$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa File: bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa (raw, json) Hash identifier: hF28QIsOu6bOmQjy46pK+5OLYtS4WIE0UT8XSUGyPEI= Subject key identifier: B7:89:DB:35:92:36:B5:AE:DE:B2:D3:10:B1:53:EB:B4:3C:97:9D:7F Certificate issuer: /CN=9eed61a4-093d-432f-9466-2001995b9535 Certificate serial: 010D0C9F4328584CD56C8ED0EF1E64344DDC8E30 Authority key identifier: AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa Signing time: Thu 12 Feb 2026 02:00:32 +0000 ROA not before: Thu 12 Feb 2026 02:00:32 +0000 ROA not after: Wed 13 May 2026 01:00:32 +0000 asID: 30307 IP address blocks: 2602:f9b1:20::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:6c:8e:d0:ef:1e:64:34:4d:dc:8e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9eed61a4-093d-432f-9466-2001995b9535 Validity Not Before: Feb 12 02:00:32 2026 GMT Not After : May 13 01:00:32 2026 GMT Subject: CN=de874b3a-70f5-474c-a02b-098a2c92e706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:86:48:54:ec:84:9e:4d:95:b6:4f:73:d5: 10:07:1b:a2:f4:7d:48:a2:8e:e3:7c:02:84:a9:16: 8b:f9:68:06:3e:45:b4:ad:7e:66:19:2c:7e:0b:32: e5:3d:aa:ea:bb:7c:a7:33:0b:7d:af:c9:ae:39:24: 7b:4c:8b:47:49:f8:b2:bd:86:d4:94:d1:8a:fb:13: 72:ed:f3:fb:64:36:db:ce:88:8c:21:9f:e0:70:07: d4:e1:e1:76:42:ec:a1:d7:e1:3e:04:ec:9e:b8:c7: 54:68:17:a6:5a:39:91:7e:cd:48:79:63:d2:54:4a: df:02:4e:5f:3d:d8:d7:c0:1d:12:05:a2:0c:50:9c: e0:3d:e1:48:f9:34:ca:de:c2:75:33:fc:09:3d:da: 23:4a:9f:2e:77:cd:df:49:78:e9:d6:56:0b:77:10: e3:0f:f2:f8:4b:2c:94:30:04:48:0e:41:07:b4:71: 48:28:e1:fc:4f:14:00:31:31:9b:b6:5c:31:6b:50: 3d:51:e6:a1:c8:97:12:d2:15:ff:b3:7b:16:07:e3: 0f:93:46:a6:33:b9:27:fc:6a:44:19:cb:57:b5:fe: d4:35:30:e3:26:01:93:c3:04:a4:10:a4:3e:e0:3a: 46:f2:cd:ef:94:05:c0:92:c2:3d:d0:87:5d:fc:5c: 78:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:89:DB:35:92:36:B5:AE:DE:B2:D3:10:B1:53:EB:B4:3C:97:9D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/bf7ea552-db98-377d-8cc3-9a06a9e6ca01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535/9eed61a4-093d-432f-9466-2001995b9535.crl X509v3 Authority Key Identifier: keyid:AF:FD:FF:4A:EE:43:85:68:1E:9F:C7:AD:E0:E3:E8:A9:A0:ED:A8:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9eed61a4-093d-432f-9466-2001995b9535.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9b1:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e3:82:18:ae:2e:87:ce:1f:57:4c:34:a2:9d:a5:98:70:30: 87:e4:d7:49:7e:3e:3d:a9:e1:fc:d7:0a:11:e6:31:1d:b1:6b: 3e:c6:99:dd:0d:5d:2c:8a:ab:35:82:b3:c4:f6:49:cd:d1:7a: 67:e7:0a:c8:3a:08:9a:4e:7d:d8:c4:81:49:f1:f3:14:cb:08: 86:25:b0:ff:99:ff:ce:d3:18:d7:ec:2a:82:41:31:4f:d7:cb: 80:4e:f7:ee:f4:c4:03:db:12:46:b3:7a:7a:1e:9a:ef:5a:df: e5:04:ce:8d:35:68:be:07:4d:35:66:cc:af:c9:ce:93:9c:4c: 9f:13:eb:a4:19:d9:7d:35:12:b9:bb:e7:b6:c9:c8:7d:d2:42: 41:9d:24:45:7e:9f:1c:21:89:f5:df:cb:b8:d3:89:34:83:1a: ee:df:21:64:28:ef:80:bd:04:8c:6b:31:8f:0f:23:ff:36:64: 3e:7b:88:b5:29:ac:91:9d:6c:4d:62:04:9f:9f:28:9b:e0:40: 39:40:ba:9f:82:b4:66:18:21:c3:94:41:de:3a:8c:3f:07:df: 1d:e1:44:19:52:b5:e5:ae:e0:09:52:ad:cc:14:22:0a:e2:a3: 05:b1:d4:6d:23:32:48:dd:77:1d:1d:a2:52:0f:00:3f:de:54: bf:09:a6:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzVbI7Q7x5kNE3cjjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVlZDYxYTQtMDkzZC00MzJmLTk0NjYtMjAwMTk5NWI5 NTM1MB4XDTI2MDIxMjAyMDAzMloXDTI2MDUxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZGU4NzRiM2EtNzBmNS00NzRjLWEwMmItMDk4YTJjOTJlNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIWGSFTshJ5NlbZPc9UQBxui9H1Ioo7jfAKE qRaL+WgGPkW0rX5mGSx+CzLlParqu3ynMwt9r8muOSR7TItHSfiyvYbUlNGK+xNy 7fP7ZDbbzoiMIZ/gcAfU4eF2Quyh1+E+BOyeuMdUaBemWjmRfs1IeWPSVErfAk5f PdjXwB0SBaIMUJzgPeFI+TTK3sJ1M/wJPdojSp8ud83fSXjp1lYLdxDjD/L4SyyU MARIDkEHtHFIKOH8TxQAMTGbtlwxa1A9UeahyJcS0hX/s3sWB+MPk0amM7kn/GpE GctXtf7UNTDjJgGTwwSkEKQ+4DpG8s3vlAXAksI90Idd/Fx4gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLeJ2zWSNrWu3rLTELFT67Q8l51/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVk NjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAxOTk1Yjk1MzUvYmY3ZWE1NTItZGI5OC0z NzdkLThjYzMtOWEwNmE5ZTZjYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWVlZDYxYTQtMDkzZC00MzJmLTk0 NjYtMjAwMTk5NWI5NTM1LzllZWQ2MWE0LTA5M2QtNDMyZi05NDY2LTIwMDE5OTVi OTUzNS5jcmwwHwYDVR0jBBgwFoAUr/3/Su5DhWgen8et4OPoqaDtqJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZWVkNjFhNC0wOTNkLTQzMmYtOTQ2Ni0yMDAx OTk1Yjk1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5sQAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnjghiuLofOH1dMNKKdpZhwMIfk10l+Pj2p4fzXChHmMR2xaz7G md0NXSyKqzWCs8T2Sc3RemfnCsg6CJpOfdjEgUnx8xTLCIYlsP+Z/87TGNfsKoJB MU/Xy4BO9+70xAPbEkazenoemu9a3+UEzo01aL4HTTVmzK/JzpOcTJ8T66QZ2X01 Erm757bJyH3SQkGdJEV+nxwhifXfy7jTiTSDGu7fIWQo74C9BIxrMY8PI/82ZD57 iLUprJGdbE1iBJ+fKJvgQDlAup+CtGYYIcOUQd46jD8H3x3hRBlSteWu4AlSrcwU IgriowWx1G0jMkjddx0dolIPAD/eVL8Jpnc= -----END CERTIFICATE-----Generated at Tue Mar 3 00:42:11 2026 by rpki-client