$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa File: dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json) Hash identifier: GgTqRsbh7cvONCKAIx0nv1gac9tyc7SFul6c57vE/dA= Subject key identifier: B0:7F:A6:33:53:72:1F:E0:E9:48:A8:9A:6F:42:8E:43:5C:F5:16:5F Certificate issuer: /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Certificate serial: 010D0C9F4328584CF2BCE831F5B4AE87F1AB5500 Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 400644 IP address blocks: 2620:aa:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:e8:31:f5:b4:ae:87:f1:ab:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=7d9b5a87-6015-48c0-8cba-f8cd20eb5f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:27:47:95:70:dc:2c:93:06:25:fb:be:91:84: 4f:db:4d:01:71:cb:a2:04:f8:5e:77:c0:a1:18:f6: 1e:98:72:83:ad:c9:28:7e:73:b8:15:cf:2c:b5:01: 23:50:f6:cc:e2:de:4d:be:ea:3b:05:08:10:06:16: a0:3c:36:3b:34:7e:70:01:e5:f0:53:4b:a4:3a:8b: 03:7d:87:f8:16:f4:5a:23:47:86:0b:b8:0f:09:18: 0b:4d:62:91:c8:24:13:89:e3:2f:a0:ca:ee:a0:b4: f1:6f:60:10:ad:3a:65:45:e2:09:67:38:6c:07:38: 42:ae:00:e1:28:e1:0d:3c:93:5e:6b:92:8f:dd:1e: a5:d5:a9:2a:88:8f:b6:9c:84:c7:b2:c3:bf:c1:38: 99:e3:06:61:80:21:a0:58:fc:b3:5d:e7:9c:c2:c4: 16:c1:35:da:01:6e:fe:d2:0a:39:e6:06:5c:ba:94: c8:0e:46:4b:54:f5:ee:02:69:41:f2:e0:08:a7:ee: 06:6d:b4:33:10:5d:47:62:3d:31:f7:1c:e7:13:61: bc:07:73:99:91:e7:59:86:e8:c0:fc:26:7c:7c:8f: 7b:0e:f3:8f:24:8c:e0:d5:85:86:35:23:9d:b7:70: 22:f0:e4:8e:6f:94:0e:03:1c:60:fd:3f:89:89:59: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:A6:33:53:72:1F:E0:E9:48:A8:9A:6F:42:8E:43:5C:F5:16:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl X509v3 Authority Key Identifier: keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer sbgp-ipAddrBlock: critical IPv6: 2620:aa:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:04:ad:f2:54:88:f0:7a:6a:39:88:a2:9e:71:ab:8d:af:5a: 44:a4:fa:4d:77:98:2c:19:f8:bd:91:2d:d8:31:2f:d8:1f:de: fb:be:e0:62:19:5f:46:76:de:eb:7e:ba:83:d0:e8:0d:c2:1c: 9e:e5:de:a0:8b:e1:39:55:c5:ab:7c:3c:b9:fe:ca:b3:2b:18: 57:2d:69:30:04:62:4f:2e:a8:d8:2e:e0:4a:76:ad:48:cc:d9: d6:84:a9:87:71:bb:d9:b2:8d:6f:f6:9a:fe:d0:38:9b:02:e0: 01:a4:77:cb:e3:3a:3b:f0:49:38:49:d6:df:ec:eb:7e:e6:11: a0:11:2b:9c:d1:53:09:ce:99:66:72:ef:7a:4b:9e:6f:19:92: a9:01:5c:16:43:63:2f:c2:47:24:91:8d:c6:ef:39:cf:87:92: 50:7c:af:01:89:aa:3f:35:b4:cd:1b:01:39:a6:66:d3:25:52: dc:50:d3:1f:80:9f:d7:d2:2d:70:e0:41:3f:5c:55:c5:99:f9: 63:57:6b:63:7f:59:2e:99:aa:ff:a4:4c:07:6e:8b:3f:09:0c: a5:b2:b0:a2:1e:47:53:54:c5:32:4b:ec:e2:f6:49:2d:dc:57: da:17:89:8c:28:a7:5e:57:a5:79:f5:c8:2a:f4:a9:f7:d7:7a: 98:f0:d5:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzyvOgx9bSuh/GrVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm NWNhMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk N2Q5YjVhODctNjAxNS00OGMwLThjYmEtZjhjZDIwZWI1Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqidHlXDcLJMGJfu+kYRP200BccuiBPhed8Ch GPYemHKDrckofnO4Fc8stQEjUPbM4t5Nvuo7BQgQBhagPDY7NH5wAeXwU0ukOosD fYf4FvRaI0eGC7gPCRgLTWKRyCQTieMvoMruoLTxb2AQrTplReIJZzhsBzhCrgDh KOENPJNea5KP3R6l1akqiI+2nITHssO/wTiZ4wZhgCGgWPyzXeecwsQWwTXaAW7+ 0go55gZcupTIDkZLVPXuAmlB8uAIp+4GbbQzEF1HYj0x9xznE2G8B3OZkedZhujA /CZ8fI97DvOPJIzg1YWGNSOdt3Ai8OSOb5QOAxxg/T+JiVkFVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLB/pjNTch/g6Uiomm9CjkNc9RZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0 YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0 ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcErfJUiPB6ajmIop5xq42vWkSk+k13mCwZ+L2RLdgxL9gf3vu+ 4GIZX0Z23ut+uoPQ6A3CHJ7l3qCL4TlVxat8PLn+yrMrGFctaTAEYk8uqNgu4Ep2 rUjM2daEqYdxu9myjW/2mv7QOJsC4AGkd8vjOjvwSThJ1t/s637mEaARK5zRUwnO mWZy73pLnm8ZkqkBXBZDYy/CRySRjcbvOc+HklB8rwGJqj81tM0bATmmZtMlUtxQ 0x+An9fSLXDgQT9cVcWZ+WNXa2N/WS6Zqv+kTAduiz8JDKWysKIeR1NUxTJL7OL2 SS3cV9oXiYwop15XpXn1yCr0qffXepjw1TY= -----END CERTIFICATE-----Generated at Sun Mar 1 16:28:31 2026 by rpki-client