$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa File: 0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa (raw, json) Hash identifier: fIM7XpLfnFo013e1UQOd5i8wmm++ouPNH+MaG0WDESM= Subject key identifier: 25:E6:72:EF:21:52:31:A3:6A:EE:3F:BC:03:81:CB:02:BE:15:93:3C Certificate issuer: /CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1 Certificate serial: 010D0C9F4328584CAB8C642795DDB904DA2C3980 Authority key identifier: E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 8075 IP address blocks: 2602:f4d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:64:27:95:dd:b9:04:da:2c:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c503e4cc-4b3e-4fed-a3d9-8586590e8da1 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=0b8011f1-9e98-4053-afdf-fb22d9c06bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:96:df:a0:24:67:af:67:4d:c7:d5:5b:03: 07:4c:c0:0f:b0:37:1c:1b:2e:69:6b:5c:20:82:93: 2a:a8:fe:80:74:c7:da:cc:07:a8:7c:fa:94:c7:0a: 3c:e7:08:bb:62:97:ed:75:fe:0d:bf:ce:cb:a2:21: 64:fd:50:ce:57:05:6b:fc:e3:04:9e:6d:75:05:7f: 3d:c1:91:cb:63:31:ae:bb:02:85:f4:82:7f:8e:6a: 2c:ca:44:f7:e8:5e:c3:09:8f:0f:88:ff:dc:0c:12: 1b:4a:20:9c:e0:f6:f1:42:be:79:08:39:9f:c5:94: e1:09:e7:42:16:88:5c:bd:de:e9:ac:d0:13:87:60: d1:c4:0e:ea:46:cd:42:6c:e2:e9:e5:14:e2:45:cd: 2d:8a:33:57:8c:f9:22:92:62:a0:79:2a:0f:57:2a: 1b:9d:b3:06:a6:16:bb:89:d8:8c:99:a6:8a:4e:d1: df:90:c6:c0:2d:1b:51:45:ea:2e:71:fd:1a:bc:12: 05:0f:94:ec:56:a6:74:65:29:55:b4:2f:df:bf:5f: ef:b1:e6:ae:01:eb:8f:63:cd:67:d4:38:da:c7:01: 8f:60:77:f9:57:51:29:63:56:a6:37:0b:d0:11:60: 50:2a:87:9a:89:ec:16:1d:9a:e2:e1:25:f4:a7:d7: 93:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E6:72:EF:21:52:31:A3:6A:EE:3F:BC:03:81:CB:02:BE:15:93:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/0a56af58-d0db-3bbd-afbf-e1e187b9c80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.crl X509v3 Authority Key Identifier: keyid:E4:97:69:0D:53:01:0F:3A:E0:7C:23:21:CD:86:14:B4:31:15:F3:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c503e4cc-4b3e-4fed-a3d9-8586590e8da1.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:31:37:5f:e2:f7:26:24:87:83:41:3a:26:d8:8f:e5:6b:2f: 30:b5:f9:7b:bd:d4:fe:c8:5f:1f:f2:9f:59:e7:fd:04:0f:45: 3e:89:24:95:1c:7b:7b:72:92:7a:a0:70:72:be:b5:13:a1:ac: d9:cb:28:40:c6:2e:87:33:79:5d:28:9b:d4:c9:44:9c:31:ad: 93:63:3e:29:49:bd:ee:08:22:38:10:ce:99:93:50:74:f0:45: 9f:5d:7a:58:75:16:81:c4:ca:04:2f:bb:61:0f:ef:2a:a9:72: d4:6d:e6:f0:21:1d:7f:91:b4:25:0e:5b:cc:88:1c:3e:cc:db: e3:fb:8e:83:6f:c0:3e:ab:c1:1a:e0:69:44:c7:0c:87:29:5c: 26:ca:24:e3:3a:60:5c:e5:11:ef:b7:eb:aa:9a:4e:11:e8:cf: a5:42:7b:f6:27:bc:b2:8f:9a:c1:d3:79:e6:ab:9c:66:a0:c9: f4:5a:73:cb:53:56:ae:e5:af:52:66:f8:47:e0:68:b3:40:7f: 8e:93:d3:09:f8:a5:41:b1:2a:a7:b6:df:1e:e4:c7:2b:ba:6c: 74:3b:a9:da:8b:8f:7b:99:73:c2:81:4a:e1:12:f4:89:18:a5: e2:cb:67:a4:33:d9:0b:c0:af:fb:1b:5e:58:1c:98:6d:74:ac: 2e:95:2b:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyrjGQnld25BNosOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUwM2U0Y2MtNGIzZS00ZmVkLWEzZDktODU4NjU5MGU4 ZGExMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk MGI4MDExZjEtOWU5OC00MDUzLWFmZGYtZmIyMmQ5YzA2YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqW36AkZ69nTcfVWwMHTMAPsDccGy5pa1wg gpMqqP6AdMfazAeofPqUxwo85wi7Ypftdf4Nv87LoiFk/VDOVwVr/OMEnm11BX89 wZHLYzGuuwKF9IJ/jmosykT36F7DCY8PiP/cDBIbSiCc4PbxQr55CDmfxZThCedC Fohcvd7prNATh2DRxA7qRs1CbOLp5RTiRc0tijNXjPkikmKgeSoPVyobnbMGpha7 idiMmaaKTtHfkMbALRtRReoucf0avBIFD5TsVqZ0ZSlVtC/fv1/vseauAeuPY81n 1DjaxwGPYHf5V1EpY1amNwvQEWBQKoeaiewWHZri4SX0p9eTbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXmcu8hUjGjau4/vAOBywK+FZM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNTAz ZTRjYy00YjNlLTRmZWQtYTNkOS04NTg2NTkwZThkYTEvMGE1NmFmNTgtZDBkYi0z YmJkLWFmYmYtZTFlMTg3YjljODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzUwM2U0Y2MtNGIzZS00ZmVkLWEz ZDktODU4NjU5MGU4ZGExL2M1MDNlNGNjLTRiM2UtNGZlZC1hM2Q5LTg1ODY1OTBl OGRhMS5jcmwwHwYDVR0jBBgwFoAU5JdpDVMBDzrgfCMhzYYUtDEV88AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNTAzZTRjYy00YjNlLTRmZWQtYTNkOS04NTg2 NTkwZThkYTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL02AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4xN1/i9yYkh4NBOibYj+VrLzC1+Xu91P7IXx/yn1nn/QQPRT6J JJUce3tyknqgcHK+tROhrNnLKEDGLoczeV0om9TJRJwxrZNjPilJve4IIjgQzpmT UHTwRZ9delh1FoHEygQvu2EP7yqpctRt5vAhHX+RtCUOW8yIHD7M2+P7joNvwD6r wRrgaUTHDIcpXCbKJOM6YFzlEe+366qaThHoz6VCe/YnvLKPmsHTeearnGagyfRa c8tTVq7lr1Jm+EfgaLNAf46T0wn4pUGxKqe23x7kxyu6bHQ7qdqLj3uZc8KBSuES 9IkYpeLLZ6Qz2QvAr/sbXlgcmG10rC6VKxM= -----END CERTIFICATE-----Generated at Thu Feb 26 22:50:51 2026 by rpki-client