$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa File: 63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa (raw, json) Hash identifier: krGT6Jbf0NQVqwWg2XdbhB6Jd70rHvZ0ZTb3Jge0uPM= Subject key identifier: 09:34:F9:80:29:42:97:7A:FF:5F:95:94:72:4E:D0:09:3A:CB:5F:5E Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584CAE570AB275564D19533B7800 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 397423 IP address blocks: 2604:f440::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:0a:b2:75:56:4d:19:53:3b:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4ae0216e-02d1-4bcb-b49a-2cd4c44309a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:18:22:7c:ed:6f:0f:f0:c2:06:35:c1:a5: 00:a7:87:92:24:1d:01:46:76:b0:89:6d:b1:17:0d: 2b:70:e0:0d:7b:30:ac:90:b4:4c:92:8b:85:34:52: a3:8b:b6:ba:53:e0:2c:5a:a8:31:a5:41:ef:a3:bc: ce:9a:b1:f1:3d:56:ed:21:ab:b8:7c:b7:c0:e3:d9: e6:2c:e1:65:4a:55:3e:3c:26:3b:3f:23:96:8b:e4: fb:77:c1:05:be:fc:ed:82:94:b6:2b:ec:f6:0e:a6: cf:c5:71:19:41:35:75:d9:bf:58:7e:f3:87:af:cd: 51:4f:ee:bb:52:63:72:f6:30:06:e9:50:1b:c9:05: a8:96:5b:26:7e:ff:27:26:29:be:c9:fd:96:0e:d0: e1:bb:d2:e3:60:e8:68:6f:74:b5:ad:b6:22:c4:76: 04:78:9e:eb:1e:a7:a6:d1:09:4d:6d:41:62:4e:85: 03:bb:75:56:46:86:ae:91:0b:43:4b:cc:4c:4d:9b: 8a:d8:65:62:28:96:94:78:34:3f:00:19:7d:4b:f0: 37:ee:ba:2d:ba:35:d5:2c:fc:c3:c6:80:2a:b8:41: 55:b8:e8:e1:7f:b2:3b:16:2f:5d:d4:19:d8:dd:35: d4:4f:1f:bc:b5:e2:08:ed:ca:80:26:56:90:8d:e4: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:F9:80:29:42:97:7A:FF:5F:95:94:72:4E:D0:09:3A:CB:5F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/63188fc9-5d84-3c23-b2f2-d47c6ad0f6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:11:c9:c1:16:90:e3:75:bd:21:da:ca:3d:5a:2b:76:d8:10: 92:8f:17:97:ce:db:fd:52:dd:72:f9:b5:86:1a:0b:58:15:92: cf:58:df:2b:c3:7a:8f:ef:ef:b2:bc:b7:3d:af:6c:97:46:b4: a5:80:41:6b:d7:d9:d9:21:d4:34:88:a6:80:9d:77:48:f2:31: 20:3a:fa:0d:07:3d:58:36:7c:27:51:6f:f1:1c:31:6e:e6:ce: 4e:7c:99:e3:0b:bf:fd:da:15:a7:3b:d3:f8:d9:c7:d2:5c:ad: 29:80:3e:11:fa:9e:07:2e:97:86:0b:b4:a1:15:8b:80:6e:96: 47:91:be:46:a1:47:8b:2e:b8:bc:26:b2:de:4d:fa:3a:f7:64: 9c:aa:4f:8d:cf:17:d4:c2:39:e3:05:bb:01:e1:58:e8:5d:d6: 42:02:17:0e:db:e2:b8:df:46:97:80:75:b0:e3:d0:26:8a:22: 32:98:60:ca:30:75:99:0c:bd:a4:c4:ae:fa:5a:56:80:80:9f: ab:7f:d7:d3:7e:3b:b4:a5:9a:79:0a:08:48:0b:7c:fb:ca:97: 9c:f2:4a:b5:08:66:e3:93:b7:6f:7a:29:d3:8c:9f:19:61:d7: f3:90:67:38:dc:75:f7:6c:5a:65:ba:1e:c1:64:0b:87:ea:bc: 97:69:f3:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyuVwqydVZNGVM7eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGFlMDIxNmUtMDJkMS00YmNiLWI0OWEtMmNkNGM0NDMwOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYUYInztbw/wwgY1waUAp4eSJB0BRnawiW2x Fw0rcOANezCskLRMkouFNFKji7a6U+AsWqgxpUHvo7zOmrHxPVbtIau4fLfA49nm LOFlSlU+PCY7PyOWi+T7d8EFvvztgpS2K+z2DqbPxXEZQTV12b9YfvOHr81RT+67 UmNy9jAG6VAbyQWollsmfv8nJim+yf2WDtDhu9LjYOhob3S1rbYixHYEeJ7rHqem 0QlNbUFiToUDu3VWRoaukQtDS8xMTZuK2GViKJaUeDQ/ABl9S/A37rotujXVLPzD xoAquEFVuOjhf7I7Fi9d1BnY3TXUTx+8teII7cqAJlaQjeQKnwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAk0+YApQpd6/1+VlHJO0Ak6y19eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNjMxODhmYzktNWQ4NC0z YzIzLWIyZjItZDQ3YzZhZDBmNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBrEcnBFpDjdb0h2so9Wit22BCSjxeXztv9Ut1y+bWGGgtYFZLPWN8r w3qP7++yvLc9r2yXRrSlgEFr19nZIdQ0iKaAnXdI8jEgOvoNBz1YNnwnUW/xHDFu 5s5OfJnjC7/92hWnO9P42cfSXK0pgD4R+p4HLpeGC7ShFYuAbpZHkb5GoUeLLri8 JrLeTfo692Scqk+NzxfUwjnjBbsB4VjoXdZCAhcO2+K430aXgHWw49AmiiIymGDK MHWZDL2kxK76WlaAgJ+rf9fTfju0pZp5CghIC3z7ypec8kq1CGbjk7dveinTjJ8Z YdfzkGc43HX3bFpluh7BZAuH6ryXafPi -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:53 2026 by rpki-client