$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa File: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (raw, json) Hash identifier: q+Q945TAZr4pb/jWvFnA/iDsb/eNDiiHDlATV8IucUY= Subject key identifier: D3:48:3E:48:D6:CF:CE:AB:5B:31:47:89:C6:D1:9B:8D:27:EC:69:3A Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F4328584CB551D8C6FA6CC6E6CF4276A0 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 393819 IP address blocks: 2606:cac0::/32 maxlen: 32 2606:cac0:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:d8:c6:fa:6c:c6:e6:cf:42:76:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=f6d2ba3d-271f-4cae-8e19-a52b6d6386ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:08:ed:28:95:5e:f6:55:60:45:04:4b:36:71: 83:92:49:85:c7:57:b1:b2:64:7f:35:6d:db:b9:9f: fe:e2:54:07:8c:ca:68:c0:bb:04:02:dd:35:53:02: 7d:8d:75:2b:a2:bd:db:6c:8d:d9:82:85:fe:b8:28: ff:6d:13:e4:7e:f3:4c:9f:44:56:46:0f:4d:b9:df: 87:3d:24:9d:03:54:92:58:1c:a9:b6:b9:57:f7:80: 06:72:02:31:0f:b4:4a:cc:c7:2b:39:b0:93:66:00: 71:b9:12:36:d6:1d:6a:43:f4:92:d3:7d:bf:a0:a4: 59:90:9a:c9:72:bc:d3:35:04:cf:8b:42:79:37:46: b4:a7:76:98:da:71:2b:33:ee:bf:c3:ea:61:4f:cf: e0:ff:ad:61:23:56:3c:46:58:50:37:33:e5:69:5c: ad:0c:a8:e7:0b:d2:ce:ff:5e:0e:c2:19:f4:cf:95: 17:25:48:00:c9:64:bb:e9:c1:11:fc:37:86:8c:4c: b3:20:1d:53:f8:26:e8:06:22:c7:11:f2:ea:3c:e8: 0d:44:25:e7:d0:29:b3:e3:76:f6:73:10:ba:b0:fb: 3e:1b:75:93:74:30:f8:3d:83:ce:52:41:32:00:66: 4e:f5:59:3c:7a:88:da:8c:15:36:22:3f:fb:fa:20: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:48:3E:48:D6:CF:CE:AB:5B:31:47:89:C6:D1:9B:8D:27:EC:69:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:cac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ae:a8:48:07:3d:d8:94:91:d9:ef:02:e4:f5:dc:c9:b0:7f: fc:c1:4b:75:88:8f:f7:a7:a6:81:0d:4f:27:4e:a6:1a:64:54: 6d:bd:b2:1a:15:93:d5:c4:2e:0a:5b:66:db:9e:50:b4:ed:3d: 75:32:9f:5e:69:a7:dd:0f:2b:e2:ee:a2:ce:15:bf:25:d3:83: 28:97:fd:91:3d:a2:9e:b5:35:92:0d:0e:81:66:96:01:6a:36: 71:b5:d9:a8:46:44:b3:ae:45:9a:5e:95:48:60:e7:55:39:c9: d9:ac:76:41:36:1e:c5:0d:0f:84:b8:98:17:39:80:00:28:78: 15:29:33:cf:24:41:6d:89:cf:fe:f2:92:76:d2:bd:22:04:5a: ad:ad:77:cf:70:1a:6f:0e:7c:62:08:3c:8a:c6:5b:ac:36:15: 52:a6:fa:00:4b:63:19:69:0e:15:f5:7e:15:2e:8f:6a:4d:1b: ed:00:74:ab:3f:cc:7b:2f:24:10:0c:59:a5:2d:c9:c0:35:ed: bc:a3:01:28:b9:79:9c:47:54:dd:36:b9:22:c7:b1:8a:d8:b1: 22:0a:22:2d:c2:63:82:57:3f:4f:e8:81:3e:76:e9:20:68:4f: ac:d0:bc:87:97:33:0f:1c:2d:51:92:ca:01:60:26:e5:0a:9e: 8f:8c:20:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEy1UdjG+mzG5s9CdqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjZkMmJhM2QtMjcxZi00Y2FlLThlMTktYTUyYjZkNjM4NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAjtKJVe9lVgRQRLNnGDkkmFx1exsmR/NW3b uZ/+4lQHjMpowLsEAt01UwJ9jXUror3bbI3ZgoX+uCj/bRPkfvNMn0RWRg9Nud+H PSSdA1SSWByptrlX94AGcgIxD7RKzMcrObCTZgBxuRI21h1qQ/SS032/oKRZkJrJ crzTNQTPi0J5N0a0p3aY2nErM+6/w+phT8/g/61hI1Y8RlhQNzPlaVytDKjnC9LO /14Owhn0z5UXJUgAyWS76cER/DeGjEyzIB1T+CboBiLHEfLqPOgNRCXn0Cmz43b2 cxC6sPs+G3WTdDD4PYPOUkEyAGZO9Vk8eojajBU2Ij/7+iDtHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNNIPkjWz86rWzFHicbRm40n7Gk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvY2ZjNjI1ZDItNTlmYy0z ZmNhLWE5NmMtZWMzNjYwMWFiZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbKwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQARrqhIBz3YlJHZ7wLk9dzJsH/8wUt1iI/3p6aBDU8nTqYaZFRtvbIa FZPVxC4KW2bbnlC07T11Mp9eaafdDyvi7qLOFb8l04Mol/2RPaKetTWSDQ6BZpYB ajZxtdmoRkSzrkWaXpVIYOdVOcnZrHZBNh7FDQ+EuJgXOYAAKHgVKTPPJEFtic/+ 8pJ20r0iBFqtrXfPcBpvDnxiCDyKxlusNhVSpvoAS2MZaQ4V9X4VLo9qTRvtAHSr P8x7LyQQDFmlLcnANe28owEouXmcR1TdNrkix7GK2LEiCiItwmOCVz9P6IE+dukg aE+s0LyHlzMPHC1RksoBYCblCp6PjCDi -----END CERTIFICATE-----Generated at Mon Feb 23 18:40:38 2026 by rpki-client