$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa File: 408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json) Hash identifier: druGMTweYGiYWN7TcbMrw0JdyYdey9RyJzgDQsdFRBM= Subject key identifier: 72:85:81:F6:39:7B:3C:84:9A:6F:61:B1:D9:81:95:0E:CC:C2:0A:56 Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8 Certificate serial: 010D0C9F4328584CF6ECD6240A80F7C4C3964C60 Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 401457 IP address blocks: 2602:f7bb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d6:24:0a:80:f7:c4:c3:96:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=417dae6f-9000-4347-b209-ba88ff8687f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:28:e1:5b:81:47:10:d0:b1:3f:7f:ca:dc: 04:3a:9f:45:a3:5c:03:5d:6c:84:d0:08:14:87:9d: 38:d0:a1:bf:84:e1:9d:e3:7e:a2:d9:29:bd:e9:7f: a2:aa:56:70:97:f3:47:30:78:c8:53:54:d7:59:7e: 90:03:f4:ed:33:f6:e0:ff:5b:13:99:f0:14:7d:a5: 87:d8:2d:0e:ae:7b:c2:8c:a3:82:84:2a:38:fc:f8: 3b:ee:0d:c0:84:1f:cd:a4:1c:f6:8f:da:46:ae:62: 52:c9:c4:28:66:6f:6a:a4:49:b1:0d:40:f2:e0:6c: e3:b5:e4:97:fb:37:71:cb:a8:53:a8:c4:60:80:90: cc:6e:f1:4b:81:b9:b0:9a:f8:b6:ae:f3:65:5d:e1: 47:46:2e:cd:9a:a0:e6:e6:e2:b3:74:55:ff:e8:53: 99:65:ae:1b:94:6e:74:a9:3e:c0:84:10:ad:61:2b: 5f:9f:ec:02:62:35:fc:00:af:81:86:e2:e3:4a:3c: 46:30:aa:1b:9d:2a:1a:e5:03:b0:24:e0:51:8d:68: d1:61:2e:3c:35:c0:c8:e8:bb:16:38:ca:c5:09:37: d1:ba:54:b6:fd:50:28:79:c6:59:11:ee:40:b5:90: 4b:00:c9:ac:e8:c5:3a:44:0e:60:41:41:29:49:40: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:81:F6:39:7B:3C:84:9A:6F:61:B1:D9:81:95:0E:CC:C2:0A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl X509v3 Authority Key Identifier: keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7bb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6b:7d:85:c4:45:46:3d:78:f8:14:c7:28:aa:b8:af:50:d4: 89:ee:58:12:37:ef:f4:4a:54:c8:52:8f:03:79:4e:ae:a6:bd: 82:27:43:b9:c6:93:66:06:cd:c2:1c:cc:d3:b9:9a:93:da:58: a6:3b:3a:72:88:d2:fd:ba:0d:5d:64:c3:a3:28:9e:df:73:08: 18:4b:2c:af:d2:32:41:34:2c:20:ad:96:41:43:86:03:bc:44: be:e2:fa:54:91:f8:5c:4d:a8:36:e4:8f:7c:ca:9c:b9:d4:11: 6a:9e:19:38:7b:e7:98:fa:f0:de:ec:12:25:40:37:f1:79:84: 7b:e9:aa:f5:e0:4a:15:4f:7f:33:c2:69:5d:64:55:18:ad:24: 19:34:8b:c8:62:cc:33:dd:87:a1:a1:4e:c9:36:20:64:77:63: e7:02:d3:09:9d:44:d7:a4:0e:fc:1b:3f:25:3a:f7:cc:42:a4: 50:a3:c2:32:89:7b:75:f6:8a:fe:15:db:b0:4f:98:dd:d2:b1: ef:4a:bf:5c:04:1d:36:82:da:49:52:ac:61:93:f5:f6:2b:59: 4b:8e:12:99:a5:14:26:58:ff:d6:cb:b8:2f:bb:cf:ee:41:c4: a9:2e:b7:a8:38:50:d6:f8:68:0f:c4:bc:78:35:bd:3a:a9:0e: 67:75:bb:43 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz27NYkCoD3xMOWTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0 NWM4MB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDE3ZGFlNmYtOTAwMC00MzQ3LWIyMDktYmE4OGZmODY4N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI0o4VuBRxDQsT9/ytwEOp9Fo1wDXWyE0AgU h5040KG/hOGd436i2Sm96X+iqlZwl/NHMHjIU1TXWX6QA/TtM/bg/1sTmfAUfaWH 2C0OrnvCjKOChCo4/Pg77g3AhB/NpBz2j9pGrmJSycQoZm9qpEmxDUDy4GzjteSX +zdxy6hTqMRggJDMbvFLgbmwmvi2rvNlXeFHRi7NmqDm5uKzdFX/6FOZZa4blG50 qT7AhBCtYStfn+wCYjX8AK+BhuLjSjxGMKobnSoa5QOwJOBRjWjRYS48NcDI6LsW OMrFCTfRulS2/VAoecZZEe5AtZBLAMms6MU6RA5gQUEpSUBvdQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHKFgfY5ezyEmm9hsdmBlQ7MwgpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvNDA4ZTk1OGUtYjYwZS0z MGQzLWJjYTktNDU5NmFmZWNjY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3 MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1 NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi MTU3NTQ1YzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3uwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANGt9hcRFRj14+BTHKKq4r1DUie5YEjfv9EpUyFKPA3lOrqa9gidD ucaTZgbNwhzM07mak9pYpjs6cojS/boNXWTDoyie33MIGEssr9IyQTQsIK2WQUOG A7xEvuL6VJH4XE2oNuSPfMqcudQRap4ZOHvnmPrw3uwSJUA38XmEe+mq9eBKFU9/ M8JpXWRVGK0kGTSLyGLMM92HoaFOyTYgZHdj5wLTCZ1E16QO/Bs/JTr3zEKkUKPC Mol7dfaK/hXbsE+Y3dKx70q/XAQdNoLaSVKsYZP19itZS44SmaUUJlj/1su4L7vP 7kHEqS63qDhQ1vhoD8S8eDW9OqkOZ3W7Qw== -----END CERTIFICATE-----Generated at Tue Mar 3 00:30:20 2026 by rpki-client