$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa File: 0952e798-9d39-3263-bdb3-03a59c0c85e4.roa (raw, json) Hash identifier: grd4z0uMvzNmfMWxtkIwAOHhKVSy7Pn6Huq7LHhUI8I= Subject key identifier: 85:28:FA:E9:39:A3:E3:62:54:01:AC:06:B1:CA:FE:28:AD:E1:F3:9A Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584CAB8C635BC134CC327E172880 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 14618 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:63:5b:c1:34:cc:32:7e:17:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=7ca94c05-a51e-4ff2-80b7-e764583db2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:93:a5:ff:d9:4f:e3:36:10:f5:1f:a9:ea: d4:7d:40:96:52:40:75:82:ff:65:8a:73:62:5f:41: 4f:ea:43:a8:8b:51:f9:f4:73:4c:dc:1e:e7:73:e4: d0:32:b9:d4:01:9a:4a:ae:f3:d4:77:a7:fe:d4:fd: d2:39:99:33:5c:1f:1c:30:62:51:11:a8:f1:cf:17: 97:4a:c0:07:82:14:b9:68:e4:b0:1f:14:ca:ba:d4: d6:9f:59:74:49:05:25:79:81:50:07:54:39:e4:ca: 7e:4f:d2:e1:eb:a5:13:3c:ba:93:e6:3d:a3:88:bb: 26:99:59:19:c3:a6:c0:40:25:c9:88:78:56:81:95: a3:32:70:25:42:61:0b:a2:c2:e8:09:cc:a0:71:81: f0:fd:cb:52:48:d1:60:48:ab:54:d3:a2:84:54:10: 5e:a7:29:0e:ec:db:4e:33:59:3f:81:1d:49:9b:67: 84:2c:db:0b:18:08:18:38:8c:49:fa:1f:28:a5:4f: c7:e4:98:2c:94:a9:a9:af:7d:03:c5:2f:88:93:4f: be:93:4e:0c:d4:82:1b:89:e4:90:f9:26:5a:c4:19: ed:0c:08:b8:4e:9e:2a:2b:e2:95:ff:ab:94:27:c7: 9f:a6:34:4d:ca:74:26:c9:f9:a6:5b:55:c4:0e:f2: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:28:FA:E9:39:A3:E3:62:54:01:AC:06:B1:CA:FE:28:AD:E1:F3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/0952e798-9d39-3263-bdb3-03a59c0c85e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4e:e0:f2:cd:67:6c:14:01:64:61:e6:cd:bf:09:0f:b3:f0: 01:05:28:58:f0:8a:f2:34:69:47:6a:43:a4:e5:89:56:08:c4: 9f:2f:a0:63:e5:b9:0d:39:0b:87:61:b8:e1:f3:9a:97:ea:fd: 92:07:b0:66:cb:32:3f:ac:aa:9f:81:4d:8a:6b:7f:48:1f:65: 15:37:43:a7:72:38:0a:06:5d:6c:03:91:2f:16:43:7d:10:01: 0e:85:0c:8e:ba:76:b3:fa:f1:13:b1:8a:4e:46:9e:8d:92:73: 71:1e:a1:2e:68:15:86:2b:ec:17:00:b8:da:cb:11:96:e9:b8: a9:74:a7:ba:63:8e:02:93:40:54:4d:8b:0c:89:c5:3e:cf:63: e2:d6:a1:40:9e:2e:fe:f9:d5:db:39:79:0f:c8:d4:11:a4:06: 42:46:13:df:6f:14:e9:1f:3d:5d:b7:de:b0:b8:6f:6e:78:95: 25:9b:0c:a5:13:24:63:00:86:f7:9d:d7:c8:0b:6a:d5:6e:02: a8:b9:ea:98:6c:e1:06:e1:57:57:3a:13:88:46:b0:a8:54:b6: 70:08:bc:3c:53:b4:6a:e3:ed:9a:a6:c9:e4:e8:cf:f3:8b:92: f2:40:73:b3:f5:ca:e4:5e:53:0f:d7:d2:c5:4a:39:1f:32:74: 6b:44:5c:b3 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyrjGNbwTTMMn4XKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk N2NhOTRjMDUtYTUxZS00ZmYyLTgwYjctZTc2NDU4M2RiMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaTpf/ZT+M2EPUfqerUfUCWUkB1gv9linNi X0FP6kOoi1H59HNM3B7nc+TQMrnUAZpKrvPUd6f+1P3SOZkzXB8cMGJREajxzxeX SsAHghS5aOSwHxTKutTWn1l0SQUleYFQB1Q55Mp+T9Lh66UTPLqT5j2jiLsmmVkZ w6bAQCXJiHhWgZWjMnAlQmELosLoCcygcYHw/ctSSNFgSKtU06KEVBBepykO7NtO M1k/gR1Jm2eELNsLGAgYOIxJ+h8opU/H5JgslKmpr30DxS+Ik0++k04M1IIbieSQ +SZaxBntDAi4Tp4qK+KV/6uUJ8efpjRNynQmyfmmW1XEDvKcTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIUo+uk5o+NiVAGsBrHK/iit4fOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvMDk1MmU3OTgtOWQzOS0z MjYzLWJkYjMtMDNhNTljMGM4NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEALE7g8s1nbBQBZGHmzb8JD7PwAQUoWPCK8jRpR2pDpOWJVgjEny+g Y+W5DTkLh2G44fOal+r9kgewZssyP6yqn4FNimt/SB9lFTdDp3I4CgZdbAORLxZD fRABDoUMjrp2s/rxE7GKTkaejZJzcR6hLmgVhivsFwC42ssRlum4qXSnumOOApNA VE2LDInFPs9j4tahQJ4u/vnV2zl5D8jUEaQGQkYT328U6R89XbfesLhvbniVJZsM pRMkYwCG953XyAtq1W4CqLnqmGzhBuFXVzoTiEawqFS2cAi8PFO0auPtmqbJ5OjP 84uS8kBzs/XK5F5TD9fSxUo5HzJ0a0Rcsw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:34 2026 by rpki-client