$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa File: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json) Hash identifier: D8sthbiO6oaLwPhkv75qaHf2Xl35DriLPZhWh6mr6cQ= Subject key identifier: 68:46:08:0B:FB:81:92:5C:F4:F0:23:F0:48:83:BB:2C:0D:59:D3:45 Certificate issuer: /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Certificate serial: 010D0C9F4328584CB551EDECF3AE5B0891FE6340 Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 396996 IP address blocks: 2602:f9c8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:ed:ec:f3:ae:5b:08:91:fe:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=c963973b-7739-49ec-804a-29e19ba2f958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fa:08:67:01:46:fa:55:39:64:38:66:17:ce: e7:b2:5a:e0:91:17:be:69:19:0e:2c:e6:3b:d0:ca: d5:08:35:c2:09:19:d0:81:c8:95:5d:aa:92:6e:63: 70:60:9f:67:4a:61:31:6f:76:64:b2:1d:9c:d7:6c: 8a:51:fe:34:a7:31:29:34:a2:91:a3:ed:4f:24:f0: 73:b3:76:d9:af:a1:63:d8:09:e9:74:db:5b:45:0d: 23:50:3c:b6:99:ae:0f:85:4f:29:fc:6e:a1:f7:55: eb:ba:ca:e5:c2:a0:5d:74:0c:92:ef:5d:9f:0e:2f: 33:cd:fe:01:9e:7e:bf:7c:54:de:52:05:ed:5d:3b: aa:f3:97:1f:b3:45:cf:e0:1c:f8:04:bc:f6:c1:ba: c7:0e:6b:9d:e2:f4:92:ca:6f:77:ba:10:cd:bc:58: 7d:3c:d6:7e:5c:90:17:c9:06:c6:e3:ab:37:18:c2: 3c:8e:73:16:21:c4:31:c5:99:bd:24:ce:7d:4e:04: 40:55:00:e5:33:db:bb:4d:d2:9a:21:97:42:e9:ae: 11:f6:7f:42:08:f7:a2:94:d6:3a:83:bb:8a:6b:59: b2:cd:5e:80:d9:46:13:bb:fe:86:f3:31:54:57:0b: 59:7c:b8:79:ad:a0:60:4f:c9:d0:4d:5d:43:02:f6: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:08:0B:FB:81:92:5C:F4:F0:23:F0:48:83:BB:2C:0D:59:D3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl X509v3 Authority Key Identifier: keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:82:aa:14:d5:18:1f:af:29:56:46:df:e1:7f:a2:aa:ff:fd: cd:7b:be:07:f6:81:0c:6d:e5:98:2d:ae:e0:44:af:2a:e2:a0: 85:16:17:37:99:cb:87:7f:42:98:9c:ad:01:af:b5:a4:33:a6: cf:61:91:ac:b8:f6:eb:a1:65:ba:83:d8:d5:47:7e:3e:1a:e2: 39:48:f5:dc:ac:ca:73:43:fa:2d:4e:2a:b3:63:45:24:b6:1d: 60:4e:94:b6:93:62:88:fa:31:8a:e8:ea:a2:c4:bc:73:69:26: 61:99:ec:ee:f0:a7:7d:c9:97:90:84:4a:75:ed:fe:65:8c:9d: a6:a6:c9:ed:e0:b8:d2:eb:df:58:86:84:f6:64:fb:d7:4e:2f: 6f:51:dd:86:fb:bc:35:7e:a6:b2:c1:4a:61:29:27:66:1d:d8: 4c:42:fb:79:35:3e:48:9c:69:8f:93:57:ec:e7:45:83:49:e7: 2a:39:83:4e:f3:0b:31:14:4b:43:f8:83:80:a2:d6:89:3e:d1: 00:9d:44:55:43:da:f9:47:e4:94:a5:bd:30:38:63:46:34:70: b7:63:09:1d:11:e6:29:73:b8:d8:7a:6a:76:43:68:95:1d:11: 69:31:51:05:7b:8b:ea:50:b4:b3:db:f0:9e:a5:c5:af:8f:72: 1e:38:b5:a9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy1Ue3s865bCJH+Y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5ZjlkMzYtZjk3MC00ODFmLWFlNTItZTc0YTZmOGE3 NTQxMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk Yzk2Mzk3M2ItNzczOS00OWVjLTgwNGEtMjllMTliYTJmOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvoIZwFG+lU5ZDhmF87nslrgkRe+aRkOLOY7 0MrVCDXCCRnQgciVXaqSbmNwYJ9nSmExb3Zksh2c12yKUf40pzEpNKKRo+1PJPBz s3bZr6Fj2AnpdNtbRQ0jUDy2ma4PhU8p/G6h91XrusrlwqBddAyS712fDi8zzf4B nn6/fFTeUgXtXTuq85cfs0XP4Bz4BLz2wbrHDmud4vSSym93uhDNvFh9PNZ+XJAX yQbG46s3GMI8jnMWIcQxxZm9JM59TgRAVQDlM9u7TdKaIZdC6a4R9n9CCPeilNY6 g7uKa1myzV6A2UYTu/6G8zFUVwtZfLh5raBgT8nQTV1DAvYNgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGhGCAv7gZJc9PAj8EiDuywNWdNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlm OWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRhNmY4YTc1NDEvZGRkMTlkMzMtZWYwMi0z NGMxLWFiZDEtYWVmMjkwNGI3YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTk5ZjlkMzYtZjk3MC00ODFmLWFl NTItZTc0YTZmOGE3NTQxL2E5OWY5ZDM2LWY5NzAtNDgxZi1hZTUyLWU3NGE2Zjhh NzU0MS5jcmwwHwYDVR0jBBgwFoAUvMRVQVuDs9BtufBxgJNbtCGZ05swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlmOWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRh NmY4YTc1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5yAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAk4KqFNUYH68pVkbf4X+iqv/9zXu+B/aBDG3lmC2u4ESvKuKghRYX N5nLh39CmJytAa+1pDOmz2GRrLj266FluoPY1Ud+PhriOUj13KzKc0P6LU4qs2NF JLYdYE6UtpNiiPoxiujqosS8c2kmYZns7vCnfcmXkIRKde3+ZYydpqbJ7eC40uvf WIaE9mT7104vb1Hdhvu8NX6mssFKYSknZh3YTEL7eTU+SJxpj5NX7OdFg0nnKjmD TvMLMRRLQ/iDgKLWiT7RAJ1EVUPa+UfklKW9MDhjRjRwt2MJHRHmKXO42HpqdkNo lR0RaTFRBXuL6lC0s9vwnqXFr49yHji1qQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:47 2026 by rpki-client