$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa File: be920d72-c3a3-399e-9752-c3f9116ce1d7.roa (raw, json) Hash identifier: CPRfsqCH6rgeRREsEuRLgMueRURml8ASF1oJ5n34PU8= Subject key identifier: D7:F2:00:DB:79:BA:77:05:33:FD:8A:01:E5:0C:AB:BB:FE:BD:9F:76 Certificate issuer: /CN=0e307b23-6715-4f4e-8e81-99854b623d2d Certificate serial: 010D0C9F4328584CB551F20CFE0233B849981400 Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 397668 IP address blocks: 2602:f9dd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f2:0c:fe:02:33:b8:49:98:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=2e66493d-2b26-41d9-a3c7-f582e67c019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:05:da:24:0a:92:7c:6c:31:48:43:95:cd:92: 39:80:31:ef:a4:17:6e:b3:94:ae:33:dd:44:4f:29: ba:e2:66:5c:98:75:01:28:4d:64:d3:bc:5a:32:5e: d9:30:62:55:8e:cd:1e:95:fa:a0:32:32:6f:c0:f2: 74:75:47:6a:9d:73:7a:88:c2:a1:00:6d:a1:44:a5: 86:5e:96:76:8f:89:bb:53:d7:97:70:db:59:eb:12: c8:8f:35:ea:51:cd:f6:51:b2:a7:0e:4d:d3:ff:73: 60:6a:be:87:08:e7:74:74:00:0f:6a:d6:48:be:6d: 9a:a8:a0:c6:cc:8e:6e:87:d1:f5:da:f3:4c:1a:4c: a1:3f:4a:b3:34:53:5d:c1:e4:6e:ca:8b:f0:28:99: 05:62:af:87:5e:ba:0d:0a:9b:19:d2:47:9d:a9:9f: 39:4a:88:7d:6d:41:78:ed:f7:83:89:13:07:08:b7: e0:70:50:be:da:a4:6c:6b:8c:b8:e1:c2:90:5c:3e: 61:a1:82:1b:37:25:f7:3a:76:1b:54:f9:c4:2c:7e: 55:ac:d6:70:1e:27:87:4f:da:84:40:4b:f3:fa:68: 1e:56:41:b2:de:8c:ff:69:4e:ed:0d:af:d3:73:23: ee:66:24:e8:ee:69:2b:e0:da:d8:7b:0e:f4:d5:9f: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F2:00:DB:79:BA:77:05:33:FD:8A:01:E5:0C:AB:BB:FE:BD:9F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/be920d72-c3a3-399e-9752-c3f9116ce1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl X509v3 Authority Key Identifier: keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9dd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:49:06:dd:12:25:f1:2c:1a:9a:cb:58:ff:50:2c:a6:36:64: 2e:c0:79:ea:a5:87:60:66:c0:0b:68:2b:29:56:36:86:64:d7: 6a:2b:5e:46:9c:f6:a3:86:1d:74:d8:fb:0a:f4:13:0e:f4:b4: 59:a0:a2:ee:77:0a:60:da:1b:7b:a6:4f:62:89:fa:a1:7f:bb: 98:20:f1:cc:59:c3:dd:9d:26:a2:d1:7c:65:dc:18:d5:b1:44: 6c:5c:ca:3c:6a:91:24:ba:29:db:3b:d9:06:6b:52:67:e6:48: eb:39:d1:df:73:43:1e:3d:fc:31:f5:1a:f6:b6:6a:e3:0e:1c: 3f:f3:34:84:11:0b:ee:52:70:36:96:b5:cf:1b:69:28:62:f2: d0:56:92:aa:a3:6f:24:b7:30:1a:80:5f:f5:59:b6:01:68:8e: d3:9f:b0:8d:f6:ed:52:4c:80:69:be:32:fd:2b:67:f9:1d:a0: 49:91:ac:33:b2:ca:82:73:76:3d:23:24:cb:16:a9:c3:f2:23: b6:b7:36:ac:ec:5c:ad:fd:16:5c:d8:5a:f7:74:e2:4e:98:94: d1:8d:72:18:84:0d:0e:bf:c2:e1:5e:9b:8d:b4:6f:24:07:f0: 6a:61:cb:fc:c5:27:94:fd:f9:48:cf:42:1a:74:46:2c:43:1a: 38:37:bd:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy1UfIM/gIzuEmYFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUzMDdiMjMtNjcxNS00ZjRlLThlODEtOTk4NTRiNjIz ZDJkMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MmU2NjQ5M2QtMmIyNi00MWQ5LWEzYzctZjU4MmU2N2MwMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AXaJAqSfGwxSEOVzZI5gDHvpBdus5SuM91E Tym64mZcmHUBKE1k07xaMl7ZMGJVjs0elfqgMjJvwPJ0dUdqnXN6iMKhAG2hRKWG XpZ2j4m7U9eXcNtZ6xLIjzXqUc32UbKnDk3T/3Ngar6HCOd0dAAPatZIvm2aqKDG zI5uh9H12vNMGkyhP0qzNFNdweRuyovwKJkFYq+HXroNCpsZ0kedqZ85Soh9bUF4 7feDiRMHCLfgcFC+2qRsa4y44cKQXD5hoYIbNyX3OnYbVPnELH5VrNZwHieHT9qE QEvz+mgeVkGy3oz/aU7tDa/TcyPuZiTo7mkr4NrYew701Z8+TwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNfyANt5uncFM/2KAeUMq7v+vZ92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMw N2IyMy02NzE1LTRmNGUtOGU4MS05OTg1NGI2MjNkMmQvYmU5MjBkNzItYzNhMy0z OTllLTk3NTItYzNmOTExNmNlMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUzMDdiMjMtNjcxNS00ZjRlLThl ODEtOTk4NTRiNjIzZDJkLzBlMzA3YjIzLTY3MTUtNGY0ZS04ZTgxLTk5ODU0YjYy M2QyZC5jcmwwHwYDVR0jBBgwFoAUWDT9SHGgd1gTWpDffWNpbGBkXc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTMwN2IyMy02NzE1LTRmNGUtOGU4MS05OTg1 NGI2MjNkMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAF0kG3RIl8SwamstY/1AspjZkLsB56qWHYGbAC2grKVY2hmTXaite Rpz2o4YddNj7CvQTDvS0WaCi7ncKYNobe6ZPYon6oX+7mCDxzFnD3Z0motF8ZdwY 1bFEbFzKPGqRJLop2zvZBmtSZ+ZI6znR33NDHj38MfUa9rZq4w4cP/M0hBEL7lJw Npa1zxtpKGLy0FaSqqNvJLcwGoBf9Vm2AWiO05+wjfbtUkyAab4y/Stn+R2gSZGs M7LKgnN2PSMkyxapw/Ijtrc2rOxcrf0WXNha93TiTpiU0Y1yGIQNDr/C4V6bjbRv JAfwamHL/MUnlP35SM9CGnRGLEMaODe9jA== -----END CERTIFICATE-----Generated at Sat Feb 21 08:47:05 2026 by rpki-client