$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa File: bc36308e-607f-36db-982f-4ca4d4f2788b.roa (raw, json) Hash identifier: 94BAgr59W/NsDt2G5dROBgoWZILRioas98gnprsl8q0= Subject key identifier: A2:C9:94:B8:61:AC:18:FA:12:98:91:78:3A:01:8E:7F:46:0E:91:8C Certificate issuer: /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Certificate serial: 010D0C9F4328584C8A0C6630837C75398A091F80 Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 1403 IP address blocks: 2600:d400::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:66:30:83:7c:75:39:8a:09:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=4a96ff51-7bdb-4185-8a84-2b3241b233d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:4f:4b:22:4e:eb:08:c0:8c:9f:82:81:ec: 29:26:39:b2:cc:32:52:17:8e:40:70:45:42:9f:8b: 15:1b:3a:f8:43:e9:a2:03:d9:60:cd:50:7b:0d:38: b0:4e:2b:59:71:f1:f5:64:25:19:1c:99:27:b5:91: c8:25:c5:d7:da:f8:d1:4b:6f:8c:f8:73:38:b2:e2: c6:5f:7a:0e:62:80:77:51:3a:98:10:93:34:50:51: 1a:04:b7:46:95:0f:17:31:bf:55:d4:8f:47:fa:dd: ab:54:dd:79:af:32:bb:18:bb:39:28:c9:4e:59:94: 87:72:fd:24:64:b3:01:7b:49:b3:cd:df:2a:e9:92: 09:91:b6:65:70:e4:f2:50:2f:7a:f2:f8:12:50:27: 77:db:b3:4c:e0:52:4e:aa:ca:5b:cc:59:24:9b:9b: d3:5c:fc:f1:e5:d7:25:67:0b:5e:41:d3:79:23:db: 5e:7e:07:e9:6c:fa:54:8e:c0:af:b1:fb:62:2d:38: 4b:fa:e1:f8:51:a9:a4:66:40:aa:f9:3e:64:0d:b8: 39:91:45:55:19:4f:6a:9d:bf:4a:05:85:52:27:90: a6:44:23:ee:3d:36:32:34:6d:f9:7b:96:7d:60:1a: b9:1c:2a:e9:ac:61:c1:ef:46:37:a9:d0:d4:87:00: 68:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C9:94:B8:61:AC:18:FA:12:98:91:78:3A:01:8E:7F:46:0E:91:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/bc36308e-607f-36db-982f-4ca4d4f2788b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl X509v3 Authority Key Identifier: keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer sbgp-ipAddrBlock: critical IPv6: 2600:d400::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:42:45:e0:9c:e7:09:11:f7:d0:bd:15:96:e7:ff:60:5f:38: 4a:ee:57:b3:8f:a9:0e:fc:15:bd:52:8c:73:3c:6a:d5:ee:00: de:92:63:f7:0c:40:28:6a:c7:c9:3f:91:06:57:8b:6f:05:39: 93:46:96:0d:7b:c1:04:02:e6:4c:89:ab:6f:ee:07:2c:5b:ff: 02:3c:8b:20:85:3b:99:bd:05:43:ab:c6:08:d1:e5:ff:b3:fe: d2:d1:1b:c2:77:80:d3:dc:69:03:a0:0e:65:36:4d:b6:07:17: 9b:5d:47:dc:bf:6a:73:a1:9e:cd:37:fe:49:38:6d:3b:32:e4: df:22:ee:93:ea:b1:94:f9:8c:80:bd:fb:08:cb:9d:ea:e2:26: 2e:b4:98:e0:42:2d:1e:da:56:d5:d2:8b:da:04:cd:50:2a:07: 0f:42:65:2e:f8:40:3d:ec:06:38:9c:d1:b0:48:42:fe:b6:ad: 72:93:cb:ca:2f:5a:f3:51:50:fc:18:58:04:c7:9d:06:5c:f0: 93:16:43:85:78:dc:a3:f9:1c:6d:9c:1e:5a:64:07:86:08:0b: 7f:e5:e5:aa:4a:e9:96:79:79:57:7d:39:03:18:ff:65:da:66: 45:e9:da:d6:90:fa:ac:fb:f6:29:75:83:86:74:22:f2:8f:54: d7:79:06:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyKDGYwg3x1OYoJH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2 Nzk4MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NGE5NmZmNTEtN2JkYi00MTg1LThhODQtMmIzMjQxYjIzM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqylPSyJO6wjAjJ+CgewpJjmyzDJSF45AcEVC n4sVGzr4Q+miA9lgzVB7DTiwTitZcfH1ZCUZHJkntZHIJcXX2vjRS2+M+HM4suLG X3oOYoB3UTqYEJM0UFEaBLdGlQ8XMb9V1I9H+t2rVN15rzK7GLs5KMlOWZSHcv0k ZLMBe0mzzd8q6ZIJkbZlcOTyUC968vgSUCd327NM4FJOqspbzFkkm5vTXPzx5dcl ZwteQdN5I9tefgfpbPpUjsCvsftiLThL+uH4UamkZkCq+T5kDbg5kUVVGU9qnb9K BYVSJ5CmRCPuPTYyNG35e5Z9YBq5HCrprGHB70Y3qdDUhwBoqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKLJlLhhrBj6EpiReDoBjn9GDpGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvYmMzNjMwOGUtNjA3Zi0z NmRiLTk4MmYtNGNhNGQ0ZjI3ODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl YTQ5YzY3OTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgDUADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDQkXgnOcJEffQvRWW5/9gXzhK7lezj6kO/BW9UoxzPGrV7gDekmP3 DEAoasfJP5EGV4tvBTmTRpYNe8EEAuZMiatv7gcsW/8CPIsghTuZvQVDq8YI0eX/ s/7S0RvCd4DT3GkDoA5lNk22BxebXUfcv2pzoZ7NN/5JOG07MuTfIu6T6rGU+YyA vfsIy53q4iYutJjgQi0e2lbV0ovaBM1QKgcPQmUu+EA97AY4nNGwSEL+tq1yk8vK L1rzUVD8GFgEx50GXPCTFkOFeNyj+RxtnB5aZAeGCAt/5eWqSumWeXlXfTkDGP9l 2mZF6drWkPqs+/YpdYOGdCLyj1TXeQZ0 -----END CERTIFICATE-----Generated at Fri Feb 27 12:41:18 2026 by rpki-client