$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa File: 0cca8601-9088-3d08-8999-e00a75425820.roa (raw, json) Hash identifier: 27jGhjZWhWDcld3T/m6OatoIeuE0dEOvnnAXFhHnwsU= Subject key identifier: 1A:1D:02:5B:9D:13:D5:44:12:10:88:B3:0F:F3:3A:52:EC:2C:79:02 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CA5F72FA7985B1A2B6FCF9C20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 400341 IP address blocks: 2001:470:238::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:2f:a7:98:5b:1a:2b:6f:cf:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=65b76a06-daa0-4bf9-bab6-c5734cdbd63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:75:ad:fa:8d:56:a1:4e:f5:91:6d:13:18: 30:43:ef:18:0d:ae:2d:d2:44:9a:9b:fb:98:31:82: 38:7e:09:fd:a8:1e:c0:f2:01:94:a7:21:7b:38:88: ef:05:c1:10:02:62:d5:0a:0c:5a:22:75:e5:9a:01: f8:49:b9:f5:ce:12:f3:df:95:df:0c:72:46:82:2a: 1d:20:2d:ac:10:d7:fc:5a:6f:0f:fa:a8:21:15:3e: 01:f9:63:dd:b3:82:df:39:32:71:b8:7c:4b:91:c2: 2f:2a:a8:12:4a:26:26:30:2d:1d:a4:62:66:4c:e3: dd:af:b5:f1:e2:d4:a9:91:58:f3:a8:dd:50:50:d0: 35:20:06:ae:a9:73:0e:70:55:90:23:0d:07:d5:1e: 53:07:8a:6b:90:6b:27:5e:5f:a0:46:37:38:88:64: 5f:53:a5:db:d3:72:6e:2d:70:37:01:31:bf:f0:56: 15:81:f4:b0:04:2a:db:48:59:af:e3:75:0d:da:e3: 1e:b2:06:ac:0e:2d:1f:f3:0e:90:58:10:26:80:37: 1a:ae:1e:0d:0b:a0:09:30:da:40:3b:f4:a0:31:5c: 3f:0f:4c:8b:6d:fa:9f:cd:f2:50:26:0e:42:6d:31: 92:6c:2a:a5:08:6b:c5:fb:d0:97:c4:b6:3e:99:7c: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1D:02:5B:9D:13:D5:44:12:10:88:B3:0F:F3:3A:52:EC:2C:79:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0cca8601-9088-3d08-8999-e00a75425820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:238::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:02:bb:89:3f:ce:3e:55:2b:36:91:8e:cf:aa:6a:2c:0e:f7: 9f:8e:e9:87:f3:d7:bf:2b:aa:71:a0:4c:04:d6:2e:15:2a:2e: b6:37:29:4b:00:d8:29:8b:28:8b:16:11:73:b6:13:c1:12:d3: 87:b3:b5:67:c7:2f:c1:96:37:60:4b:e7:30:94:43:43:3a:93: e6:c1:10:c7:d9:89:9e:8a:09:c3:14:b5:54:28:65:a0:fd:4e: c0:7c:ea:88:45:16:f6:fe:d1:f4:25:d4:51:89:67:76:01:21: ff:fe:64:eb:51:97:0f:6f:8f:36:63:3c:7d:e8:2f:98:1e:24: 6a:af:ee:22:0b:68:88:5e:4b:5c:27:d2:f3:96:50:be:5e:8a: a4:0e:7f:cd:37:83:c6:17:db:7b:d6:37:49:a5:cc:5f:80:b3: 0b:31:a3:f6:71:f7:86:8a:18:38:c6:57:a6:ea:38:40:c3:c2: 70:21:cd:95:62:93:61:c4:b8:f8:47:af:38:38:bf:8f:2f:61: c7:4b:cc:71:ab:a3:7e:f8:fb:2d:67:69:98:a2:dc:85:5c:a1: 8d:ab:e1:c8:c9:d4:ce:f7:ea:09:5e:41:d3:6b:3c:8c:43:f5: bc:a8:18:62:22:d1:92:63:e8:a5:6d:95:33:5e:3a:a8:83:95: 4c:cf:7a:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyl9y+nmFsaK2/PnCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NjViNzZhMDYtZGFhMC00YmY5LWJhYjYtYzU3MzRjZGJkNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy11rfqNVqFO9ZFtExgwQ+8YDa4t0kSam/uY MYI4fgn9qB7A8gGUpyF7OIjvBcEQAmLVCgxaInXlmgH4Sbn1zhLz35XfDHJGgiod IC2sENf8Wm8P+qghFT4B+WPds4LfOTJxuHxLkcIvKqgSSiYmMC0dpGJmTOPdr7Xx 4tSpkVjzqN1QUNA1IAauqXMOcFWQIw0H1R5TB4prkGsnXl+gRjc4iGRfU6Xb03Ju LXA3ATG/8FYVgfSwBCrbSFmv43UN2uMesgasDi0f8w6QWBAmgDcarh4NC6AJMNpA O/SgMVw/D0yLbfqfzfJQJg5CbTGSbCqlCGvF+9CXxLY+mXyevQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBodAludE9VEEhCIsw/zOlLsLHkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGNjYTg2MDEtOTA4OC0z ZDA4LTg5OTktZTAwYTc1NDI1ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQCu4k/zj5VKzaRjs+qaiwO95+O6Yfz178rqnGgTATWLhUqLrY3 KUsA2CmLKIsWEXO2E8ES04eztWfHL8GWN2BL5zCUQ0M6k+bBEMfZiZ6KCcMUtVQo ZaD9TsB86ohFFvb+0fQl1FGJZ3YBIf/+ZOtRlw9vjzZjPH3oL5geJGqv7iILaIhe S1wn0vOWUL5eiqQOf803g8YX23vWN0mlzF+Aswsxo/Zx94aKGDjGV6bqOEDDwnAh zZVik2HEuPhHrzg4v48vYcdLzHGro374+y1naZii3IVcoY2r4cjJ1M736gleQdNr PIxD9byoGGIi0ZJj6KVtlTNeOqiDlUzPemI= -----END CERTIFICATE-----Generated at Thu Feb 19 17:54:38 2026 by rpki-client