$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: AZdKSN0zXgcLZ60KrmFskPtZCXqCeJktxJGAi2PeS1Y= Subject key identifier: 80:13:62:AD:97:AB:C3:2C:B1:47:53:83:E5:69:5D:AB:11:09:2D:E6 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584CF2BCECEA4330C4B515E80360 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:ec:ea:43:30:c4:b5:15:e8:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=8c923f84-5507-4491-a8fc-902bafa79c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:74:5d:1c:2b:7b:e5:de:52:0e:9f:cf:12: e1:07:1f:da:86:84:89:f3:77:46:d6:e1:2e:15:50: 6a:64:52:4d:1e:83:9d:9d:f2:1b:50:33:89:d2:03: da:18:f9:7e:d7:43:d1:9b:d5:10:2f:20:9d:1f:4b: a7:8c:f2:2f:27:08:1b:aa:7a:d1:7a:2e:06:f5:7c: 4a:76:d4:33:95:ff:e2:80:94:68:f7:30:b8:5c:25: 92:da:43:1a:9b:51:77:1c:40:20:bc:0b:51:fd:1f: 74:95:6f:bc:ea:fe:91:9f:11:ac:41:7c:64:9a:f5: 3d:9e:de:bf:f7:e7:5c:59:23:62:ee:58:dc:f5:a6: 72:39:e2:dc:07:43:22:af:f5:4a:5f:11:d9:95:44: 9a:c2:bb:53:14:cf:d2:dd:4b:ec:57:c2:c1:f7:4b: 9a:df:05:06:f9:6e:28:aa:a1:c8:7e:9d:e7:4e:35: ba:ad:b5:a0:d0:4f:42:8e:ef:d7:16:aa:fd:b3:cc: 01:3b:37:42:fd:4a:a7:93:73:f0:42:be:ad:e4:ff: 89:68:82:f6:61:a6:bb:30:25:71:7b:67:69:df:e1: 0e:86:00:7b:0d:36:56:70:53:5d:6a:80:7b:db:b0: 08:a2:e4:64:b1:78:69:14:a5:65:a7:75:b5:07:0a: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:62:AD:97:AB:C3:2C:B1:47:53:83:E5:69:5D:AB:11:09:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bd:1b:5b:f4:a4:88:46:ea:3c:b9:78:dd:d2:dd:81:86:7b: 90:30:ab:20:a5:ef:4d:da:01:f6:f1:91:11:75:91:e3:e1:e4: af:45:ab:a4:b6:cf:e7:85:41:c7:48:c1:a7:44:36:f9:40:bb: 39:bf:b5:86:96:00:09:fd:09:27:2f:ef:c5:76:52:8e:83:14: 58:08:8d:65:2b:82:e1:50:c5:22:20:01:3a:db:99:bb:c6:be: 30:9a:1b:8a:76:70:1a:42:21:b9:49:6f:8c:99:36:4e:78:f2: a8:f8:6a:3f:05:cf:3c:ec:4e:e7:11:4b:2f:39:8b:90:ba:73: 54:37:3e:5d:6f:54:ba:9c:19:b5:0d:21:f9:c0:3c:a3:c1:0f: 1d:2f:e8:7f:8d:59:f5:88:df:1a:53:06:76:bd:bb:b3:56:19: 90:54:f7:28:12:95:fe:36:7a:39:80:01:ec:80:98:5f:42:4f: 5a:1b:66:10:7c:60:60:17:69:0d:c1:f7:86:5c:e3:24:ee:cc: 7b:9b:2c:73:03:20:11:b5:84:c6:22:7b:db:1a:4f:a7:77:7f: 0f:1e:b5:4c:40:d9:ff:67:ff:99:cc:b8:41:9b:13:20:0c:70: 91:70:5b:c2:33:ff:69:89:74:7d:09:48:a5:3f:8c:63:42:80: 17:47:b3:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzyvOzqQzDEtRXoA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGM5MjNmODQtNTUwNy00NDkxLWE4ZmMtOTAyYmFmYTc5YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitl0XRwre+XeUg6fzxLhBx/ahoSJ83dG1uEu FVBqZFJNHoOdnfIbUDOJ0gPaGPl+10PRm9UQLyCdH0unjPIvJwgbqnrRei4G9XxK dtQzlf/igJRo9zC4XCWS2kMam1F3HEAgvAtR/R90lW+86v6RnxGsQXxkmvU9nt6/ 9+dcWSNi7ljc9aZyOeLcB0Mir/VKXxHZlUSawrtTFM/S3UvsV8LB90ua3wUG+W4o qqHIfp3nTjW6rbWg0E9Cju/XFqr9s8wBOzdC/Uqnk3PwQr6t5P+JaIL2Yaa7MCVx e2dp3+EOhgB7DTZWcFNdaoB727AIouRksXhpFKVlp3W1BwqLmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIATYq2Xq8MssUdTg+VpXasRCS3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSvRtb9KSIRuo8uXjd0t2BhnuQMKsgpe9N2gH28ZERdZHj4eSvRauk ts/nhUHHSMGnRDb5QLs5v7WGlgAJ/QknL+/FdlKOgxRYCI1lK4LhUMUiIAE625m7 xr4wmhuKdnAaQiG5SW+MmTZOePKo+Go/Bc887E7nEUsvOYuQunNUNz5db1S6nBm1 DSH5wDyjwQ8dL+h/jVn1iN8aUwZ2vbuzVhmQVPcoEpX+Nno5gAHsgJhfQk9aG2YQ fGBgF2kNwfeGXOMk7sx7myxzAyARtYTGInvbGk+nd38PHrVMQNn/Z/+ZzLhBmxMg DHCRcFvCM/9piXR9CUilP4xjQoAXR7NG -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:13 2026 by rpki-client