$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/994c7048-ae34-318a-8466-22d3a9168467.roa File: 994c7048-ae34-318a-8466-22d3a9168467.roa (raw, json) Hash identifier: 8GTbPDn2eBZ932TB5ztAtrrkvmJJBVdg7NieW/pAnrg= Subject key identifier: 74:5F:9B:51:92:24:6A:72:D5:1E:3C:EB:DA:E6:9D:ED:E6:EA:B7:77 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584CF2BCEC7BAC501A3DB4235360 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/994c7048-ae34-318a-8466-22d3a9168467.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 23428 IP address blocks: 2602:fb68:100::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:ec:7b:ac:50:1a:3d:b4:23:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=94b89fd0-eb99-45f4-9bf0-a9a86cf4783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:50:64:69:31:67:43:55:3c:28:35:6d:93: 16:9b:50:ee:48:13:21:5a:e3:bb:b9:2a:1a:9c:27: e2:84:cc:e2:59:65:99:47:45:83:c3:7b:01:75:a7: 69:36:7a:82:49:7a:2e:10:f7:e1:50:3d:43:90:d9: d7:73:f2:1e:12:5a:66:05:0a:91:a8:bd:ae:4d:0d: e5:4b:0b:88:0e:4e:fa:d6:77:a6:20:27:d3:b4:56: 85:7a:17:8e:9b:63:ad:be:90:9a:02:af:93:18:cb: 35:a8:76:c0:44:e2:6d:df:0a:c8:d9:f2:e7:71:1b: 79:84:ba:9c:15:d4:6f:39:93:1e:7b:d0:11:d0:2c: 36:47:b2:32:b5:25:c5:2b:23:a9:df:82:f3:fc:3d: ba:21:13:d0:c1:fe:50:9e:fb:ae:ac:38:44:6f:c5: 30:61:b7:ba:5c:fd:2f:65:30:a5:cb:2e:7f:2d:b7: d8:0e:b7:5b:86:8b:49:2f:43:ac:5b:11:54:9e:d4: 35:25:d4:97:b3:aa:da:af:d2:3c:63:43:2d:0a:61: 32:7a:58:1e:81:49:c4:de:b4:90:f2:10:1d:48:d9: d5:67:bd:ef:e7:e5:d6:60:b8:f8:53:d8:a7:4a:a6: a1:90:54:47:8b:c2:a4:02:51:bc:5b:a3:9e:ee:f2: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5F:9B:51:92:24:6A:72:D5:1E:3C:EB:DA:E6:9D:ED:E6:EA:B7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/994c7048-ae34-318a-8466-22d3a9168467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:100::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:63:14:2a:e4:06:c5:24:af:75:f6:7f:9f:17:ce:d4:86:24: 51:27:ba:b8:10:36:93:70:f8:74:91:e3:8f:d5:d3:d6:3f:37: cf:d6:3e:c0:d1:af:b4:45:2f:70:a6:88:fd:bd:b8:35:e4:47: c3:7b:26:19:96:01:77:76:bf:44:74:3d:41:b7:13:bb:29:01: d9:d4:c4:16:28:d1:ed:be:fe:d0:14:38:1e:25:04:a7:34:ac: 44:7a:1b:e0:3c:a4:b7:b1:d1:71:0d:7e:0d:59:eb:1a:cf:a8: 58:ba:2a:24:b3:1f:e2:96:08:95:15:03:2f:a8:95:60:72:e4: eb:04:fe:57:f4:65:43:99:ed:b3:c7:20:a2:19:c5:e4:71:14: 12:7c:6b:0f:27:49:3c:31:23:cd:6f:9f:64:58:e7:eb:97:73: b0:aa:95:87:de:cf:5c:43:92:21:8b:6c:ca:52:52:45:0f:4b: 4b:52:28:28:5e:fe:61:43:90:78:de:36:94:c5:7f:e7:d7:ed: 20:32:eb:ae:97:48:67:bb:57:50:ab:50:57:92:5a:35:46:de: b6:c8:d5:3a:bb:b4:73:c7:5e:c4:88:51:c6:b2:30:73:ed:7d: 48:d3:b8:d9:d8:08:12:1e:be:02:bd:87:e2:60:79:92:7b:e9: 19:37:5f:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzyvOx7rFAaPbQjU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk OTRiODlmZDAtZWI5OS00NWY0LTliZjAtYTlhODZjZjQ3ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1QZGkxZ0NVPCg1bZMWm1DuSBMhWuO7uSoa nCfihMziWWWZR0WDw3sBdadpNnqCSXouEPfhUD1DkNnXc/IeElpmBQqRqL2uTQ3l SwuIDk761nemICfTtFaFeheOm2OtvpCaAq+TGMs1qHbAROJt3wrI2fLncRt5hLqc FdRvOZMee9AR0Cw2R7IytSXFKyOp34Lz/D26IRPQwf5QnvuurDhEb8UwYbe6XP0v ZTClyy5/LbfYDrdbhotJL0OsWxFUntQ1JdSXs6rar9I8Y0MtCmEyelgegUnE3rSQ 8hAdSNnVZ73v5+XWYLj4U9inSqahkFRHi8KkAlG8W6Oe7vJzawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRfm1GSJGpy1R4869rmne3m6rd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvOTk0YzcwNDgtYWUzNC0z MThhLTg0NjYtMjJkM2E5MTY4NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJjFCrkBsUkr3X2f58XztSGJFEnurgQNpNw+HSR44/V09Y/N8/W PsDRr7RFL3CmiP29uDXkR8N7JhmWAXd2v0R0PUG3E7spAdnUxBYo0e2+/tAUOB4l BKc0rER6G+A8pLex0XENfg1Z6xrPqFi6KiSzH+KWCJUVAy+olWBy5OsE/lf0ZUOZ 7bPHIKIZxeRxFBJ8aw8nSTwxI81vn2RY5+uXc7CqlYfez1xDkiGLbMpSUkUPS0tS KChe/mFDkHjeNpTFf+fX7SAy666XSGe7V1CrUFeSWjVG3rbI1Tq7tHPHXsSIUcay MHPtfUjTuNnYCBIevgK9h+JgeZJ76Rk3X5E= -----END CERTIFICATE-----Generated at Sun Mar 1 14:48:19 2026 by rpki-client