$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa File: a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa (raw, json) Hash identifier: WGOg0Rhlkuo4ZEaRU+HczUKdVu+TSRgrEfS+hfbBEv8= Subject key identifier: A3:2F:88:1A:E0:41:4A:AF:A5:6C:E9:8C:A6:BA:44:D7:28:FD:E5:E1 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584CBDF80E13F8E99C7A773A1800 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa Signing time: Tue 03 Feb 2026 16:22:13 +0000 ROA not before: Tue 03 Feb 2026 16:22:13 +0000 ROA not after: Mon 04 May 2026 15:22:13 +0000 asID: 30103 IP address blocks: 2620:123:20a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:f8:0e:13:f8:e9:9c:7a:77:3a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 3 16:22:13 2026 GMT Not After : May 4 15:22:13 2026 GMT Subject: CN=74d9490e-f3e1-48fc-8062-ca7676312d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:77:13:bb:db:55:8d:e1:c2:aa:a4:a7:be: 40:5b:fc:6b:1f:e3:41:de:07:c4:82:9c:2c:06:66: 6a:5e:05:6b:e8:fa:66:97:31:2e:71:a2:78:11:f2: 1d:0d:84:0d:7d:62:7c:f4:2f:86:f1:8f:f9:c1:4b: 5f:47:82:d2:1d:cd:1c:f0:71:28:4a:68:f8:f5:19: 8c:e8:11:11:95:97:64:3e:b6:49:e0:3d:d7:e4:d2: 3b:90:76:13:e7:28:8a:46:87:1e:a2:de:0f:c2:a8: 6a:cf:b4:cc:50:07:22:e3:ea:a0:1e:d4:07:77:b9: c8:20:5b:52:38:98:cb:09:38:db:ab:8c:19:81:da: 5f:71:5a:79:7f:c5:f6:ab:a6:3e:9a:6d:fe:a5:64: ec:f0:43:15:db:a9:fc:08:b9:38:ec:79:c0:eb:9e: b9:81:cd:3a:8e:ba:95:e3:c3:ca:78:6f:b0:ba:27: 78:b0:8f:12:e8:5e:d8:39:c9:8c:46:34:13:e8:54: ce:68:35:ab:35:43:24:ed:5c:8b:01:97:e1:91:5c: 73:37:c8:f6:82:14:91:59:c4:b7:82:6c:b3:92:62: 62:fd:e6:e2:f0:f9:25:90:b9:35:f1:fe:77:5b:95: 38:e5:93:4b:a3:95:cd:93:b1:24:e4:6d:a8:1e:89: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:88:1A:E0:41:4A:AF:A5:6C:E9:8C:A6:BA:44:D7:28:FD:E5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a3f56f13-e1e8-33cf-9480-7d361a4dd692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:20a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:20:3e:6f:05:66:20:65:94:22:77:1f:38:cb:2a:17:8b:28: 5f:a5:f4:ad:dc:f3:48:27:3c:5d:27:db:21:ba:14:de:a0:18: e8:78:07:6d:1c:09:f1:d1:95:7a:e6:ab:a2:ed:67:38:1f:21: f6:9e:3d:be:6c:e4:63:d1:90:74:e4:c7:dc:49:18:a9:f9:72: 76:02:56:92:f6:d5:13:1c:e0:28:fb:d6:11:99:28:0b:79:1e: ae:af:dd:d7:ab:f4:99:d9:91:32:00:c2:5c:66:c5:37:99:84: 15:fa:4b:02:f9:bd:78:61:8f:aa:3d:f1:a7:a1:40:23:1e:28: 6b:f0:04:c5:d3:ac:64:e2:3b:48:f8:9a:94:f7:03:c0:73:f1: de:8e:18:21:41:ed:af:af:8f:cf:03:fd:88:6b:7e:1b:6b:52: c4:0f:74:11:30:e2:3a:9f:01:60:e0:02:2f:b9:ab:32:8a:13: cf:a4:b8:40:83:fd:8e:f2:27:99:e0:f0:b8:c2:f2:db:d5:e6: b2:24:10:92:59:8c:96:40:4c:13:70:63:4f:b8:84:cb:44:b7: 88:e7:d2:b1:90:88:df:3e:44:72:d4:30:4b:d5:70:de:77:0c: ca:00:4e:5f:be:f3:44:14:ea:54:d3:1f:df:17:f5:36:0c:f5: df:0c:3d:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9+A4T+Omcenc6GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDIwMzE2MjIxM1oXDTI2MDUwNDE1MjIxM1owLzEtMCsGA1UEAxMk NzRkOTQ5MGUtZjNlMS00OGZjLTgwNjItY2E3Njc2MzEyZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTh3E7vbVY3hwqqkp75AW/xrH+NB3gfEgpws BmZqXgVr6PpmlzEucaJ4EfIdDYQNfWJ89C+G8Y/5wUtfR4LSHc0c8HEoSmj49RmM 6BERlZdkPrZJ4D3X5NI7kHYT5yiKRoceot4Pwqhqz7TMUAci4+qgHtQHd7nIIFtS OJjLCTjbq4wZgdpfcVp5f8X2q6Y+mm3+pWTs8EMV26n8CLk47HnA6565gc06jrqV 48PKeG+wuid4sI8S6F7YOcmMRjQT6FTOaDWrNUMk7VyLAZfhkVxzN8j2ghSRWcS3 gmyzkmJi/ebi8PklkLk18f53W5U45ZNLo5XNk7Ek5G2oHokwswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKMviBrgQUqvpWzpjKa6RNco/eXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTNmNTZmMTMtZTFlOC0z M2NmLTk0ODAtN2QzNjFhNGRkNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkgPm8FZiBllCJ3HzjLKheLKF+l9K3c80gnPF0n2yG6FN6gGOh4 B20cCfHRlXrmq6LtZzgfIfaePb5s5GPRkHTkx9xJGKn5cnYCVpL21RMc4Cj71hGZ KAt5Hq6v3der9JnZkTIAwlxmxTeZhBX6SwL5vXhhj6o98aehQCMeKGvwBMXTrGTi O0j4mpT3A8Bz8d6OGCFB7a+vj88D/YhrfhtrUsQPdBEw4jqfAWDgAi+5qzKKE8+k uECD/Y7yJ5ng8LjC8tvV5rIkEJJZjJZATBNwY0+4hMtEt4jn0rGQiN8+RHLUMEvV cN53DMoATl++80QU6lTTH98X9TYM9d8MPcg= -----END CERTIFICATE-----Generated at Sun Mar 1 18:17:32 2026 by rpki-client