$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa File: 389f5dcb-ae9a-32de-a240-8137aa93a357.roa (raw, json) Hash identifier: Mcko8YYXL6MdnwBHe6oeLGoEKa3pK6ArdgaHplr9UC8= Subject key identifier: EE:30:75:43:2A:9E:AF:34:8A:FB:88:4D:DB:AF:0C:4B:04:75:72:72 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D037D2F96A03479E6FB55E840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 6167 IP address blocks: 2600:100f:b1e8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:2f:96:a0:34:79:e6:fb:55:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=306accfa-86d6-4b16-bd7b-b5996cba5c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:3e:94:29:d2:60:54:a3:d3:32:32:8c:f7: af:0a:d5:d2:39:9d:34:56:18:c3:09:64:52:b1:26: 01:50:e5:35:f5:51:38:bd:04:15:7c:0a:de:f3:b3: f3:bf:9e:05:7e:95:c5:b8:fb:ae:c4:04:8f:90:c4: 2b:23:d1:a0:84:c4:5b:3a:46:58:61:e5:f2:f4:96: b1:13:5d:ef:7e:36:aa:ba:f1:d6:6f:22:4e:14:67: 7a:86:d4:9f:af:c1:8b:71:1f:f7:d6:48:be:14:da: 86:72:ec:54:a9:0a:cd:d0:c3:58:d7:78:f2:5f:e3: cd:40:79:27:37:ac:ad:40:24:f4:2a:a0:95:1b:1c: 8a:d2:7f:9b:97:ba:7c:e8:c5:2e:9c:c7:4b:9b:45: ac:03:59:51:ea:71:8a:d9:f5:db:1d:45:ea:1f:3d: 65:fe:be:66:2b:72:5a:3a:b7:c6:1e:9d:34:e4:e5: 34:80:e0:47:ef:6e:a1:81:e9:98:3a:7c:6f:de:49: 2c:6f:35:ac:8a:0f:fa:d8:7b:78:0e:27:67:a4:da: 1b:2a:40:28:e5:11:23:35:70:9b:b8:4f:fa:c5:6f: d5:59:eb:2a:95:6c:25:8f:90:4c:2b:5f:ab:04:f5: 73:67:71:b8:07:ae:f8:4f:8a:75:68:c3:13:84:e2: 79:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:30:75:43:2A:9E:AF:34:8A:FB:88:4D:DB:AF:0C:4B:04:75:72:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389f5dcb-ae9a-32de-a240-8137aa93a357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100f:b1e8::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3c:f7:0a:6c:b5:f8:89:c8:85:a4:b7:6a:d0:80:de:ba:98: 5c:0d:b3:3f:5f:57:ca:b2:1d:1b:10:d7:e4:39:f3:6d:91:81: 47:e7:ba:c2:7f:48:53:e8:ea:20:4a:ea:91:5a:0c:84:9a:41: 91:10:25:6a:f3:be:01:27:e6:32:28:1c:02:b3:69:21:72:e9: b8:ab:ce:ad:d6:10:0f:91:f8:c0:57:94:f9:9b:f9:ad:60:2a: 61:fa:a6:81:92:d4:49:d9:f8:26:c8:b9:e5:09:fe:65:35:d0: b9:b4:ef:55:9a:2e:d8:fb:9d:7a:f7:9a:63:48:90:ca:79:1e: d3:af:8e:28:2b:a2:08:cf:c1:ba:a2:2f:22:46:fc:7f:a4:24: 2a:11:75:e4:2e:13:c0:00:5b:95:76:ce:16:fd:21:5a:16:50: 56:cf:dd:5e:4b:b0:38:8c:a5:7a:3b:11:88:d4:93:75:97:7e: 11:6b:2b:20:f4:05:98:39:26:61:39:0a:01:b0:19:9f:fc:11: e2:1d:83:22:28:05:84:54:63:a0:35:e0:a8:57:b2:8d:df:47: 0f:48:c4:1d:bd:de:11:e9:54:4b:54:5a:bf:d7:32:22:24:4b: d2:dd:f4:4a:0a:89:67:d8:08:98:f7:fb:2d:3d:4b:c7:19:27: 8c:65:04:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfS+WoDR55vtV6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MzA2YWNjZmEtODZkNi00YjE2LWJkN2ItYjU5OTZjYmE1YzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/M+lCnSYFSj0zIyjPevCtXSOZ00VhjDCWRS sSYBUOU19VE4vQQVfAre87Pzv54FfpXFuPuuxASPkMQrI9GghMRbOkZYYeXy9Jax E13vfjaquvHWbyJOFGd6htSfr8GLcR/31ki+FNqGcuxUqQrN0MNY13jyX+PNQHkn N6ytQCT0KqCVGxyK0n+bl7p86MUunMdLm0WsA1lR6nGK2fXbHUXqHz1l/r5mK3Ja OrfGHp005OU0gOBH726hgemYOnxv3kksbzWsig/62Ht4DidnpNobKkAo5REjNXCb uE/6xW/VWesqlWwlj5BMK1+rBPVzZ3G4B674T4p1aMMThOJ55wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO4wdUMqnq80ivuITduvDEsEdXJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg5ZjVkY2ItYWU5YS0z MmRlLWEyNDAtODEzN2FhOTNhMzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQD7Ho MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJI89wpstfiJyIWkt2rQgN66mFwNsz9fV8qyHRsQ1+Q5822RgUfn usJ/SFPo6iBK6pFaDISaQZEQJWrzvgEn5jIoHAKzaSFy6birzq3WEA+R+MBXlPmb +a1gKmH6poGS1EnZ+CbIueUJ/mU10Lm071WaLtj7nXr3mmNIkMp5HtOvjigrogjP wbqiLyJG/H+kJCoRdeQuE8AAW5V2zhb9IVoWUFbP3V5LsDiMpXo7EYjUk3WXfhFr KyD0BZg5JmE5CgGwGZ/8EeIdgyIoBYRUY6A14KhXso3fRw9IxB293hHpVEtUWr/X MiIkS9Ld9EoKiWfYCJj3+y09S8cZJ4xlBMo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:15 2026 by rpki-client