$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa File: 0f44003e-48cb-3fe5-97c3-09015e401420.roa (raw, json) Hash identifier: mcxCgJcJnietDO3CuJJc7bQWHx1YAt0+k2gpLSuHHG0= Subject key identifier: 07:B3:1B:F7:60:A5:44:C7:E6:3F:8D:7F:18:42:E6:7B:17:8E:99:02 Certificate issuer: /CN=ce78c233-fea8-412e-b7ae-1080a457c01e Certificate serial: 010D0C9F4328584CACF1C2C77DCF554E30681B40 Authority key identifier: 4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 2602:f669::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c2:c7:7d:cf:55:4e:30:68:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce78c233-fea8-412e-b7ae-1080a457c01e Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=be4e426f-0a19-4a7e-ba52-6f81279b212d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:73:f3:f7:89:37:e3:9d:60:c4:b9:94:90:e0: 27:6a:a5:c0:ff:77:fd:b5:4f:ad:02:f4:47:4f:e8: de:f8:48:b2:65:fe:7e:7d:eb:b8:62:0c:7c:4f:ef: bd:bf:87:89:30:c2:d9:3b:f2:71:ca:58:64:4d:14: f6:9b:b7:c9:73:db:48:4c:11:82:26:db:ff:17:aa: 50:e0:42:49:93:b7:1a:be:82:92:bf:c2:e2:2a:60: fe:59:ca:2d:d2:2e:d7:88:f8:1f:d9:12:84:7b:5e: 7b:35:6b:a7:2e:37:ea:1d:22:44:f1:97:72:bc:8e: 44:48:9b:21:11:18:ce:7f:fd:5c:87:f7:43:cd:6e: 46:5b:98:b9:74:0f:75:ae:95:24:2c:23:5d:cb:2d: b8:ff:8c:6e:a2:e0:60:cc:21:91:d7:52:c0:08:0b: dc:7b:30:8f:66:09:4f:c4:e8:6c:71:ac:ae:2b:ad: 0d:5e:b6:95:1a:54:22:81:a9:a0:47:cd:2d:d4:57: f6:c3:5c:a8:1d:b1:e7:72:d7:ac:3e:16:a0:b1:d4: 83:35:de:5f:d5:bb:90:f0:8c:37:7d:b5:10:7d:f7: f3:32:50:8b:5a:9a:04:b0:36:78:47:d6:01:dd:80: 30:71:51:e9:bb:f4:a1:bc:12:b9:bf:4f:23:04:70: f1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:1B:F7:60:A5:44:C7:E6:3F:8D:7F:18:42:E6:7B:17:8E:99:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/0f44003e-48cb-3fe5-97c3-09015e401420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e/ce78c233-fea8-412e-b7ae-1080a457c01e.crl X509v3 Authority Key Identifier: keyid:4C:EA:6A:41:6D:E5:A5:9C:C4:70:91:72:03:F2:CA:60:BF:72:96:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ce78c233-fea8-412e-b7ae-1080a457c01e.cer sbgp-ipAddrBlock: critical IPv6: 2602:f669::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6f:d1:07:35:b5:63:26:91:79:8d:b9:ff:1b:b8:33:8f:16: 10:08:8c:d3:96:ef:50:02:66:f8:ac:9b:43:51:6c:cc:ce:30: 89:e2:c6:40:b5:89:81:e0:b0:7d:a7:5d:8d:ee:16:38:1e:a0: 9e:3f:75:9b:8d:58:5c:51:b1:ba:77:4d:32:a0:dd:6a:60:3b: b2:ac:eb:80:1f:cd:4a:ab:f0:0d:84:35:82:df:8b:9e:92:23: a4:c9:e7:8d:cf:49:31:71:5a:32:81:da:00:e8:8f:d1:24:40: ec:7a:ad:ea:83:d9:f4:7e:a3:cc:7e:b9:78:f1:04:99:f7:c2: 98:16:07:c7:bb:82:71:06:94:8c:34:87:30:c2:8b:f3:39:c3: 69:73:22:29:1a:e1:98:7d:e2:fd:71:c1:f5:0f:d8:b1:2d:36: 68:66:5d:48:01:8e:ba:e4:7f:e8:82:4e:d1:82:05:61:86:f4: 87:e7:34:dd:05:7a:9e:b5:94:2c:1b:7c:d2:b8:32:12:eb:8d: a1:ea:e0:16:94:b1:98:cb:d1:63:39:e6:28:5f:fe:9e:17:bf: 04:a1:7c:b3:ce:a9:6b:b0:a4:dd:8f:31:ab:c1:17:12:c2:df: e2:51:c8:55:e4:fd:0d:5a:b3:06:39:be:ff:57:b3:d8:1a:fc: 92:c1:27:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEys8cLHfc9VTjBoG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U3OGMyMzMtZmVhOC00MTJlLWI3YWUtMTA4MGE0NTdj MDFlMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk YmU0ZTQyNmYtMGExOS00YTdlLWJhNTItNmY4MTI3OWIyMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HPz94k3451gxLmUkOAnaqXA/3f9tU+tAvRH T+je+EiyZf5+feu4Ygx8T++9v4eJMMLZO/JxylhkTRT2m7fJc9tITBGCJtv/F6pQ 4EJJk7cavoKSv8LiKmD+Wcot0i7XiPgf2RKEe157NWunLjfqHSJE8ZdyvI5ESJsh ERjOf/1ch/dDzW5GW5i5dA91rpUkLCNdyy24/4xuouBgzCGR11LACAvcezCPZglP xOhscayuK60NXraVGlQigamgR80t1Ff2w1yoHbHnctesPhagsdSDNd5f1buQ8Iw3 fbUQfffzMlCLWpoEsDZ4R9YB3YAwcVHpu/ShvBK5v08jBHDxgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAezG/dgpUTH5j+NfxhC5nsXjpkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZTc4 YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgwYTQ1N2MwMWUvMGY0NDAwM2UtNDhjYi0z ZmU1LTk3YzMtMDkwMTVlNDAxNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2U3OGMyMzMtZmVhOC00MTJlLWI3 YWUtMTA4MGE0NTdjMDFlL2NlNzhjMjMzLWZlYTgtNDEyZS1iN2FlLTEwODBhNDU3 YzAxZS5jcmwwHwYDVR0jBBgwFoAUTOpqQW3lpZzEcJFyA/LKYL9ylmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZTc4YzIzMy1mZWE4LTQxMmUtYjdhZS0xMDgw YTQ1N2MwMWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2aQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5v0Qc1tWMmkXmNuf8buDOPFhAIjNOW71ACZvism0NRbMzOMIni xkC1iYHgsH2nXY3uFjgeoJ4/dZuNWFxRsbp3TTKg3WpgO7Ks64AfzUqr8A2ENYLf i56SI6TJ543PSTFxWjKB2gDoj9EkQOx6reqD2fR+o8x+uXjxBJn3wpgWB8e7gnEG lIw0hzDCi/M5w2lzIika4Zh94v1xwfUP2LEtNmhmXUgBjrrkf+iCTtGCBWGG9Ifn NN0Fep61lCwbfNK4MhLrjaHq4BaUsZjL0WM55ihf/p4XvwShfLPOqWuwpN2PMavB FxLC3+JRyFXk/Q1aswY5vv9Xs9ga/JLBJ0k= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:08 2026 by rpki-client