$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa File: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (raw, json) Hash identifier: Apj5l2ZyTjryNBF/7ewTUOF8CyA0NQA0+qlw9ikJWaM= Subject key identifier: E6:49:66:DE:03:CA:F9:69:A3:AD:F4:EE:92:F9:C8:33:15:E3:88:42 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584CB121C85FD48FD18ADDEBB500 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 398951 IP address blocks: 2602:f978::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c8:5f:d4:8f:d1:8a:dd:eb:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=ae54aed7-a55c-4973-a4ff-1ad5bbd5cf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:f2:a8:7f:ca:04:85:42:c8:68:17:bd:e2: 67:c4:5b:09:f5:c4:26:6a:40:31:60:e6:b6:35:8e: 7c:23:3b:d2:18:af:ce:33:95:f6:72:bb:4b:43:64: 3a:08:14:42:ef:4a:75:bb:83:5b:2e:6f:10:03:9f: 20:9c:25:81:e0:ab:09:40:5a:2e:13:a3:8a:fa:6e: 8d:48:2d:51:94:a2:d6:1d:8a:4c:25:59:a7:67:6e: 83:c8:32:49:57:e6:4b:9d:40:f4:33:30:77:7a:a6: c3:a6:0e:63:2a:c8:95:e5:6a:b9:75:b5:e6:9a:3b: b2:d7:01:fe:ff:1e:2b:e8:bd:41:b8:62:31:4e:96: 10:52:73:90:17:f4:ed:9d:e2:4f:59:35:28:f8:8e: a3:f4:c6:25:3a:be:e8:30:66:8d:73:3a:28:ad:b2: 02:8d:a4:a8:cd:d0:64:6e:a5:ad:ed:ff:3a:35:b7: e8:65:bd:15:cd:b3:d5:98:28:77:bf:d3:e2:c4:39: a8:12:7d:74:23:48:75:5a:93:dc:2a:91:4c:e1:de: 29:6c:b8:c6:f3:de:42:ae:55:c0:1e:3b:4b:2a:96: 80:f6:b7:d5:34:e8:b0:d5:11:f7:fd:8d:2f:1f:38: d6:28:fe:3b:03:c6:c9:c7:3f:03:5c:96:ec:b9:02: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:49:66:DE:03:CA:F9:69:A3:AD:F4:EE:92:F9:C8:33:15:E3:88:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f978::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9a:ec:81:ee:4b:1d:eb:aa:57:83:34:a4:62:f5:a2:9b:42: 06:f1:ce:48:1f:63:b1:37:d8:19:08:2f:2f:81:8f:9a:44:b4: 22:cd:40:91:b3:1d:e6:da:e3:11:9e:e2:f8:ed:e6:0a:ae:98: 37:aa:78:67:03:6a:17:9f:82:62:86:49:17:5a:51:ec:a9:0e: 87:6c:9d:1c:00:87:38:06:b3:ed:7c:e9:e0:e2:1d:50:79:d9: 1e:d3:1f:55:d6:08:2b:da:1a:fe:31:44:66:ce:07:ca:2e:15: aa:b3:6c:51:63:1d:71:5e:bd:52:df:a2:3d:b9:c4:b6:27:90: b9:9b:be:56:66:7b:d0:ac:2a:e0:15:8c:50:f1:ec:4a:55:66: dd:32:e5:37:8a:90:05:e7:ec:4f:7b:40:68:1f:50:35:40:58: 7c:aa:51:3d:39:36:38:14:9b:f0:56:0c:c4:d1:73:b2:85:0f: 0e:7d:fb:c0:75:96:6b:bf:c5:cb:6d:47:bf:92:c6:08:7c:43: ab:4e:a9:95:ba:31:88:23:e8:c8:76:66:db:61:fe:35:42:5b: ca:f2:d3:4c:11:61:d5:b4:9d:c1:ce:0c:49:d8:4f:ca:6a:b4: 72:4d:6e:e5:fb:71:02:ec:70:f1:2f:83:04:c3:1d:0c:25:4c: c9:87:dc:9a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyxIchf1I/Rit3rtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YWU1NGFlZDctYTU1Yy00OTczLWE0ZmYtMWFkNWJiZDVjZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfyqH/KBIVCyGgXveJnxFsJ9cQmakAxYOa2 NY58IzvSGK/OM5X2crtLQ2Q6CBRC70p1u4NbLm8QA58gnCWB4KsJQFouE6OK+m6N SC1RlKLWHYpMJVmnZ26DyDJJV+ZLnUD0MzB3eqbDpg5jKsiV5Wq5dbXmmjuy1wH+ /x4r6L1BuGIxTpYQUnOQF/TtneJPWTUo+I6j9MYlOr7oMGaNczoorbICjaSozdBk bqWt7f86NbfoZb0VzbPVmCh3v9PixDmoEn10I0h1WpPcKpFM4d4pbLjG895CrlXA HjtLKpaA9rfVNOiw1RH3/Y0vHzjWKP47A8bJxz8DXJbsuQIGTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOZJZt4Dyvlpo6307pL5yDMV44hCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvY2NmNzBmY2MtNDBjZC0z NTRiLTk1ZDAtNWZmODBmOWU1ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5eAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADprsge5LHeuqV4M0pGL1optCBvHOSB9jsTfYGQgvL4GPmkS0Is1A kbMd5trjEZ7i+O3mCq6YN6p4ZwNqF5+CYoZJF1pR7KkOh2ydHACHOAaz7Xzp4OId UHnZHtMfVdYIK9oa/jFEZs4Hyi4VqrNsUWMdcV69Ut+iPbnEtieQuZu+VmZ70Kwq 4BWMUPHsSlVm3TLlN4qQBefsT3tAaB9QNUBYfKpRPTk2OBSb8FYMxNFzsoUPDn37 wHWWa7/Fy21Hv5LGCHxDq06plboxiCPoyHZm22H+NUJbyvLTTBFh1bSdwc4MSdhP ymq0ck1u5ftxAuxw8S+DBMMdDCVMyYfcmg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:30:04 2026 by rpki-client