$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa File: cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa (raw, json) Hash identifier: 9wy/RSWn1c5HA5tnDdB8HEjm8eHdI7yp+PvaBtajcj8= Subject key identifier: CF:76:D5:AA:28:3D:5A:E3:8A:45:9A:7C:03:5E:A7:4C:34:DC:CD:A5 Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Certificate serial: 010D0C9F4328584CEE8CC8DBD627EBA9E7BF9140 Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa Signing time: Sat 21 Feb 2026 02:00:32 +0000 ROA not before: Sat 21 Feb 2026 02:00:32 +0000 ROA not after: Fri 22 May 2026 01:00:32 +0000 asID: 40536 IP address blocks: 2602:f629:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:8c:c8:db:d6:27:eb:a9:e7:bf:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb Validity Not Before: Feb 21 02:00:32 2026 GMT Not After : May 22 01:00:32 2026 GMT Subject: CN=7f7a141c-e145-4581-89fc-a2276f0dfa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:39:ea:9a:3a:dc:20:0d:97:23:b2:77:41:58: a1:ef:22:37:fd:36:f4:c6:ee:b3:3b:9a:46:b7:62: 40:d3:24:e7:69:2c:3c:a2:dd:42:c6:a2:87:8e:b4: 3b:c3:c1:6f:d2:f8:43:d2:bb:5e:92:8f:fb:ac:fc: eb:88:6b:fd:d1:46:21:52:c0:75:1a:67:c5:68:d2: 44:80:2d:41:76:91:7f:0a:3f:ce:4b:a8:59:35:3f: 28:74:36:87:59:8b:cc:f5:b5:13:b8:f6:95:04:31: bf:ad:a1:4d:72:e3:08:19:80:39:ac:ec:b9:d4:62: 99:03:5d:04:71:ae:54:80:12:17:22:6f:87:77:7b: a8:ba:dc:e9:bc:bc:46:f6:32:d2:a5:66:71:1c:03: dc:95:d4:62:63:ad:7b:5c:16:aa:91:d9:e6:de:72: e0:3b:99:4a:7f:d9:43:f0:b0:d3:15:47:99:33:6e: b5:f3:56:8b:fa:c4:de:ab:d4:d5:fa:8b:02:ae:9e: 0a:89:dc:36:e1:0b:73:a6:31:37:c0:0d:42:78:02: 3e:8e:e5:34:34:a3:3f:86:ca:66:1c:12:29:a0:69: e4:da:f1:38:b5:67:3c:ae:f1:13:57:be:c0:5b:f6: 3f:be:96:2b:37:e5:fa:84:3d:25:89:8c:7c:c9:7d: 2d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:76:D5:AA:28:3D:5A:E3:8A:45:9A:7C:03:5E:A7:4C:34:DC:CD:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl X509v3 Authority Key Identifier: keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer sbgp-ipAddrBlock: critical IPv6: 2602:f629:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:fd:ab:0b:ef:8c:15:d4:dd:0c:83:24:5e:8b:c7:ff:b8:82: 54:5e:4a:0a:e6:37:f6:3e:84:79:8e:c0:19:de:5b:fe:60:89: 56:f8:e6:fc:cc:d2:16:bd:be:b5:44:d2:bc:64:5f:e5:82:6a: 7e:89:c8:d8:5b:84:fa:7c:d4:44:d0:80:e2:91:b7:ff:85:d0: 75:4d:be:10:e6:b3:d1:45:4f:7c:a4:ff:c0:d6:df:9f:9a:6f: ca:68:05:bb:2f:72:88:05:0e:92:26:7e:0e:2c:c2:1f:48:e2: 32:f2:ec:17:78:39:99:f7:be:8e:67:20:49:2b:8a:6d:a3:9a: b6:c9:b3:7d:3f:c9:eb:a2:f4:04:e0:56:fa:be:5b:e3:a7:02: 57:a3:b9:b0:d4:64:27:ac:a7:7e:21:26:c3:0e:0d:4d:39:36: 8b:b5:b7:e6:dd:79:b4:b1:ce:3d:de:c2:55:41:76:25:85:a7: d5:36:d0:47:89:c9:e7:7d:31:08:3d:33:3e:c4:ea:74:d0:a1: 0c:e8:af:fc:ee:18:c6:ca:53:ff:a9:6e:fb:ab:87:77:f1:5f: 48:14:c3:6d:5a:eb:0f:69:85:02:86:a5:bb:6f:5b:41:29:e9: 12:a9:1c:45:fe:a7:9d:50:c1:ed:cd:06:7c:81:e9:a9:86:3e: 02:e4:00:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzujMjb1ifrqee/kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm NWNiMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk N2Y3YTE0MWMtZTE0NS00NTgxLTg5ZmMtYTIyNzZmMGRmYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTnqmjrcIA2XI7J3QVih7yI3/Tb0xu6zO5pG t2JA0yTnaSw8ot1CxqKHjrQ7w8Fv0vhD0rteko/7rPzriGv90UYhUsB1GmfFaNJE gC1BdpF/Cj/OS6hZNT8odDaHWYvM9bUTuPaVBDG/raFNcuMIGYA5rOy51GKZA10E ca5UgBIXIm+Hd3uoutzpvLxG9jLSpWZxHAPcldRiY617XBaqkdnm3nLgO5lKf9lD 8LDTFUeZM26181aL+sTeq9TV+osCrp4Kidw24QtzpjE3wA1CeAI+juU0NKM/hspm HBIpoGnk2vE4tWc8rvETV77AW/Y/vpYrN+X6hD0liYx8yX0tAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM921aooPVrjikWafANep0w03M2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0 NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvY2Y5MWNhMTEtNDQzZC0z Y2Y4LWJjMzAtNmJiOTZlMzZkMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKX9qwvvjBXU3QyDJF6Lx/+4glReSgrmN/Y+hHmOwBneW/5giVb4 5vzM0ha9vrVE0rxkX+WCan6JyNhbhPp81ETQgOKRt/+F0HVNvhDms9FFT3yk/8DW 35+ab8poBbsvcogFDpImfg4swh9I4jLy7Bd4OZn3vo5nIEkrim2jmrbJs30/yeui 9ATgVvq+W+OnAlejubDUZCesp34hJsMODU05Nou1t+bdebSxzj3ewlVBdiWFp9U2 0EeJyed9MQg9Mz7E6nTQoQzor/zuGMbKU/+pbvurh3fxX0gUw21a6w9phQKGpbtv W0Ep6RKpHEX+p51Qwe3NBnyB6amGPgLkAJo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:03 2026 by rpki-client