$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa File: aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa (raw, json) Hash identifier: dx/O/3Fv1oQVTxCKFKnAQZO6EQZ4rbQ5YFc1iYeY4FU= Subject key identifier: D9:A1:2A:A0:F0:60:84:CC:ED:C1:C1:D8:6E:50:81:8C:E4:8C:D3:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D037D248401F8162398857500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 6167 IP address blocks: 2600:100d:b1d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:24:84:01:f8:16:23:98:85:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=0821ffc2-1036-4ccb-bd90-b81eb788d8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d9:08:d5:cd:83:5b:65:20:34:75:fd:d9:1f: 4c:36:01:d8:3f:5c:1d:78:cd:74:4f:e4:6e:c5:bd: 48:3a:2d:9d:71:32:a5:6a:3c:9a:b5:12:6d:8d:d1: 6d:1f:a1:ce:cb:de:e5:8e:8b:17:af:1c:d0:d6:f8: 8e:40:4c:57:42:48:02:d7:76:04:44:f6:10:da:9b: 03:58:e2:3d:7f:61:3a:ed:50:c2:5f:bf:93:3c:f2: 29:87:d6:79:23:d6:47:46:4e:27:bc:e8:15:93:63: d0:23:0f:74:b5:d9:0c:dd:32:a4:8f:8f:81:43:07: 0c:e6:6a:63:df:26:60:9c:fc:5c:3d:18:4b:e9:d2: 38:a9:d9:27:f7:35:0e:75:b5:24:b5:71:75:cd:3b: b9:f2:cb:ff:bf:0e:c9:77:e4:c6:60:e4:33:e4:e2: bc:d3:8b:16:01:9d:30:fd:6c:b9:11:c5:ca:be:b5: 10:a2:8d:a1:54:77:45:f2:53:2c:4e:c5:bb:98:81: 36:b6:9c:04:c5:45:42:8a:77:79:3e:f4:ad:91:8a: 69:be:9c:bb:fb:71:8a:86:86:61:cf:f5:93:a8:2d: 40:4b:14:84:63:85:8f:b5:b5:7d:c2:cc:9a:9c:12: 95:27:c9:6e:b5:0a:a3:45:26:39:01:7f:d6:23:bf: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:2A:A0:F0:60:84:CC:ED:C1:C1:D8:6E:50:81:8C:E4:8C:D3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa1837c1-d762-3efd-9e89-b6c15d4a460d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100d:b1d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:3d:0f:6d:a0:67:c0:ff:ab:e4:55:b9:8b:7c:c0:04:26:d2: 6b:b0:62:de:98:fd:18:b0:22:25:fe:b9:11:7e:1b:c9:70:5a: bc:3e:83:19:0a:08:d6:b6:11:f5:7d:c2:86:fd:01:86:24:76: 64:80:b7:10:88:6a:4d:5f:fb:e6:68:7e:99:bf:0b:ba:1c:eb: 4a:b9:84:0a:68:68:8d:62:42:0e:e5:71:48:3c:a8:30:fb:26: 69:d2:49:d0:17:a4:0c:06:d1:a1:3f:87:fc:87:80:3a:49:ba: 76:a0:85:5d:32:bb:2b:5a:61:9b:6f:d9:ef:db:df:ba:25:7f: 0b:97:89:7b:97:84:27:28:df:57:61:80:58:05:56:9c:85:a0: 4b:ab:25:d0:e6:d9:c5:2f:43:81:bf:31:e9:a0:34:92:f4:07: 11:2e:b1:5b:77:85:65:cc:b1:cd:b7:cc:8a:35:0d:34:fa:78: c2:00:d9:67:80:ea:6f:4a:64:9d:e9:3f:8c:45:16:8e:14:5a: 9b:5c:ae:cc:20:d7:40:33:72:98:61:6c:9d:44:f3:7b:61:90: 94:57:78:23:da:11:c0:46:7e:ff:08:90:d8:d8:bf:4c:75:61: a1:e0:d0:b4:1d:cc:6b:b3:7e:d0:9c:cc:99:4c:ac:ea:6a:0f: 0a:39:b6:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfSSEAfgWI5iFdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk MDgyMWZmYzItMTAzNi00Y2NiLWJkOTAtYjgxZWI3ODhkOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtkI1c2DW2UgNHX92R9MNgHYP1wdeM10T+Ru xb1IOi2dcTKlajyatRJtjdFtH6HOy97ljosXrxzQ1viOQExXQkgC13YERPYQ2psD WOI9f2E67VDCX7+TPPIph9Z5I9ZHRk4nvOgVk2PQIw90tdkM3TKkj4+BQwcM5mpj 3yZgnPxcPRhL6dI4qdkn9zUOdbUktXF1zTu58sv/vw7Jd+TGYOQz5OK804sWAZ0w /Wy5EcXKvrUQoo2hVHdF8lMsTsW7mIE2tpwExUVCind5PvStkYppvpy7+3GKhoZh z/WTqC1ASxSEY4WPtbV9wsyanBKVJ8lutQqjRSY5AX/WI7+JCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmhKqDwYITM7cHB2G5QgYzkjNOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWExODM3YzEtZDc2Mi0z ZWZkLTllODktYjZjMTVkNGE0NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbHQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALA9D22gZ8D/q+RVuYt8wAQm0muwYt6Y/RiwIiX+uRF+G8lwWrw+ gxkKCNa2EfV9wob9AYYkdmSAtxCIak1f++Zofpm/C7oc60q5hApoaI1iQg7lcUg8 qDD7JmnSSdAXpAwG0aE/h/yHgDpJunaghV0yuytaYZtv2e/b37olfwuXiXuXhCco 31dhgFgFVpyFoEurJdDm2cUvQ4G/MemgNJL0BxEusVt3hWXMsc23zIo1DTT6eMIA 2WeA6m9KZJ3pP4xFFo4UWptcrswg10AzcphhbJ1E83thkJRXeCPaEcBGfv8IkNjY v0x1YaHg0LQdzGuzftCczJlMrOpqDwo5trI= -----END CERTIFICATE-----Generated at Sun Mar 1 19:04:45 2026 by rpki-client