$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa File: 2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa (raw, json) Hash identifier: R5rHgKMaOcfSQdadoCeSIV2ocev2d5AN/w0OzgwxtT8= Subject key identifier: 40:93:21:84:1B:B7:DE:91:EF:38:C2:F9:6E:CA:CF:00:90:48:DA:DA Certificate issuer: /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Certificate serial: 010D0C9F4328584CC63C0B871037D663275D2680 Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa Signing time: Mon 29 Dec 2025 02:00:30 +0000 ROA not before: Mon 29 Dec 2025 02:00:30 +0000 ROA not after: Sun 29 Mar 2026 01:00:30 +0000 asID: 20473 IP address blocks: 2602:f70f:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:3c:0b:87:10:37:d6:63:27:5d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6 Validity Not Before: Dec 29 02:00:30 2025 GMT Not After : Mar 29 01:00:30 2026 GMT Subject: CN=ac664e63-6747-4fc0-9266-9f6b072f2343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:36:e5:67:00:84:9d:95:a0:f4:f2:fb:36: cf:7a:00:80:63:cd:11:04:5a:86:46:4e:38:41:5b: e6:01:4c:e8:4b:07:a2:cf:1c:78:e7:ee:78:76:66: 28:cc:36:5c:fd:ba:ec:6d:fd:98:b9:a3:5b:9a:5c: 1f:69:18:c5:cf:8a:61:d1:6b:3f:1a:8d:da:e6:bb: d5:b3:6a:60:ce:44:6c:73:19:a7:74:07:76:b5:61: 8b:cc:0e:30:58:c0:9b:2d:ad:b6:6e:54:d1:f2:41: 67:b0:0b:51:22:c7:7c:9e:27:52:6f:3f:14:f8:5d: 11:d5:65:7e:48:84:ca:19:a0:93:db:a9:d3:c4:44: 12:2d:d7:42:f4:d2:d2:34:fb:a5:2a:6c:80:9b:1e: 84:02:a3:8f:7f:9b:00:ea:20:d3:1c:3d:11:88:ea: 1f:a1:83:8c:1b:60:49:63:82:93:90:08:5c:b0:df: f7:f4:f4:69:f2:19:79:20:5f:ff:5c:2e:fc:e4:3d: c7:d7:38:e1:9a:fe:3e:55:53:e7:d3:27:97:5a:9e: 24:26:a9:18:16:73:7e:d0:2e:4f:f9:c7:db:9e:bb: 78:11:25:df:23:34:52:18:78:d2:08:5d:cc:cd:22: 7a:3a:bd:66:a3:54:34:2b:8a:61:d3:91:c8:a2:9e: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:21:84:1B:B7:DE:91:EF:38:C2:F9:6E:CA:CF:00:90:48:DA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/2ad4a6f5-638c-3c13-b03d-4ce273db8b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl X509v3 Authority Key Identifier: keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer sbgp-ipAddrBlock: critical IPv6: 2602:f70f:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9a:46:5a:46:90:1f:6f:e5:db:ad:5a:68:43:45:95:3d:87: 8e:e5:7d:a8:e5:64:49:8e:2c:84:11:53:99:be:a4:76:fb:25: d5:48:76:d9:92:b9:44:e7:6c:d7:c5:90:a7:32:22:ac:83:6c: 2a:d4:26:5e:75:98:1e:fe:10:bf:bd:13:86:81:0f:63:5a:c2: 1d:34:9a:cf:5b:75:be:78:fd:b3:c1:97:70:6b:db:95:51:b0: e3:d2:43:4f:07:86:e0:3e:db:99:e5:8b:dc:8a:f7:9c:70:78: 1c:d2:f5:cb:c1:80:42:fc:af:a5:f7:6f:b0:2c:ea:09:1b:26: db:45:c5:db:ff:eb:c3:7c:d5:ef:2f:91:11:6e:db:23:41:95: 76:48:5b:01:73:11:15:c3:dd:9a:53:2c:30:f7:1e:7e:af:da: d1:d7:b4:26:a1:1a:4f:49:51:17:51:70:5f:87:90:59:9b:88: 1b:80:78:88:00:3e:a4:16:f5:db:d4:2e:d9:4b:64:61:18:48: ee:58:e5:03:f1:ce:01:66:b8:e6:26:c0:59:4b:04:22:02:c1: 68:14:96:a2:05:24:e1:22:1f:2f:e2:1f:94:9f:3c:bf:b9:e9: 06:86:0c:e9:d3:ac:bb:ea:ea:bb:e4:01:14:dd:f9:22:be:eb: 31:aa:04:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGPAuHEDfWYyddJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy YWE2MB4XDTI1MTIyOTAyMDAzMFoXDTI2MDMyOTAxMDAzMFowLzEtMCsGA1UEAxMk YWM2NjRlNjMtNjc0Ny00ZmMwLTkyNjYtOWY2YjA3MmYyMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLk25WcAhJ2VoPTy+zbPegCAY80RBFqGRk44 QVvmAUzoSweizxx45+54dmYozDZc/brsbf2YuaNbmlwfaRjFz4ph0Ws/Go3a5rvV s2pgzkRscxmndAd2tWGLzA4wWMCbLa22blTR8kFnsAtRIsd8nidSbz8U+F0R1WV+ SITKGaCT26nTxEQSLddC9NLSNPulKmyAmx6EAqOPf5sA6iDTHD0RiOofoYOMG2BJ Y4KTkAhcsN/39PRp8hl5IF//XC785D3H1zjhmv4+VVPn0yeXWp4kJqkYFnN+0C5P +cfbnrt4ESXfIzRSGHjSCF3MzSJ6Or1mo1Q0K4ph05HIop4kWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECTIYQbt96R7zjC+W7KzwCQSNraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvMmFkNGE2ZjUtNjM4Yy0z YzEzLWIwM2QtNGNlMjczZGI4YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5 YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0 MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj ZDY1NDJhYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3DwEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCaRlpGkB9v5dutWmhDRZU9h47lfajlZEmOLIQRU5m+pHb7JdVI dtmSuUTnbNfFkKcyIqyDbCrUJl51mB7+EL+9E4aBD2Nawh00ms9bdb54/bPBl3Br 25VRsOPSQ08HhuA+25nli9yK95xweBzS9cvBgEL8r6X3b7As6gkbJttFxdv/68N8 1e8vkRFu2yNBlXZIWwFzERXD3ZpTLDD3Hn6v2tHXtCahGk9JURdRcF+HkFmbiBuA eIgAPqQW9dvULtlLZGEYSO5Y5QPxzgFmuOYmwFlLBCICwWgUlqIFJOEiHy/iH5Sf PL+56QaGDOnTrLvq6rvkARTd+SK+6zGqBO0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:35:47 2026 by rpki-client