$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa File: 2178ac25-e308-3810-99cc-10f24135d13d.roa (raw, json) Hash identifier: Ek5iaeRNHLRiEVLs4jg5oARiEekbjOCnzcU3N/+5RUI= Subject key identifier: 68:C2:79:7A:4D:0D:19:9A:91:47:82:D2:1E:1F:D9:13:E5:DF:45:10 Certificate issuer: /CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Certificate serial: 010D0C9F4328584CAA2706E91F3DC7695686B680 Authority key identifier: 3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16970 IP address blocks: 2602:800:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:06:e9:1f:3d:c7:69:56:86:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=231dd8a5-405a-4f80-8e30-38a99fa0f6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:b1:e0:a0:43:c5:76:11:88:1b:83:86:a0: 39:cd:94:3a:ab:4b:12:8b:69:6d:e0:37:0f:be:80: 75:0c:8e:ab:38:8d:40:71:93:99:4f:60:40:34:2c: 00:d5:5a:16:0f:d2:6d:77:f5:47:d6:1b:77:01:9b: 3e:49:ce:0c:d8:a1:68:47:4d:28:cd:20:e3:70:4d: b7:27:5f:b3:ed:13:0b:53:7f:66:b2:29:da:8b:82: 5d:e8:96:b4:55:2d:38:17:b7:87:56:c7:2d:76:00: 68:36:91:e4:54:20:78:a0:26:4d:a8:71:16:3a:24: 00:ec:a2:ba:96:13:39:f1:cf:7d:54:d2:13:37:8e: ca:8b:17:d7:f9:bb:53:70:42:06:50:d3:e9:44:62: a7:a4:85:de:2d:95:0f:7b:f3:73:f8:20:54:18:b1: 7b:81:a4:e6:38:76:49:e6:be:3a:19:3d:cf:3f:03: 6f:65:0a:19:6a:e2:89:e5:25:85:e9:8b:c4:12:b2: 7c:4a:71:ac:43:25:6d:3e:f5:8d:7e:72:eb:dd:a2: d4:82:58:a2:ff:43:54:24:52:cb:bd:a8:13:07:93: 40:ee:63:9c:45:5a:fa:c0:bc:eb:af:d9:be:7d:0b: 33:4f:4a:df:ca:91:85:56:ba:32:5a:b8:50:a8:6d: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:79:7A:4D:0D:19:9A:91:47:82:D2:1E:1F:D9:13:E5:DF:45:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/2178ac25-e308-3810-99cc-10f24135d13d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.crl X509v3 Authority Key Identifier: keyid:3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer sbgp-ipAddrBlock: critical IPv6: 2602:800:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b0:17:77:97:fb:2e:12:95:45:cb:fc:66:7d:72:07:40:17: 95:12:4d:63:cd:b3:93:0d:f5:e9:5b:66:a3:c5:49:dd:18:b0: b7:c3:7d:10:e5:a3:a3:2e:4a:65:e6:46:a7:92:bd:42:5f:07: 0d:13:b0:62:38:2e:20:e2:21:3f:79:ff:1e:74:a8:7d:2e:ea: 07:8d:2e:86:9c:bd:3e:03:35:32:e6:dd:02:2d:16:41:e0:a2: 9a:21:73:49:be:8a:62:6e:c1:a5:7d:6f:49:fe:9b:22:97:2d: ac:48:b4:8d:2d:d7:86:d1:99:19:e0:89:fe:5c:bc:ee:41:d9: 73:82:06:70:24:65:5a:fe:87:96:30:1a:8f:17:bc:b4:71:fe: db:3c:28:64:79:a7:97:c5:04:d4:4f:d2:d4:0e:0d:fa:49:f5: 5d:23:ef:ce:65:42:72:19:7d:6a:51:9b:d0:ab:12:6d:5c:b7: c7:dd:0f:fc:11:8e:c4:93:84:b2:c1:50:6a:46:cb:14:6b:5a: d3:6c:19:b5:c9:3b:7b:ff:5d:72:54:d1:be:2c:37:86:2b:60: 9a:34:80:48:d1:35:dc:57:65:2a:4a:13:44:f9:6c:f7:27:50: a2:f0:de:44:66:bb:07:6f:63:f9:84:72:c2:c6:87:74:cd:f7: cd:db:8d:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyqJwbpHz3HaVaGtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY2YTYxMjEtNzc4NC00Y2U0LWFmMzQtMGU1NjUzMGNl M2MxMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MjMxZGQ4YTUtNDA1YS00ZjgwLThlMzAtMzhhOTlmYTBmNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihGx4KBDxXYRiBuDhqA5zZQ6q0sSi2lt4DcP voB1DI6rOI1AcZOZT2BANCwA1VoWD9Jtd/VH1ht3AZs+Sc4M2KFoR00ozSDjcE23 J1+z7RMLU39msinai4Jd6Ja0VS04F7eHVsctdgBoNpHkVCB4oCZNqHEWOiQA7KK6 lhM58c99VNITN47KixfX+btTcEIGUNPpRGKnpIXeLZUPe/Nz+CBUGLF7gaTmOHZJ 5r46GT3PPwNvZQoZauKJ5SWF6YvEErJ8SnGsQyVtPvWNfnLr3aLUglii/0NUJFLL vagTB5NA7mOcRVr6wLzrr9m+fQszT0rfypGFVroyWrhQqG1pjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGjCeXpNDRmakUeC0h4f2RPl30UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZh NjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2NTMwY2UzYzEvMjE3OGFjMjUtZTMwOC0z ODEwLTk5Y2MtMTBmMjQxMzVkMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY2YTYxMjEtNzc4NC00Y2U0LWFm MzQtMGU1NjUzMGNlM2MxL2U2NmE2MTIxLTc3ODQtNGNlNC1hZjM0LTBlNTY1MzBj ZTNjMS5jcmwwHwYDVR0jBBgwFoAUOi/POciCCweDJWU6WhBWA3QH/+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjZhNjEyMS03Nzg0LTRjZTQtYWYzNC0wZTU2 NTMwY2UzYzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIABAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGawF3eX+y4SlUXL/GZ9cgdAF5USTWPNs5MN9elbZqPFSd0YsLfD fRDlo6MuSmXmRqeSvUJfBw0TsGI4LiDiIT95/x50qH0u6geNLoacvT4DNTLm3QIt FkHgopohc0m+imJuwaV9b0n+myKXLaxItI0t14bRmRngif5cvO5B2XOCBnAkZVr+ h5YwGo8XvLRx/ts8KGR5p5fFBNRP0tQODfpJ9V0j785lQnIZfWpRm9CrEm1ct8fd D/wRjsSThLLBUGpGyxRrWtNsGbXJO3v/XXJU0b4sN4YrYJo0gEjRNdxXZSpKE0T5 bPcnUKLw3kRmuwdvY/mEcsLGh3TN983bjQ4= -----END CERTIFICATE-----Generated at Thu Feb 26 21:40:26 2026 by rpki-client