$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: iVnbsISO4VruWHDrNMVkHoDPcRwcS9vjXUvDS6nD8pk= Subject key identifier: D3:52:BE:FF:90:D9:C1:58:F0:2E:0B:61:F4:99:C9:8D:BE:8B:2D:06 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584CAE5712AFD47B1D09D2F72500 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:12:af:d4:7b:1d:09:d2:f7:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2783f07a-f8fa-441e-9246-c505ecf22b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:1b:4f:cf:ef:80:62:ae:6c:57:8d:03:71: bf:46:5e:09:fe:fa:2f:86:4a:01:ed:bc:ba:45:17: 27:d8:9c:61:b8:4a:f4:1f:56:6e:49:88:c7:c7:14: 92:fc:0c:25:8f:0e:91:b1:30:26:38:b4:57:ff:0e: ef:28:28:f1:3f:b4:4a:ad:0a:e8:4b:1e:20:6b:7a: f8:8e:77:c7:c9:2c:12:fb:dc:60:79:bb:3c:be:0b: 5a:09:7f:87:85:49:b3:b6:a2:77:25:de:40:f1:ef: 9f:49:87:6b:ad:af:e3:0d:03:d2:67:3d:27:c6:7d: c8:de:bf:f9:7f:0d:40:de:6d:b0:fb:5a:df:f1:41: 89:ec:ca:e5:13:13:84:b9:8a:97:ae:c6:ce:29:28: c9:6d:03:b3:37:52:08:56:f4:8e:a2:5d:01:93:a2: cd:1b:77:14:4c:ef:90:bc:11:ec:62:d4:aa:00:3f: a0:f3:e9:01:5a:27:8a:2c:c5:82:a6:fa:b2:d6:1a: c1:41:3b:1b:59:08:6e:31:14:d8:84:ef:d3:11:54: 27:36:75:a2:cf:89:33:16:ee:b2:c8:49:68:a5:91: ed:0d:be:69:e4:f9:fa:98:39:93:dd:b0:b5:51:af: 3f:9f:2b:ce:37:95:f3:a2:dc:59:17:79:18:a6:b5: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:BE:FF:90:D9:C1:58:F0:2E:0B:61:F4:99:C9:8D:BE:8B:2D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:93:69:5f:f6:76:5a:da:0e:72:d2:91:a3:14:5a:df:3c: 2c:40:1e:79:df:0a:f9:c2:6b:1e:f2:d2:a7:fb:09:9b:7b:c6: 55:5f:35:9f:9a:e8:2b:54:f6:23:8e:86:39:a8:20:cc:79:06: 49:6a:93:7e:e5:46:9d:58:82:e7:7c:ce:ac:bc:2d:4c:2e:a5: f4:cf:f2:71:20:a7:69:90:99:a4:c1:11:d2:1d:cb:79:0b:f8: ea:04:c9:fe:ac:ef:0f:3e:8c:fa:e8:f2:ef:4f:21:0d:da:7b: 8b:6e:85:5a:bd:09:b6:03:88:6e:58:2c:d6:20:59:c4:ba:c7: b8:62:35:fa:bc:9d:20:47:94:ca:6a:db:34:c9:14:92:7f:39: 28:63:ba:94:0e:06:1b:be:af:81:01:1b:76:c4:22:b0:a6:d2: 32:51:55:7b:ac:83:f6:e4:25:2f:7a:bb:0d:ae:c4:39:9e:ef: f1:13:4b:51:be:d9:08:f2:92:94:19:8f:95:1b:f7:c8:56:15: d4:ec:09:ba:7c:02:22:42:71:42:43:ef:b2:ad:c6:f1:9e:8b: 79:05:2d:14:88:b1:48:d9:6d:57:28:b5:bf:7a:78:87:48:60: 6b:b9:dd:10:41:28:89:33:b5:28:49:d8:ae:23:a1:96:fa:aa: 6c:82:94:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuVxKv1HsdCdL3JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Mjc4M2YwN2EtZjhmYS00NDFlLTkyNDYtYzUwNWVjZjIyYjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7YbT8/vgGKubFeNA3G/Rl4J/vovhkoB7by6 RRcn2JxhuEr0H1ZuSYjHxxSS/Awljw6RsTAmOLRX/w7vKCjxP7RKrQroSx4ga3r4 jnfHySwS+9xgebs8vgtaCX+HhUmztqJ3Jd5A8e+fSYdrra/jDQPSZz0nxn3I3r/5 fw1A3m2w+1rf8UGJ7MrlExOEuYqXrsbOKSjJbQOzN1IIVvSOol0Bk6LNG3cUTO+Q vBHsYtSqAD+g8+kBWieKLMWCpvqy1hrBQTsbWQhuMRTYhO/TEVQnNnWiz4kzFu6y yElopZHtDb5p5Pn6mDmT3bC1Ua8/nyvON5XzotxZF3kYprVqVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNSvv+Q2cFY8C4LYfSZyY2+iy0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYXk2lf9nZa2g5y0pGjFFrfPCxAHnnfCvnCax7y0qf7CZt7xlVf NZ+a6CtU9iOOhjmoIMx5Bklqk37lRp1Ygud8zqy8LUwupfTP8nEgp2mQmaTBEdId y3kL+OoEyf6s7w8+jPro8u9PIQ3ae4tuhVq9CbYDiG5YLNYgWcS6x7hiNfq8nSBH lMpq2zTJFJJ/OShjupQOBhu+r4EBG3bEIrCm0jJRVXusg/bkJS96uw2uxDme7/ET S1G+2QjykpQZj5Ub98hWFdTsCbp8AiJCcUJD77KtxvGei3kFLRSIsUjZbVcotb96 eIdIYGu53RBBKIkztShJ2K4joZb6qmyClLk= -----END CERTIFICATE-----Generated at Thu Feb 26 12:01:18 2026 by rpki-client