$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa File: efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa (raw, json) Hash identifier: T/aQX5238zA3hlKRdgU8f36Xi751REDazzNvz8QjhpQ= Subject key identifier: 47:19:C4:36:6C:55:AF:71:76:A4:77:62:1B:D7:D3:82:90:CB:B5:7C Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584D59EA56476DC978404C99D180 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 2602:808:4001::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:56:47:6d:c9:78:40:4c:99:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c52e241e-58bf-4e14-a870-70dd7a36e76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7c:f0:5b:ea:2e:f0:97:2d:96:b3:be:ee:f7: 59:74:bf:0e:b8:2d:4e:00:cb:53:ae:74:ba:24:be: ed:d5:3f:54:82:06:6d:20:4e:4a:24:be:b1:e5:ea: d3:58:1f:d0:40:c7:fc:a1:39:47:59:27:21:69:c9: 7a:54:f3:a5:d6:92:29:0c:0a:f0:d3:57:2e:c2:57: cd:b0:8a:3f:f2:94:5c:c4:c9:c1:f2:93:2d:95:3e: 8a:47:de:e0:0d:bb:de:14:4f:76:37:f1:b0:08:a4: 2d:bf:83:0c:24:d5:47:5b:9b:11:47:7e:88:1d:4d: 10:f2:f6:7a:53:16:47:25:f5:fa:61:db:4c:74:7a: 1e:f4:35:4a:6c:b1:96:0f:94:25:81:bd:2e:60:c3: be:79:fb:44:31:95:2e:12:d8:fc:51:08:e7:35:e5: d5:62:de:11:b5:29:92:c6:80:0b:21:64:ab:b1:94: cf:a0:92:6a:d6:25:da:b0:70:0d:ce:d8:4f:04:e9: 3c:6e:77:3c:79:5a:67:8f:2a:cb:ed:98:f2:a8:8e: 4a:bc:6a:3b:d3:15:85:4b:54:ce:46:2a:01:a2:6c: 96:30:51:a3:ab:d4:9a:43:e4:9a:63:e3:26:3f:c5: 18:a7:a8:24:83:13:44:76:02:6a:be:b9:b5:3d:7b: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:19:C4:36:6C:55:AF:71:76:A4:77:62:1B:D7:D3:82:90:CB:B5:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv6: 2602:808:4001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5a:91:91:25:e7:06:40:4c:86:c7:9c:76:78:b1:b7:59:21: 79:14:75:a6:cf:ad:fa:60:51:7e:ca:26:77:c5:06:aa:cd:d8: 32:0a:ce:f5:82:28:93:70:17:30:f8:77:5d:43:53:7c:a5:01: 53:5a:84:80:57:06:40:be:1a:55:e5:20:3d:53:21:da:f4:f3: e8:ec:11:95:16:d0:ee:e6:f7:47:41:49:fc:6b:59:01:1e:6c: eb:e8:47:69:50:1c:28:0d:64:58:d2:87:24:9c:e7:c3:45:d0: 1c:1d:0d:01:09:67:eb:bb:bb:82:ef:c5:08:80:24:e7:2f:1e: cd:65:8a:00:13:a2:a7:69:73:a9:e8:1a:bc:91:86:f1:6e:2a: f4:7a:a4:1b:06:d6:2e:60:ce:97:e6:01:66:4b:9a:6f:e8:3f: 70:61:66:9f:b7:e9:db:67:8e:22:54:11:71:18:a6:ef:df:e3: 70:7e:02:29:d3:9f:94:77:19:a6:86:8e:71:bb:7f:b1:8d:4b: d4:23:91:75:33:b3:f4:85:06:64:0f:6f:19:ab:d4:d2:7c:7f: 5b:84:7e:19:a7:b8:90:22:cd:62:a3:c9:08:77:11:d5:93:fe: bd:d4:93:46:9c:d0:51:be:88:ee:fd:f5:ff:e4:1b:72:e5:4a: 18:0b:14:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6lZHbcl4QEyZ0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzUyZTI0MWUtNThiZi00ZTE0LWE4NzAtNzBkZDdhMzZlNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXzwW+ou8JctlrO+7vdZdL8OuC1OAMtTrnS6 JL7t1T9UggZtIE5KJL6x5erTWB/QQMf8oTlHWSchacl6VPOl1pIpDArw01cuwlfN sIo/8pRcxMnB8pMtlT6KR97gDbveFE92N/GwCKQtv4MMJNVHW5sRR36IHU0Q8vZ6 UxZHJfX6YdtMdHoe9DVKbLGWD5Qlgb0uYMO+eftEMZUuEtj8UQjnNeXVYt4RtSmS xoALIWSrsZTPoJJq1iXasHANzthPBOk8bnc8eVpnjyrL7ZjyqI5KvGo70xWFS1TO RioBomyWMFGjq9SaQ+SaY+MmP8UYp6gkgxNEdgJqvrm1PXt2kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcZxDZsVa9xdqR3YhvX04KQy7V8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvZWZiNTlhYmUtMmMxYy0z NWEzLTlhMTktYzlhNWJlNDZiMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIICEAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxakZEl5wZATIbHnHZ4sbdZIXkUdabPrfpgUX7KJnfFBqrN2DIK zvWCKJNwFzD4d11DU3ylAVNahIBXBkC+GlXlID1TIdr08+jsEZUW0O7m90dBSfxr WQEebOvoR2lQHCgNZFjShySc58NF0BwdDQEJZ+u7u4LvxQiAJOcvHs1ligAToqdp c6noGryRhvFuKvR6pBsG1i5gzpfmAWZLmm/oP3BhZp+36dtnjiJUEXEYpu/f43B+ AinTn5R3GaaGjnG7f7GNS9QjkXUzs/SFBmQPbxmr1NJ8f1uEfhmnuJAizWKjyQh3 EdWT/r3Uk0ac0FG+iO799f/kG3LlShgLFMA= -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:58 2026 by rpki-client