$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/aff0d29e-a598-3bb9-a436-c36b94adebc3.roa File: aff0d29e-a598-3bb9-a436-c36b94adebc3.roa (raw, json) Hash identifier: 9Mce34jc3EFwb5xxsuJkkAX/HuL3MxOpKH/dEgpaFv8= Subject key identifier: 91:D3:81:93:C5:68:3E:F9:FE:F0:2F:C4:D8:92:DE:62:E1:BB:97:AA Certificate issuer: /CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Certificate serial: 010D0C9F4328584C9EFC85D689D19A2D72A5D040 Authority key identifier: 67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/aff0d29e-a598-3bb9-a436-c36b94adebc3.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 62787 IP address blocks: 2602:f6d0:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:85:d6:89:d1:9a:2d:72:a5:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53d9715a-5edc-4d9f-a9a2-830a16826131 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=f5d7fad1-74b8-4451-bfcf-468f42bf3dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:80:b6:64:14:e2:da:c1:68:a0:4a:b9:80: da:ed:60:fb:ad:2d:e5:dc:34:db:40:d8:5b:54:3f: bf:97:36:f7:f1:22:53:36:8f:e7:03:94:df:15:c6: eb:88:49:bf:b4:f7:eb:4d:f4:eb:00:ea:1c:da:ac: 8d:11:9a:a4:12:9a:d4:a9:5f:3d:0e:e5:89:aa:e6: 29:b6:f1:0a:aa:0c:d1:f2:6d:c6:f4:28:00:e8:b5: b0:55:76:df:1b:c3:1b:b1:b8:2b:f3:1e:b0:b9:49: ef:94:43:09:85:ff:ab:7f:ce:b8:6c:b9:b0:1d:47: 2c:c9:bd:47:a9:2f:94:c0:5c:b7:0a:aa:98:9f:31: 8b:6e:16:e1:33:1f:80:40:4d:87:c9:1c:af:13:4f: 68:9f:cc:cd:e1:51:f0:44:51:45:72:9b:a5:0e:7d: 42:b2:f8:bf:71:b2:64:72:dd:95:c4:5f:bf:41:4b: 5a:9f:25:53:01:d8:b9:3c:6d:05:e9:43:58:e0:6d: 28:41:0a:f4:2a:5a:2c:52:5d:f1:dc:2f:5c:0e:ec: d3:ca:ef:99:d0:3e:5a:bb:6d:15:64:73:d7:97:3e: 0e:e8:71:47:f9:69:a3:0e:96:4e:a0:c0:c1:46:24: d1:b9:a1:07:0b:c8:23:be:f4:b6:22:02:ef:49:db: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:81:93:C5:68:3E:F9:FE:F0:2F:C4:D8:92:DE:62:E1:BB:97:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/aff0d29e-a598-3bb9-a436-c36b94adebc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131/53d9715a-5edc-4d9f-a9a2-830a16826131.crl X509v3 Authority Key Identifier: keyid:67:0B:9C:8A:90:ED:93:D3:20:33:EC:23:37:97:90:FA:28:45:B7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53d9715a-5edc-4d9f-a9a2-830a16826131.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6d0:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e1:bd:09:5f:0f:50:38:e7:28:d2:1d:ae:0e:11:dc:8f:a9: fc:c7:15:70:a4:15:a9:a1:3d:30:f8:57:23:b2:3e:85:8f:61: 83:da:12:a0:2c:26:8b:18:42:c9:68:17:08:39:64:d7:e3:85: 3c:41:6f:09:c3:c7:9e:f6:46:85:5e:e1:86:78:a0:fd:54:4b: 17:81:6f:bb:7b:76:20:4f:ba:89:c4:ea:9f:0f:c1:98:90:0f: 50:1d:52:77:ef:cb:66:3f:b5:06:91:29:81:95:27:a0:37:88: 80:35:3a:ad:cc:00:87:c5:d4:46:45:76:ce:2f:4d:1f:f2:d3: 3a:1c:23:55:aa:71:ca:79:3e:52:1a:0d:a5:b7:9a:27:7b:28: c8:42:a1:26:a3:42:0f:a3:ea:0f:35:58:66:d2:bb:bf:71:65: bf:3c:85:5f:77:7c:d4:6e:64:b5:83:a6:f9:d0:a2:37:5d:82: 91:ff:4b:01:53:0d:50:70:3e:e5:be:6c:4b:a8:4c:ea:94:2f: 16:e4:6a:fa:a3:9d:45:14:51:7d:bc:7a:54:f3:24:4e:65:06: fd:cb:5f:93:37:70:45:70:ca:69:ed:ea:ab:48:6b:fe:f1:9d: 4e:26:2c:8b:6f:f1:e8:55:f6:3d:c3:df:79:b0:2c:96:e8:07: ac:86:8c:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEye/IXWidGaLXKl0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNkOTcxNWEtNWVkYy00ZDlmLWE5YTItODMwYTE2ODI2 MTMxMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk ZjVkN2ZhZDEtNzRiOC00NDUxLWJmY2YtNDY4ZjQyYmYzZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+AtmQU4trBaKBKuYDa7WD7rS3l3DTbQNhb VD+/lzb38SJTNo/nA5TfFcbriEm/tPfrTfTrAOoc2qyNEZqkEprUqV89DuWJquYp tvEKqgzR8m3G9CgA6LWwVXbfG8Mbsbgr8x6wuUnvlEMJhf+rf864bLmwHUcsyb1H qS+UwFy3CqqYnzGLbhbhMx+AQE2HyRyvE09on8zN4VHwRFFFcpulDn1Csvi/cbJk ct2VxF+/QUtanyVTAdi5PG0F6UNY4G0oQQr0KlosUl3x3C9cDuzTyu+Z0D5au20V ZHPXlz4O6HFH+WmjDpZOoMDBRiTRuaEHC8gjvvS2IgLvSdv89QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJHTgZPFaD75/vAvxNiS3mLhu5eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5 NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBhMTY4MjYxMzEvYWZmMGQyOWUtYTU5OC0z YmI5LWE0MzYtYzM2Yjk0YWRlYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTNkOTcxNWEtNWVkYy00ZDlmLWE5 YTItODMwYTE2ODI2MTMxLzUzZDk3MTVhLTVlZGMtNGQ5Zi1hOWEyLTgzMGExNjgy NjEzMS5jcmwwHwYDVR0jBBgwFoAUZwucipDtk9MgM+wjN5eQ+ihFt5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81M2Q5NzE1YS01ZWRjLTRkOWYtYTlhMi04MzBh MTY4MjYxMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL20ADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzhvQlfD1A45yjSHa4OEdyPqfzHFXCkFamhPTD4VyOyPoWPYYPa EqAsJosYQsloFwg5ZNfjhTxBbwnDx572RoVe4YZ4oP1USxeBb7t7diBPuonE6p8P wZiQD1AdUnfvy2Y/tQaRKYGVJ6A3iIA1Oq3MAIfF1EZFds4vTR/y0zocI1Wqccp5 PlIaDaW3mid7KMhCoSajQg+j6g81WGbSu79xZb88hV93fNRuZLWDpvnQojddgpH/ SwFTDVBwPuW+bEuoTOqULxbkavqjnUUUUX28elTzJE5lBv3LX5M3cEVwymnt6qtI a/7xnU4mLItv8ehV9j3D33mwLJboB6yGjCk= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:48 2026 by rpki-client