIbDBmvhocywmYqp+yd628CYbyjiM+lJMU/lJCJtOHvNHlgBpAsZv6kJOqqwu2an wzHPuXuOvTrOODs4gvGHAVJH3mif5p9JdSsrGzqQGHzmiGY8Co/zvXCMjphQJo8f uauE/HMwK3siH/qhkfx0A8sBOx5ge8WIJZGLAqI75rnDw5dT+sx6ppfbD2D/1wil zsac+N/T94bhwp+vNOGp+ErBRog6r5QCZsbzfopzpISdGw6xxus5zBg2UxgYWdD/ Eq/a21P5MzlPmAOIupxmeTGAPq6Z3QaIjz4hQeSQNLcoClLXOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG74xwQUTOCBPiEE7qsEg8HuRdWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhi MjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvZDlkNTBlMGMtZTMxNS0z YTNhLWFmMDctZDk3MzcxMTg0YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGI4YjIwY2EtMmExZS00NzQyLWI2 M2MtNGIzYjFkMTUxZjE1LzBiOGIyMGNhLTJhMWUtNDc0Mi1iNjNjLTRiM2IxZDE1 MWYxNS5jcmwwHwYDVR0jBBgwFoAU8/9YqkABXh3QXRC3eKj4ZdKdQgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNi MWQxNTFmMTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAACuA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFo3WkpFGspUhPNEyywmP9ViSTWzvaeUsn8DWYxSQq/DzqMr9Pzb 1NOuCSP1ITmF7GY211BD9inFAOjcvaAbtPO3yLMhGAIY0MulBtAlkFRVYfmoSD10 Xa3jM7t4tEqfvGYWyoHB3Qfb4g5UgxlhXhcynShMMJtZ7QkyerZw8I3SFpUsqZgx 2kNdsjE+jYbxkDboFnDihnWVxSC/jJ13TKU2VUcZhlFUaC91y70kObMqdPmPe5Ra KbsPZfLdZJ0lE0dpymp/rEbIZP2AkNcS43l1mZlRS9FTbmk3AvWUiD3wB5HsC2hA 3tCBvc26sFI5qzfSMxnCVId5STOk7TQGOGg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:06 2026 by rpki-client