$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/f2deae5c-8560-35f7-9470-4120110cc956.roa File: f2deae5c-8560-35f7-9470-4120110cc956.roa (raw, json) Hash identifier: xkqyNrnZmVxQNS8dEinr5k/xajbYbD0bO+kENRxUbVk= Subject key identifier: A3:8F:12:B8:C0:4D:92:7F:D4:44:13:81:10:DA:57:B5:0F:88:AE:64 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584CC4AC7678A8E1B0650DFFD040 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/f2deae5c-8560-35f7-9470-4120110cc956.roa Signing time: Fri 06 Feb 2026 02:00:30 +0000 ROA not before: Fri 06 Feb 2026 02:00:30 +0000 ROA not after: Thu 07 May 2026 01:00:30 +0000 asID: 4922 IP address blocks: 2606:f800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c4:ac:76:78:a8:e1:b0:65:0d:ff:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Feb 6 02:00:30 2026 GMT Not After : May 7 01:00:30 2026 GMT Subject: CN=acbaa6f2-8463-4eb7-82dc-56e730ec549b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:ab:64:ef:cc:89:de:22:51:f5:2b:3c:27: b1:eb:02:46:a6:f4:d6:2c:6d:ad:bd:b5:5f:3b:6e: 01:5e:0c:73:c2:b3:38:44:07:c2:26:9e:4b:c4:e9: 0c:71:a9:6e:a9:89:ec:42:c9:9c:38:3b:2c:32:a1: 87:f4:5e:1a:1c:53:73:79:8c:f2:f2:0c:71:97:c9: dd:32:61:55:6d:64:91:73:5e:26:1a:ce:ed:b9:34: 50:18:2d:b2:40:06:be:a3:3b:3e:63:54:1d:e0:29: e1:fc:5c:42:56:14:25:a7:a1:8d:0c:ee:33:d4:2e: e3:32:86:c8:a3:4f:28:bf:45:65:fb:a9:e0:de:2a: a5:b3:f4:44:e0:d4:46:06:28:d3:3a:d3:da:53:f7: 52:6e:c4:67:de:f7:30:72:e8:9e:0e:fe:79:f1:2a: ac:09:50:55:40:18:1a:73:1a:d3:09:e7:fc:8f:5b: 94:3e:b7:ba:e9:62:c6:cb:22:d0:9f:2d:67:67:77: 8c:de:52:95:5b:52:09:60:6f:03:76:37:f3:3a:7b: 4b:f5:70:cb:8d:0a:63:86:22:d5:84:ce:ac:c8:83: 04:d1:39:e7:65:ba:e6:82:84:2a:a9:f4:71:a3:70: db:6e:90:67:45:f9:cd:34:dd:3e:ab:9e:7d:ee:bb: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:12:B8:C0:4D:92:7F:D4:44:13:81:10:DA:57:B5:0F:88:AE:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/f2deae5c-8560-35f7-9470-4120110cc956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv6: 2606:f800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b4:e0:0b:52:ae:c4:ed:ae:81:01:e6:bc:1d:75:2e:73:49: b8:e1:a2:36:50:7f:82:2a:6b:42:6d:e4:9f:b3:5d:54:ca:e3: 17:86:c4:8f:f7:01:ef:20:65:cf:15:5b:a4:a2:19:62:80:a3: b7:5d:fc:6a:50:a8:9e:2c:c0:3c:e7:01:8c:ad:a9:ea:33:2b: 57:f1:e8:06:8c:d3:e3:ac:0b:0e:88:7b:f4:ca:5d:7d:e0:a8: d8:20:51:13:73:85:24:c2:a6:40:a5:79:c1:df:4e:89:a8:84: 43:54:da:3c:54:17:3a:fe:f6:dd:35:47:1d:75:15:5b:c3:b1: 14:d6:1f:08:51:20:3c:f1:b0:95:38:d1:25:c3:d2:eb:8b:bf: 84:26:37:cf:f4:35:5b:c3:32:43:ac:40:c9:5a:eb:7e:0c:9c: 15:9f:41:a3:f1:f7:65:bb:a6:98:79:29:ca:14:1f:18:ab:b9: 20:2d:c1:72:ba:63:b3:5c:d0:d5:f8:bd:9c:f8:9d:4a:41:ac: 1f:90:29:1c:d8:ad:c0:b5:c3:ad:fd:25:cb:16:a1:e5:98:eb: 41:e5:9e:a9:0c:25:8f:73:41:bc:53:10:31:59:bf:d5:3c:24: 98:81:3d:d6:fb:1b:93:2d:2f:f7:3e:8d:5f:2f:9f:c2:5e:fc: 06:94:d2:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzErHZ4qOGwZQ3/0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI2MDIwNjAyMDAzMFoXDTI2MDUwNzAxMDAzMFowLzEtMCsGA1UEAxMk YWNiYWE2ZjItODQ2My00ZWI3LTgyZGMtNTZlNzMwZWM1NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1yrZO/Mid4iUfUrPCex6wJGpvTWLG2tvbVf O24BXgxzwrM4RAfCJp5LxOkMcaluqYnsQsmcODssMqGH9F4aHFNzeYzy8gxxl8nd MmFVbWSRc14mGs7tuTRQGC2yQAa+ozs+Y1Qd4Cnh/FxCVhQlp6GNDO4z1C7jMobI o08ov0Vl+6ng3iqls/RE4NRGBijTOtPaU/dSbsRn3vcwcuieDv558SqsCVBVQBga cxrTCef8j1uUPre66WLGyyLQny1nZ3eM3lKVW1IJYG8DdjfzOntL9XDLjQpjhiLV hM6syIME0TnnZbrmgoQqqfRxo3DbbpBnRfnNNN0+q5597rulKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKOPErjATZJ/1EQTgRDaV7UPiK5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvZjJkZWFlNWMtODU2MC0z NWY3LTk0NzAtNDEyMDExMGNjOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb4ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQButOALUq7E7a6BAea8HXUuc0m44aI2UH+CKmtCbeSfs11UyuMXhsSP 9wHvIGXPFVukohligKO3XfxqUKieLMA85wGMranqMytX8egGjNPjrAsOiHv0yl19 4KjYIFETc4UkwqZApXnB306JqIRDVNo8VBc6/vbdNUcddRVbw7EU1h8IUSA88bCV ONElw9Lri7+EJjfP9DVbwzJDrEDJWut+DJwVn0Gj8fdlu6aYeSnKFB8Yq7kgLcFy umOzXNDV+L2c+J1KQawfkCkc2K3AtcOt/SXLFqHlmOtB5Z6pDCWPc0G8UxAxWb/V PCSYgT3W+xuTLS/3Po1fL5/CXvwGlNLY -----END CERTIFICATE-----Generated at Thu Feb 26 22:54:11 2026 by rpki-client