$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/899c9894-8507-33d5-b9d1-66f0ac3850ff.roa File: 899c9894-8507-33d5-b9d1-66f0ac3850ff.roa (raw, json) Hash identifier: EhDQSeYH+Y8BtOL2Sg1JVvUiPVVXJNJLHA8DTmy0O3s= Subject key identifier: 33:B7:84:5B:3F:4B:C8:13:08:3E:D4:97:FD:C0:89:B2:F6:BB:40:A9 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F4328584C9C31BF808F0F80215BF06CA0 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/899c9894-8507-33d5-b9d1-66f0ac3850ff.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 0 IP address blocks: 2602:fd10:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:bf:80:8f:0f:80:21:5b:f0:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=f6081a1a-40c5-4663-9d88-d5bec3db3ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:60:50:e1:d5:b0:a6:5b:45:fc:37:ef:86: f5:18:74:6f:a8:1b:bd:7e:62:a6:3c:79:65:b2:7a: e5:68:b6:77:6b:98:09:e7:90:a3:cc:1e:c7:2a:34: 95:15:c8:d5:9c:32:ca:4d:95:ed:e1:ad:26:e7:52: 25:af:37:b7:ee:03:a2:1f:af:1f:4a:c9:ea:c7:f8: b7:d7:1c:7d:ce:c3:1a:7e:53:27:81:71:44:af:b9: ec:c6:56:1e:35:20:fe:ca:f1:34:9a:cb:73:56:c4: 9f:54:6e:62:53:38:81:13:09:0c:81:2c:57:6a:7e: 29:39:e9:f7:25:99:cf:63:f8:b1:11:61:0b:b6:84: a7:49:0b:e1:47:1d:52:d3:15:64:ca:8c:62:a2:9f: 77:e4:51:66:c4:51:e0:91:4f:f7:12:57:7b:37:e0: d0:79:98:ae:84:ca:bb:c6:e2:f3:f5:0d:34:9b:5f: 4a:21:40:5b:a7:33:2c:8d:3a:0e:df:c4:65:78:19: bb:29:ed:b7:ef:50:16:11:68:38:2b:61:8b:eb:2e: aa:4b:7d:f8:b5:6a:cd:dd:e4:92:ab:18:a2:b4:5e: ef:54:9c:92:34:b5:4f:89:a5:3c:87:13:2f:95:de: a9:f6:2c:a8:b9:aa:3d:1c:1a:d3:c6:64:1b:f2:52: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:84:5B:3F:4B:C8:13:08:3E:D4:97:FD:C0:89:B2:F6:BB:40:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/899c9894-8507-33d5-b9d1-66f0ac3850ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd10:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b4:7c:b1:ed:a5:4a:86:e7:8e:83:77:e3:4b:49:11:3c:b9: e4:99:86:3b:55:14:b5:92:35:f9:02:e8:55:43:18:9c:6f:18: 8d:81:c8:29:10:f8:6b:cf:4b:f0:c8:17:ac:34:79:5a:a7:f2: c2:b7:e8:48:0d:78:d8:f4:12:7d:95:c5:30:14:30:79:25:ca: 2f:59:78:f0:2d:ea:6d:d3:61:be:93:02:1f:69:81:ad:06:7d: 5e:d9:63:3c:9a:c1:eb:4a:08:11:23:d1:b8:c4:39:a0:ef:30: ed:de:eb:61:04:84:47:db:eb:6b:9d:be:01:ac:a8:de:27:2d: 99:89:c3:43:1a:69:39:d4:6c:57:42:9b:64:e0:c4:b8:00:54: 25:ba:ab:44:1b:ad:e9:c3:48:a7:f3:86:f2:c6:be:81:8a:b7: 1b:b4:b2:ac:f0:b5:84:d6:ec:3d:75:87:12:6c:ed:17:8a:68: b9:05:e3:06:5a:62:ff:bc:69:df:74:d7:e0:69:e8:0d:2d:e3: f0:06:42:2c:9e:f7:41:b1:d2:c9:a9:0b:9e:48:11:5b:51:0d: 81:9a:38:98:d9:e9:cb:3e:e0:61:31:11:98:2b:28:0b:3b:17: 73:dd:b4:63:99:fc:a6:69:ff:b8:93:80:ad:02:36:88:f0:62: 0d:59:1d:49 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEycMb+Ajw+AIVvwbKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk ZjYwODFhMWEtNDBjNS00NjYzLTlkODgtZDViZWMzZGIzY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig5gUOHVsKZbRfw374b1GHRvqBu9fmKmPHll snrlaLZ3a5gJ55CjzB7HKjSVFcjVnDLKTZXt4a0m51Ilrze37gOiH68fSsnqx/i3 1xx9zsMaflMngXFEr7nsxlYeNSD+yvE0mstzVsSfVG5iUziBEwkMgSxXan4pOen3 JZnPY/ixEWELtoSnSQvhRx1S0xVkyoxiop935FFmxFHgkU/3Eld7N+DQeZiuhMq7 xuLz9Q00m19KIUBbpzMsjToO38RleBm7Ke2371AWEWg4K2GL6y6qS334tWrN3eSS qxiitF7vVJySNLVPiaU8hxMvld6p9iyouao9HBrTxmQb8lKcYQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDO3hFs/S8gTCD7Ul/3AibL2u0CpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvODk5Yzk4OTQtODUwNy0z M2Q1LWI5ZDEtNjZmMGFjMzg1MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgbR8se2lSobnjoN340tJETy55JmGO1UUtZI1+QLoVUMYnG8YjYHI KRD4a89L8MgXrDR5WqfywrfoSA142PQSfZXFMBQweSXKL1l48C3qbdNhvpMCH2mB rQZ9XtljPJrB60oIESPRuMQ5oO8w7d7rYQSER9vra52+Aayo3ictmYnDQxppOdRs V0KbZODEuABUJbqrRBut6cNIp/OG8sa+gYq3G7SyrPC1hNbsPXWHEmztF4pouQXj Blpi/7xp33TX4GnoDS3j8AZCLJ73QbHSyakLnkgRW1ENgZo4mNnpyz7gYTERmCso CzsXc920Y5n8pmn/uJOArQI2iPBiDVkdSQ== -----END CERTIFICATE-----Generated at Sat Feb 21 03:47:04 2026 by rpki-client