$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa File: 68e8e840-a656-3ad6-aea8-71835d66921c.roa (raw, json) Hash identifier: 0RF6TCZhVypLnCuM2qkpJdAiKt6lWGZ12btcDst1frA= Subject key identifier: 9B:4E:A0:D5:16:E9:2D:F0:46:35:C4:33:E1:52:D0:DA:A3:6A:F3:AA Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Certificate serial: 010D0C9F4328584CA75C6966460AC0568DCBF300 Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 36832 IP address blocks: 2602:f9bd:f01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:69:66:46:0a:c0:56:8d:cb:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=ce44c63e-e9c2-4484-b2f5-79f9e543e1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:44:92:7f:20:ed:ec:9c:63:e9:c3:97:ed: 29:74:9d:c4:e9:17:87:5e:8d:38:ce:05:9c:d3:ff: 1f:e6:45:05:df:ee:d4:74:29:a1:67:cf:61:80:f9: 88:76:15:1c:8d:bb:f1:ce:19:c3:b6:03:1d:6c:f7: f8:a1:1d:3e:85:fb:51:08:ff:87:17:8e:b1:c4:c6: 9b:bd:5f:ed:9a:f3:a8:71:df:b2:9f:20:7d:99:fd: 4d:b1:be:c1:e3:8c:ea:23:8e:8e:90:df:7f:0a:dc: e9:fb:f5:2e:0b:92:0b:eb:87:9c:a2:13:fd:cb:d5: 7a:16:b7:3b:80:0f:92:12:f3:58:ed:c5:36:d0:5e: 97:96:01:e8:ff:45:65:89:0c:3f:40:b2:49:99:da: e9:09:d7:bd:06:cb:82:5c:de:bf:da:ee:d6:e4:49: a5:c9:d7:0a:90:c4:59:7c:d3:94:50:72:44:21:c6: 62:b9:a6:7a:25:6f:c0:26:ce:d1:1e:a9:77:a0:93: 0f:64:d0:d5:51:21:fc:00:c3:e9:56:2b:a2:8f:e3: 4e:7e:8c:cb:73:9c:c0:91:47:ae:a7:58:0d:0f:cf: 4e:ad:08:bc:b6:30:c2:81:85:2e:64:1b:a6:83:f8: e9:ee:57:45:2c:27:15:4b:b2:3f:a5:e0:7c:ac:33: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:A0:D5:16:E9:2D:F0:46:35:C4:33:E1:52:D0:DA:A3:6A:F3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl X509v3 Authority Key Identifier: keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9bd:f01::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c5:69:49:98:eb:4f:cf:53:89:9c:b2:93:be:cc:4a:8e:db: 97:76:76:e1:bb:01:8f:87:5f:18:0f:f6:e7:c8:12:33:a6:ba: 33:38:b2:9f:11:54:9d:76:bd:7e:13:6d:03:08:c3:96:10:8e: 61:84:71:37:2c:2c:df:29:3c:81:5a:fa:c8:9e:4c:7d:f1:40: 94:c9:83:ef:06:b5:b3:1b:e4:3e:04:56:17:da:d4:88:f3:a5: 95:dc:b6:d6:9c:7f:dc:c8:19:83:66:47:c1:73:e3:31:8c:83: 36:39:a9:6c:ed:44:de:17:b1:3f:1c:3b:0f:8d:70:f4:67:6c: 45:f8:d1:65:d3:23:f6:b0:e3:52:8e:af:93:4b:e7:b8:97:28: 7a:90:1f:ec:9a:ba:e0:2c:af:cd:1d:21:5b:bd:67:4b:34:cb: 3c:70:71:91:3c:6f:9d:5b:af:a1:72:61:16:d1:8b:ee:5c:4c: dc:3e:58:92:26:dc:80:9b:f1:9a:7e:1b:9e:42:dc:d9:57:a6: e6:20:d5:a5:6a:4a:fa:18:da:11:51:6d:97:ab:c9:43:25:af: ea:28:a5:33:98:12:39:42:69:d8:36:60:78:1e:6a:5f:60:d2: d1:8a:18:ac:18:57:7f:d6:1c:32:62:01:07:03:bf:96:f2:54: 99:8c:f7:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEynXGlmRgrAVo3L8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0 M2FlMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk Y2U0NGM2M2UtZTljMi00NDg0LWIyZjUtNzlmOWU1NDNlMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2lEkn8g7eycY+nDl+0pdJ3E6ReHXo04zgWc 0/8f5kUF3+7UdCmhZ89hgPmIdhUcjbvxzhnDtgMdbPf4oR0+hftRCP+HF46xxMab vV/tmvOocd+ynyB9mf1Nsb7B44zqI46OkN9/Ctzp+/UuC5IL64ecohP9y9V6Frc7 gA+SEvNY7cU20F6XlgHo/0VliQw/QLJJmdrpCde9BsuCXN6/2u7W5EmlydcKkMRZ fNOUUHJEIcZiuaZ6JW/AJs7RHql3oJMPZNDVUSH8AMPpViuij+NOfozLc5zAkUeu p1gND89OrQi8tjDCgYUuZBumg/jp7ldFLCcVS7I/peB8rDPhjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtOoNUW6S3wRjXEM+FS0NqjavOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2 ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvNjhlOGU4NDAtYTY1Ni0z YWQ2LWFlYTgtNzE4MzVkNjY5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3 YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8B MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALXFaUmY60/PU4mcspO+zEqO25d2duG7AY+HXxgP9ufIEjOmujM4 sp8RVJ12vX4TbQMIw5YQjmGEcTcsLN8pPIFa+sieTH3xQJTJg+8GtbMb5D4EVhfa 1IjzpZXcttacf9zIGYNmR8Fz4zGMgzY5qWztRN4XsT8cOw+NcPRnbEX40WXTI/aw 41KOr5NL57iXKHqQH+yauuAsr80dIVu9Z0s0yzxwcZE8b51br6FyYRbRi+5cTNw+ WJIm3ICb8Zp+G55C3NlXpuYg1aVqSvoY2hFRbZeryUMlr+oopTOYEjlCadg2YHge al9g0tGKGKwYV3/WHDJiAQcDv5byVJmM940= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:49 2026 by rpki-client