$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa File: b20be8f7-0638-3370-8715-f0aae40447c9.roa (raw, json) Hash identifier: Apd7LRX8jqsArMtVuK8x4v2zh+C9OrRrv4u+X/a/2A8= Subject key identifier: 2A:98:CE:35:40:0D:F6:1E:A1:44:94:12:22:78:FC:68:3E:A2:BB:7B Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584CE1FCCB0D43F8D564B9D28900 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa Signing time: Mon 16 Feb 2026 14:00:40 +0000 ROA not before: Mon 16 Feb 2026 14:00:40 +0000 ROA not after: Sun 17 May 2026 13:00:40 +0000 asID: 399275 IP address blocks: 2602:fcc0:4444::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e1:fc:cb:0d:43:f8:d5:64:b9:d2:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Feb 16 14:00:40 2026 GMT Not After : May 17 13:00:40 2026 GMT Subject: CN=ebf35a23-a48a-491a-a329-0cd6824f214c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:9a:00:d1:ff:bb:92:05:0a:70:d8:4b:1b: 37:53:ad:43:0a:00:8e:69:9b:d0:c7:c9:57:1e:8a: 05:c2:f4:02:f7:7f:17:b1:10:db:88:03:55:34:c1: e1:43:77:bd:48:8d:a0:aa:db:bb:50:39:3a:15:f5: 06:60:23:bc:7f:b6:5f:ef:c2:1b:d5:de:28:66:1d: fd:87:e8:33:4e:a8:88:97:10:69:96:d8:58:fa:e2: 23:e2:58:62:86:9e:fb:d6:aa:05:02:29:b4:26:52: 14:f0:05:56:2b:5a:ce:9b:7f:f3:b0:bb:e9:ad:de: 41:6f:eb:ac:a9:cb:03:39:92:49:13:30:6d:95:3f: d2:ef:3b:62:65:ec:ce:28:1f:9b:a9:a4:61:69:c1: cb:e4:eb:f2:eb:0f:fd:29:61:b6:95:88:ed:0f:fd: 6a:0d:b4:97:d8:f1:dc:f7:7d:03:4b:a4:e8:81:64: 5a:01:da:e4:6c:b8:04:4b:e1:55:b0:d2:72:5b:49: 3d:61:a2:33:a4:f2:35:b6:d5:38:66:73:02:b5:de: 1e:45:f6:fa:2b:83:b5:5b:84:d9:8c:76:2b:9a:55: 96:e3:f1:a3:52:29:5a:ae:42:52:31:1d:ba:54:58: 91:24:f0:ce:67:e7:73:dd:a5:5c:91:d0:d0:bc:1b: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:98:CE:35:40:0D:F6:1E:A1:44:94:12:22:78:FC:68:3E:A2:BB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/b20be8f7-0638-3370-8715-f0aae40447c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcc0:4444::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a9:76:4f:fc:16:13:00:34:e6:06:4c:f5:08:89:03:a7:64: 4e:aa:5c:7f:60:4d:98:dc:cc:3d:60:d6:0c:ce:e0:a6:80:b5: 56:e8:0c:99:2b:6d:39:d0:7e:66:5c:3f:88:2b:a3:c8:a2:ab: cd:15:e7:0a:67:ab:db:53:5c:ad:09:f5:bd:d6:8a:3d:ee:4d: 8d:75:d1:46:83:7a:57:66:ee:76:0a:8e:32:7a:cb:89:6d:d5: 1c:63:c2:5f:c4:8a:53:6e:2f:33:58:2b:3f:b0:62:59:94:eb: 73:12:de:a1:3c:37:c5:d6:a7:0b:a0:c4:f3:95:b3:d6:fe:51: d8:be:5a:ea:ef:61:0b:0a:91:7a:f6:41:bc:c8:25:5c:86:2a: 60:0a:ea:c8:a8:20:2f:b2:0c:c8:17:b3:96:df:55:e9:de:0f: 2a:a4:3c:da:c2:eb:4a:71:1a:00:d0:9c:6a:92:3b:98:a3:f8: df:ce:44:ed:6a:66:10:fc:54:ce:33:42:88:3b:e9:c8:71:e5: 44:9b:bf:35:1f:b4:60:15:a3:67:d0:00:cf:06:c5:e6:22:dc: d6:10:1f:8a:f9:8c:55:9b:00:c3:d4:b4:02:94:50:c1:e2:43: 27:7c:35:fa:d9:6d:37:99:ea:a4:a4:a4:3b:23:39:02:1e:4f: 7a:47:cf:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzh/MsNQ/jVZLnSiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk ZWJmMzVhMjMtYTQ4YS00OTFhLWEzMjktMGNkNjgyNGYyMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT+aANH/u5IFCnDYSxs3U61DCgCOaZvQx8lX HooFwvQC938XsRDbiANVNMHhQ3e9SI2gqtu7UDk6FfUGYCO8f7Zf78Ib1d4oZh39 h+gzTqiIlxBplthY+uIj4lhihp771qoFAim0JlIU8AVWK1rOm3/zsLvprd5Bb+us qcsDOZJJEzBtlT/S7ztiZezOKB+bqaRhacHL5Ovy6w/9KWG2lYjtD/1qDbSX2PHc 930DS6TogWRaAdrkbLgES+FVsNJyW0k9YaIzpPI1ttU4ZnMCtd4eRfb6K4O1W4TZ jHYrmlWW4/GjUilarkJSMR26VFiRJPDOZ+dz3aVckdDQvBvqIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCqYzjVADfYeoUSUEiJ4/Gg+ort7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYjIwYmU4ZjctMDYzOC0z MzcwLTg3MTUtZjBhYWU0MDQ0N2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8wERE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH6pdk/8FhMANOYGTPUIiQOnZE6qXH9gTZjczD1g1gzO4KaAtVbo DJkrbTnQfmZcP4gro8iiq80V5wpnq9tTXK0J9b3Wij3uTY110UaDeldm7nYKjjJ6 y4lt1Rxjwl/EilNuLzNYKz+wYlmU63MS3qE8N8XWpwugxPOVs9b+Udi+WurvYQsK kXr2QbzIJVyGKmAK6sioIC+yDMgXs5bfVeneDyqkPNrC60pxGgDQnGqSO5ij+N/O RO1qZhD8VM4zQog76chx5USbvzUftGAVo2fQAM8GxeYi3NYQH4r5jFWbAMPUtAKU UMHiQyd8NfrZbTeZ6qSkpDsjOQIeT3pHz7o= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:00 2026 by rpki-client