$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa File: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (raw, json) Hash identifier: Rt6BLfWs1OMMp9Qrtdk78alkO9Fk/aUWC1P6C+rkNhc= Subject key identifier: D5:F1:A8:4E:07:B9:A4:FE:FB:BB:18:E5:C9:4D:91:5F:05:35:28:5B Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01 Certificate serial: 010D0C9F4328584CACF1CA82283E2899CB79E5A0 Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 2602:f5df::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:ca:82:28:3e:28:99:cb:79:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=cf8ac3bd-d9dc-49a1-a3df-f9b7141f1c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:92:5d:e0:ba:71:1e:e0:6a:30:0c:45:d0:33: 26:a6:3d:c8:38:4c:fc:4a:42:bf:96:1f:11:75:f4: b8:cc:23:c2:f4:0e:07:fa:75:76:e4:dc:55:1d:83: f2:11:f5:52:e7:86:79:fd:6b:4b:5b:95:31:69:a1: 65:ae:3e:1e:8a:91:ce:f0:12:df:03:2b:de:7c:87: c5:0f:7f:07:be:6d:6c:ff:8e:b2:dc:e6:e8:7a:cd: 90:41:08:82:7a:f7:b8:54:f8:76:51:36:b9:94:f3: c2:52:b4:7e:57:c1:f6:97:6f:66:b5:d1:84:1c:fe: f2:1a:af:cd:ed:8f:7e:11:db:73:a9:ce:8d:43:09: 40:4f:f2:ea:ef:89:f6:cb:f7:6b:69:7f:cc:89:d5: 63:84:21:9e:c7:7e:ca:6e:bd:88:02:6a:b9:48:9c: 8d:f5:3d:b6:73:e9:22:45:80:c7:56:61:c7:61:1c: 50:6a:55:5d:0c:49:dc:6d:6e:10:dc:de:7a:00:18: ed:1f:06:45:29:82:f9:6d:a8:30:26:86:c2:10:98: fd:31:f4:c8:9a:10:15:2f:ae:df:fc:76:86:4e:df: ee:5d:64:e9:a4:dd:ce:d8:4d:06:09:26:41:49:98: b3:40:2d:62:dd:09:7f:3c:db:96:7b:e7:af:05:c4: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F1:A8:4E:07:B9:A4:FE:FB:BB:18:E5:C9:4D:91:5F:05:35:28:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl X509v3 Authority Key Identifier: keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:04:b6:3e:55:76:c1:87:b9:2b:91:ee:23:f9:a5:78:24:c7: 9a:54:7c:b4:98:5f:fb:4e:c7:d5:c4:71:20:f0:77:0e:64:4b: 13:77:23:4c:5f:7a:b4:84:e8:6b:f7:71:f6:8c:1d:a3:6b:bc: 95:e5:28:f1:49:8c:8a:e6:e4:da:c5:5d:fc:48:60:25:0a:47: 56:db:48:88:ad:19:ee:6c:30:bf:e3:84:8b:fb:e4:ed:67:5d: b3:0d:c9:42:2d:13:e9:61:1c:6b:10:3b:16:ec:87:b2:9e:bf: 3a:b6:21:69:08:dd:72:ac:84:06:17:73:9d:f0:89:fb:70:fe: 89:99:72:cc:14:70:f2:fa:09:9f:bb:1a:13:4b:58:7d:7e:3c: 4a:85:e2:02:7b:d6:f0:91:0c:c4:68:3f:e7:9b:c2:dd:14:e1: 72:f1:64:6e:8b:cd:a4:eb:cf:a6:97:0f:5b:f1:60:30:c9:29: a4:fb:e5:e8:fc:b4:52:15:a3:a5:99:26:37:0a:bf:cd:79:6c: 46:2d:8d:fa:f8:77:31:5b:2b:6a:7d:61:92:de:fa:7f:64:e7: 66:7c:4f:4b:0a:02:59:62:ec:4b:ca:26:79:26:ac:09:ff:3d: b6:b7:f9:b6:f4:6d:36:db:5c:7d:1f:43:4f:05:6c:40:57:b1: 3b:bd:49:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEys8cqCKD4omct55aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhjNGFiYTYtNWU2Ny00NTBhLWI0YTQtNjQ3NTIzMzgw ZDAxMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk Y2Y4YWMzYmQtZDlkYy00OWExLWEzZGYtZjliNzE0MWYxYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJJd4LpxHuBqMAxF0DMmpj3IOEz8SkK/lh8R dfS4zCPC9A4H+nV25NxVHYPyEfVS54Z5/WtLW5UxaaFlrj4eipHO8BLfAyvefIfF D38Hvm1s/46y3Oboes2QQQiCeve4VPh2UTa5lPPCUrR+V8H2l29mtdGEHP7yGq/N 7Y9+Edtzqc6NQwlAT/Lq74n2y/draX/MidVjhCGex37Kbr2IAmq5SJyN9T22c+ki RYDHVmHHYRxQalVdDEncbW4Q3N56ABjtHwZFKYL5bagwJobCEJj9MfTImhAVL67f /HaGTt/uXWTppN3O2E0GCSZBSZizQC1i3Ql/PNuWe+evBcTRHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNXxqE4HuaT++7sY5clNkV8FNShbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0 YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1MjMzODBkMDEvOGEzM2E5NTEtZTM1NS0z MTNjLTliMzYtN2Y3MWE4ZGM4MmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDhjNGFiYTYtNWU2Ny00NTBhLWI0 YTQtNjQ3NTIzMzgwZDAxLzQ4YzRhYmE2LTVlNjctNDUwYS1iNGE0LTY0NzUyMzM4 MGQwMS5jcmwwHwYDVR0jBBgwFoAU48X9Ll9vhvncjGtO1WrTN+cdL7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80OGM0YWJhNi01ZTY3LTQ1MGEtYjRhNC02NDc1 MjMzODBkMDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL13wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfwS2PlV2wYe5K5HuI/mleCTHmlR8tJhf+07H1cRxIPB3DmRLE3cj TF96tIToa/dx9owdo2u8leUo8UmMiubk2sVd/EhgJQpHVttIiK0Z7mwwv+OEi/vk 7Wddsw3JQi0T6WEcaxA7FuyHsp6/OrYhaQjdcqyEBhdznfCJ+3D+iZlyzBRw8voJ n7saE0tYfX48SoXiAnvW8JEMxGg/55vC3RThcvFkbovNpOvPppcPW/FgMMkppPvl 6Py0UhWjpZkmNwq/zXlsRi2N+vh3MVsran1hkt76f2TnZnxPSwoCWWLsS8omeSas Cf89trf5tvRtNttcfR9DTwVsQFexO71JTA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:25:12 2026 by rpki-client