$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: 2Jk5xUiWAqMgVegFQ1veu/o5hgYyNyJ231tBv0iyQXE= Subject key identifier: C1:C2:17:58:A3:1D:3D:BF:2E:4A:19:92:0E:26:F0:47:04:30:37:BC Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584CCBA760924812AAE06D759280 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:60:92:48:12:aa:e0:6d:75:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=951466a4-3eef-4cb0-b1f6-4da21624e01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:46:af:5a:73:12:16:2a:8d:3a:94:f5:bb: a7:3e:f8:6d:f9:c3:29:a7:17:b9:b5:13:1d:ab:30: 9a:5e:e1:12:bc:59:be:03:9c:c0:5f:4b:90:c7:8b: cb:76:22:ff:70:9f:4f:59:4c:aa:7f:6b:d6:dd:d8: 62:d4:d5:ef:68:84:02:70:63:d0:0b:07:14:c9:e1: 0c:e5:d0:9d:84:5e:b9:fd:f1:28:e8:d6:1f:94:74: b1:79:40:45:51:ce:f6:73:2e:fe:ae:74:f9:5f:0e: 5c:b1:b6:8d:42:49:f8:67:47:9e:bf:23:78:03:75: eb:46:02:cd:1c:e0:d8:ce:d7:c4:be:aa:76:d8:4e: 7d:59:8d:55:cf:e9:3f:43:31:27:89:f6:34:78:35: 5a:7d:35:7b:33:ef:f1:bb:7e:f0:18:0a:16:fd:61: b5:38:fd:fd:a8:dd:33:e4:bc:6c:5c:35:67:7f:33: a6:e5:c9:8d:53:97:eb:30:ca:84:39:15:55:8c:cb: 06:33:3a:54:44:0a:fc:cc:52:80:00:7b:07:3f:be: 74:f5:3b:b8:4e:36:e4:6a:33:06:09:40:b9:c9:5b: 98:d7:1c:08:22:62:8e:c1:d1:53:57:91:06:46:01: 12:06:e0:ca:c2:5a:6e:9f:ae:6f:16:14:cf:bf:5a: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:17:58:A3:1D:3D:BF:2E:4A:19:92:0E:26:F0:47:04:30:37:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c6:9b:5f:52:e4:52:19:8f:fb:87:63:b8:fd:ad:9e:76:0a: 88:4c:2e:23:0e:ef:0d:55:c8:36:f6:8f:f5:ad:09:92:f1:f3: 8d:42:2e:25:bd:77:e7:09:60:6a:dc:88:4e:38:1c:d9:70:fc: 98:d6:50:9f:e7:ca:ff:3b:f3:29:9a:88:21:4e:f3:16:fe:f3: 0e:43:01:d5:41:de:e1:08:eb:f8:26:05:8a:33:70:3e:95:91: 16:7a:96:4e:16:a7:69:81:2e:b4:7e:5c:dc:25:19:19:44:f9: d4:c2:e4:1f:7c:ba:91:4a:e5:66:05:5c:62:4d:85:46:ae:c2: 5f:ae:06:9a:95:4f:16:ee:13:c9:37:b0:99:bb:80:eb:8f:f6: df:54:78:22:1c:61:10:0b:c2:3f:d7:44:61:a8:ce:aa:4c:b6: d8:3b:58:fc:45:66:67:47:16:5f:b3:57:4b:98:51:7b:18:69: 77:97:c5:ab:ef:4e:a3:f0:73:4e:31:91:9d:a7:fd:d5:ef:7d: 7a:3a:3d:14:3a:89:39:14:3f:ba:7d:f9:66:71:0b:e3:d7:dd: 5f:28:56:b5:e2:21:12:41:31:d1:06:3b:66:47:ad:66:47:82: c1:4e:96:75:7b:81:51:1f:52:64:e4:e6:c0:69:a7:a5:94:ae: 6f:12:3a:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzLp2CSSBKq4G11koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk OTUxNDY2YTQtM2VlZi00Y2IwLWIxZjYtNGRhMjE2MjRlMDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3dGr1pzEhYqjTqU9bunPvht+cMppxe5tRMd qzCaXuESvFm+A5zAX0uQx4vLdiL/cJ9PWUyqf2vW3dhi1NXvaIQCcGPQCwcUyeEM 5dCdhF65/fEo6NYflHSxeUBFUc72cy7+rnT5Xw5csbaNQkn4Z0eevyN4A3XrRgLN HODYztfEvqp22E59WY1Vz+k/QzEnifY0eDVafTV7M+/xu37wGAoW/WG1OP39qN0z 5LxsXDVnfzOm5cmNU5frMMqEORVVjMsGMzpURAr8zFKAAHsHP7509Tu4TjbkajMG CUC5yVuY1xwIImKOwdFTV5EGRgESBuDKwlpun65vFhTPv1pffQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMHCF1ijHT2/LkoZkg4m8EcEMDe8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhxptfUuRSGY/7h2O4/a2edgqITC4jDu8NVcg29o/1rQmS8fONQi4l vXfnCWBq3IhOOBzZcPyY1lCf58r/O/MpmoghTvMW/vMOQwHVQd7hCOv4JgWKM3A+ lZEWepZOFqdpgS60flzcJRkZRPnUwuQffLqRSuVmBVxiTYVGrsJfrgaalU8W7hPJ N7CZu4Drj/bfVHgiHGEQC8I/10RhqM6qTLbYO1j8RWZnRxZfs1dLmFF7GGl3l8Wr 706j8HNOMZGdp/3V7316Oj0UOok5FD+6fflmcQvj191fKFa14iESQTHRBjtmR61m R4LBTpZ1e4FRH1Jk5ObAaaellK5vEjoa -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:55 2026 by rpki-client