$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa File: 253905c7-5040-3e96-8afb-d1fd24d275f9.roa (raw, json) Hash identifier: zCty8YBzdZ/GrviWUJA4oySIDbeu0oUG0/5LhgPU9Kg= Subject key identifier: D3:DF:61:38:28:44:9F:22:E4:29:71:E1:28:ED:E8:6B:98:59:3B:5B Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584CD13CA9F2D6991B7EF4303400 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa Signing time: Tue 10 Feb 2026 14:00:41 +0000 ROA not before: Tue 10 Feb 2026 14:00:41 +0000 ROA not after: Mon 11 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 2620:116:800a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:3c:a9:f2:d6:99:1b:7e:f4:30:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Feb 10 14:00:41 2026 GMT Not After : May 11 13:00:41 2026 GMT Subject: CN=86da29fd-38cd-4406-b748-03e5a2db416e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:68:6a:50:47:c6:72:25:60:11:84:88:0f: ab:73:bb:13:68:83:a9:72:0e:07:84:b9:31:09:d5: 02:cc:45:8a:68:30:68:06:d8:e0:db:2b:86:ed:c3: b4:b2:cc:e8:ad:21:01:69:20:05:e5:5c:e2:c2:19: e5:f9:0f:cd:2a:f7:f2:99:0d:ab:d2:ef:f6:bc:92: cc:51:b5:41:bd:d2:9f:75:80:d8:86:db:54:c3:54: 71:c8:cd:a5:d8:0e:69:8b:d9:32:09:14:81:97:ea: eb:fb:d1:2e:70:bc:e0:9c:20:7b:d1:f5:c6:24:3b: 41:32:7b:33:ee:3c:dd:66:e5:aa:46:93:20:8a:77: 1b:e7:dc:03:e3:47:3f:a8:ba:30:de:8e:18:64:a0: 9a:16:1a:7c:73:9e:e6:7e:6b:97:a7:17:5e:6c:82: b6:3f:7d:86:47:f9:aa:b8:69:db:07:d3:81:d2:db: be:11:0c:6d:14:44:24:68:51:dc:51:2a:f8:c5:20: 3a:7e:11:5c:c5:1e:e5:0e:db:21:2c:14:09:5b:e7: 04:56:08:64:1b:b4:5d:94:92:28:74:51:a7:f8:54: 4a:9a:8a:84:1d:3a:10:cd:d7:71:47:4a:54:10:dd: f4:75:9c:54:57:3c:6e:c3:32:4f:80:8f:52:6a:d1: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:61:38:28:44:9F:22:E4:29:71:E1:28:ED:E8:6B:98:59:3B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/253905c7-5040-3e96-8afb-d1fd24d275f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv6: 2620:116:800a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:13:b3:a7:9e:68:19:4f:63:18:1b:30:04:9c:6f:a2:6e:4c: 00:dc:fb:81:ad:53:ff:b5:98:7a:17:c7:1f:03:a3:da:43:e8: 37:77:7a:fd:fc:bc:8a:49:9f:1a:58:95:3d:c6:bb:83:cb:8c: f2:eb:12:d0:11:ed:01:fd:d1:01:7d:d9:21:ec:c8:cf:5c:62: 46:59:bb:0a:28:4e:d8:00:c5:96:a2:c0:de:62:4c:47:68:c7: 6f:75:62:5e:a3:3e:ad:f5:73:73:1c:13:4e:78:c2:e7:e5:cb: 06:23:c7:a0:0f:72:7a:75:12:26:c8:e0:cd:e6:61:94:ad:37: a1:0a:1d:aa:a1:02:6a:33:f1:cd:e9:1d:5b:c4:51:61:46:f9: 9f:28:57:b6:27:78:3d:a8:83:19:a7:7e:64:49:50:f8:0f:c9: 26:fe:d0:06:3e:a0:d2:80:56:0e:90:87:6c:a6:55:44:ca:31: cf:07:91:ca:0d:84:e7:6b:4e:94:8a:b8:3f:e1:48:66:17:7c: 35:e7:29:75:98:ab:28:fe:01:6e:85:c7:75:c9:c7:ff:2b:84: b3:38:e3:97:d5:19:10:8e:e0:81:f0:c7:e1:86:26:f3:55:c4: 66:f0:b0:a4:5e:a7:d8:a3:cd:79:c9:f3:ea:2d:cf:c9:0d:6a: 85:56:b0:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzRPKny1pkbfvQwNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk ODZkYTI5ZmQtMzhjZC00NDA2LWI3NDgtMDNlNWEyZGI0MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDJoalBHxnIlYBGEiA+rc7sTaIOpcg4HhLkx CdUCzEWKaDBoBtjg2yuG7cO0sszorSEBaSAF5Vziwhnl+Q/NKvfymQ2r0u/2vJLM UbVBvdKfdYDYhttUw1RxyM2l2A5pi9kyCRSBl+rr+9EucLzgnCB70fXGJDtBMnsz 7jzdZuWqRpMgincb59wD40c/qLow3o4YZKCaFhp8c57mfmuXpxdebIK2P32GR/mq uGnbB9OB0tu+EQxtFEQkaFHcUSr4xSA6fhFcxR7lDtshLBQJW+cEVghkG7RdlJIo dFGn+FRKmoqEHToQzddxR0pUEN30dZxUVzxuwzJPgI9SatEhoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPfYTgoRJ8i5Clx4Sjt6GuYWTtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvMjUzOTA1YzctNTA0MC0z ZTk2LThhZmItZDFmZDI0ZDI3NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABFoAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABITs6eeaBlPYxgbMAScb6JuTADc+4GtU/+1mHoXxx8Do9pD6Dd3 ev38vIpJnxpYlT3Gu4PLjPLrEtAR7QH90QF92SHsyM9cYkZZuwooTtgAxZaiwN5i TEdox291Yl6jPq31c3McE054wuflywYjx6APcnp1EibI4M3mYZStN6EKHaqhAmoz 8c3pHVvEUWFG+Z8oV7YneD2ogxmnfmRJUPgPySb+0AY+oNKAVg6Qh2ymVUTKMc8H kcoNhOdrTpSKuD/hSGYXfDXnKXWYqyj+AW6Fx3XJx/8rhLM445fVGRCO4IHwx+GG JvNVxGbwsKRep9ijzXnJ8+otz8kNaoVWsC8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:05 2026 by rpki-client