$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa File: b7a020da-0d7e-3b24-9670-acd6fe134da5.roa (raw, json) Hash identifier: ntavy5trLGosPS44+WjzH49wGSUVTcrGUW6oBbMv/mo= Subject key identifier: B2:BC:7D:26:97:A3:26:98:73:65:D7:C5:34:4F:EE:84:05:52:0A:41 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584CBDB1F1C732289F03FE3F0300 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 22251 IP address blocks: 2604:5ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:f1:c7:32:28:9f:03:fe:3f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=04e8ff13-89b8-4613-8c51-0acbff5b1b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:23:ed:99:08:bb:f5:f7:5d:27:e5:79:ba: b3:2f:73:66:01:91:ec:c4:18:ec:c6:47:13:b4:27: e0:6b:ab:63:9e:a2:9a:93:e7:58:1a:a9:37:dd:87: a3:f7:2c:37:fe:0a:4e:cf:f0:ce:01:e9:f4:9f:ed: d0:7b:5d:42:b6:ff:83:62:46:21:98:40:3e:99:d6: 21:6e:34:a5:59:76:87:63:d4:c8:b2:90:89:96:16: 45:7a:78:b6:0d:af:a3:0a:1c:11:ad:72:12:b8:6c: 26:3e:f6:41:85:b5:0a:b0:b4:68:35:55:40:39:3a: 76:d7:b4:b4:05:13:62:6f:0e:57:c4:61:fb:8c:9e: 3d:8a:74:51:42:fb:f4:c8:ae:43:c9:9b:df:93:67: bf:2f:a5:08:6a:80:77:92:fc:32:09:b5:cb:de:f1: 1a:d7:33:07:f2:42:cd:3d:21:65:1f:f2:61:1e:63: 1d:f9:37:93:c9:c6:9b:b8:ba:32:1e:13:55:32:05: 38:cd:73:57:10:7e:fd:ea:aa:ef:a0:2e:58:e0:d8: f2:57:61:b7:43:28:a5:f8:3c:69:d8:c4:c4:3d:a7: 0a:45:02:69:c0:b9:88:bc:52:b9:84:a2:a5:82:e1: 86:49:32:89:0e:79:bf:a3:3c:5f:20:eb:89:15:63: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:BC:7D:26:97:A3:26:98:73:65:D7:C5:34:4F:EE:84:05:52:0A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/b7a020da-0d7e-3b24-9670-acd6fe134da5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv6: 2604:5ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f2:c3:7d:af:d5:4a:d4:50:52:fa:3b:a7:b3:e0:7c:4e:2b: bb:05:cc:e6:82:92:dd:e8:27:e1:53:0f:b1:58:c1:9f:da:36: 5d:35:f0:cb:91:37:e2:9f:22:6c:a1:90:02:3e:a9:19:b5:27: 45:7d:24:59:dc:07:67:31:38:35:7d:75:24:1a:93:42:77:c2: 2b:0c:ba:fb:6b:97:5e:da:d4:bb:30:9b:d1:ed:b3:50:00:07: 9f:ad:8b:8d:98:04:2e:71:9b:c6:78:ca:9c:28:e6:6f:91:cd: ec:a1:b5:d7:8f:3a:43:51:c1:db:d3:90:2c:05:0e:79:c7:b3: 5c:45:08:36:12:0a:ef:d4:3a:37:e6:19:84:89:7a:f6:4b:3c: 1e:ff:f4:33:9f:fd:43:1c:8b:83:46:ad:3d:4c:a4:be:95:f3: ed:66:1c:e4:5f:84:89:ec:5d:91:f5:7f:df:84:ab:f0:c9:57: 8c:21:db:c1:ef:6e:36:78:8c:cf:05:6a:77:07:7e:3c:bc:8d: 4f:e2:cf:12:04:7d:ec:91:86:23:36:38:95:45:f2:0d:56:15: 0f:ac:cb:fb:77:7f:9b:47:bb:61:f6:7d:b2:3c:5a:72:1e:aa: 2a:22:ca:e3:e6:a6:c2:d6:f2:fc:f4:45:41:8e:e5:59:e2:5a: f2:0e:e0:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEy9sfHHMiifA/4/AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MDRlOGZmMTMtODliOC00NjEzLThjNTEtMGFjYmZmNWIxYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMYj7ZkIu/X3XSflebqzL3NmAZHsxBjsxkcT tCfga6tjnqKak+dYGqk33Yej9yw3/gpOz/DOAen0n+3Qe11Ctv+DYkYhmEA+mdYh bjSlWXaHY9TIspCJlhZFeni2Da+jChwRrXISuGwmPvZBhbUKsLRoNVVAOTp217S0 BRNibw5XxGH7jJ49inRRQvv0yK5DyZvfk2e/L6UIaoB3kvwyCbXL3vEa1zMH8kLN PSFlH/JhHmMd+TeTycabuLoyHhNVMgU4zXNXEH796qrvoC5Y4NjyV2G3Qyil+Dxp 2MTEPacKRQJpwLmIvFK5hKKlguGGSTKJDnm/ozxfIOuJFWN2fwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLK8fSaXoyaYc2XXxTRP7oQFUgpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvYjdhMDIwZGEtMGQ3ZS0z YjI0LTk2NzAtYWNkNmZlMTM0ZGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBf8sN9r9VK1FBS+juns+B8Tiu7BczmgpLd6CfhUw+xWMGf2jZdNfDL kTfinyJsoZACPqkZtSdFfSRZ3AdnMTg1fXUkGpNCd8IrDLr7a5de2tS7MJvR7bNQ AAefrYuNmAQucZvGeMqcKOZvkc3sobXXjzpDUcHb05AsBQ55x7NcRQg2Egrv1Do3 5hmEiXr2Szwe//Qzn/1DHIuDRq09TKS+lfPtZhzkX4SJ7F2R9X/fhKvwyVeMIdvB 7242eIzPBWp3B348vI1P4s8SBH3skYYjNjiVRfINVhUPrMv7d3+bR7th9n2yPFpy HqoqIsrj5qbC1vL89EVBjuVZ4lryDuCa -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:47 2026 by rpki-client