$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa File: bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json) Hash identifier: ecNXFMFrTK4wLXs7IUtDUCjXcD69wIm1s8zaNHAXohk= Subject key identifier: 0B:BA:F3:2F:00:7E:60:13:80:34:A7:9C:D7:A1:82:5D:DB:D5:5B:A3 Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584C8A0C28526FBB3C358F97E5F1 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 14159 IP address blocks: 2604:aa00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:28:52:6f:bb:3c:35:8f:97:e5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=9cb95d1f-87b2-4404-92ee-ae6071478f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:e5:bb:f5:fa:cc:a2:83:ad:77:d9:39:99: 44:1c:20:0b:c9:af:95:21:47:ad:c7:e5:5c:44:96: 3a:59:0a:42:94:df:4f:e0:63:0a:8d:53:50:e6:87: b6:20:51:ac:13:e0:ea:01:8f:4e:08:3b:13:50:8f: 43:5d:6a:cb:9a:4a:19:8e:37:df:67:f2:d2:e7:7b: 56:fc:71:00:53:bd:99:b7:06:3d:f4:9e:50:49:9e: a2:ea:30:9d:1c:cb:45:6b:75:c9:9e:fe:0e:50:59: aa:5b:c2:68:ae:bc:12:47:7d:36:2a:62:f7:36:ff: c7:3c:74:a1:4a:07:cf:4c:bc:a1:79:a3:5e:d0:ea: c7:84:d3:3b:86:1f:ba:42:92:cd:3f:24:a1:29:52: 39:97:60:20:8c:d1:73:fe:25:ad:16:03:b9:77:47: 15:7d:b6:8c:a8:db:89:58:42:97:e3:73:c7:d6:d7: c0:ed:42:48:22:4e:68:d7:52:a1:ba:52:01:f9:80: 2f:11:70:af:44:be:67:92:c0:32:f5:ca:7f:59:4e: 4a:8b:1f:d0:b5:28:dd:fa:db:73:79:c0:d6:bc:23: ca:59:cc:05:fd:8c:02:45:4d:b7:d4:52:a4:3d:34: dc:56:c9:2e:94:65:05:40:2c:ca:c7:d2:95:b8:1f: 8a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BA:F3:2F:00:7E:60:13:80:34:A7:9C:D7:A1:82:5D:DB:D5:5B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:30:15:18:c1:1c:4a:8b:4b:aa:61:e6:7a:ad:4d:c1:10:0f: c0:d7:71:d6:8a:68:86:ac:83:c8:e5:bf:09:7a:05:21:cf:52: 8a:36:8b:80:03:c8:53:bc:b2:23:87:c8:69:2a:c3:e8:9d:d0: 91:82:e6:d3:ce:4a:47:cb:c7:0e:67:57:88:e8:cc:fd:98:87: cc:ab:11:05:37:bc:63:2c:fa:7f:41:9b:e0:88:af:89:30:5f: 9b:6c:b4:83:ab:5c:80:c6:0f:9d:52:e7:57:a5:61:c4:ca:b9: 1d:6f:84:95:45:f5:27:22:b4:cb:83:9e:1c:bb:b9:4f:6f:8f: 06:97:b4:08:35:ac:47:03:1b:ab:c3:6e:1a:70:bc:87:2d:3e: 03:ab:82:00:97:a7:50:9f:b7:db:43:e7:82:17:49:98:38:4a: 59:a1:c6:c6:97:38:10:74:1c:02:0a:0a:2f:1c:45:70:ef:6e: eb:f2:1b:4c:8c:53:e6:a5:e2:8a:6e:36:a1:f0:a1:e0:0f:bd: 61:cf:cb:15:16:92:53:68:7f:7f:1e:2e:a2:bd:99:82:75:f3: 9f:e5:94:d6:30:66:a6:c5:1f:4e:eb:67:ec:5a:f0:4a:0d:42: 8d:6d:da:f1:05:a6:d8:d9:26:f9:a1:4f:d2:0b:c8:8a:74:74: 19:03:af:dd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyKDChSb7s8NY+X5fEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk OWNiOTVkMWYtODdiMi00NDA0LTkyZWUtYWU2MDcxNDc4ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Plu/X6zKKDrXfZOZlEHCALya+VIUetx+Vc RJY6WQpClN9P4GMKjVNQ5oe2IFGsE+DqAY9OCDsTUI9DXWrLmkoZjjffZ/LS53tW /HEAU72ZtwY99J5QSZ6i6jCdHMtFa3XJnv4OUFmqW8JorrwSR302KmL3Nv/HPHSh SgfPTLyheaNe0OrHhNM7hh+6QpLNPyShKVI5l2AgjNFz/iWtFgO5d0cVfbaMqNuJ WEKX43PH1tfA7UJIIk5o11KhulIB+YAvEXCvRL5nksAy9cp/WU5Kix/QtSjd+ttz ecDWvCPKWcwF/YwCRU231FKkPTTcVskulGUFQCzKx9KVuB+KnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAu68y8AfmATgDSnnNehgl3b1VujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvYmJjMGI5NDAtYTBiMC0z NTdmLTljMTItZTM3NDdmOTFhNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdMBUYwRxKi0uqYeZ6rU3BEA/A13HWimiGrIPI5b8JegUhz1KKNouA A8hTvLIjh8hpKsPondCRgubTzkpHy8cOZ1eI6Mz9mIfMqxEFN7xjLPp/QZvgiK+J MF+bbLSDq1yAxg+dUudXpWHEyrkdb4SVRfUnIrTLg54cu7lPb48Gl7QINaxHAxur w24acLyHLT4Dq4IAl6dQn7fbQ+eCF0mYOEpZocbGlzgQdBwCCgovHEVw727r8htM jFPmpeKKbjah8KHgD71hz8sVFpJTaH9/Hi6ivZmCdfOf5ZTWMGamxR9O62fsWvBK DUKNbdrxBabY2Sb5oU/SC8iKdHQZA6/d -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:49 2026 by rpki-client