$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa File: 33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa (raw, json) Hash identifier: 5pZB2sUFPWn8+aH+07/zmoDDkLOoAFCWzxOR5J2dmzI= Subject key identifier: 72:E5:73:A3:0E:C0:DC:31:74:8A:CD:10:D8:E2:23:98:DF:DE:79:DD Certificate issuer: /CN=eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1 Certificate serial: 010D0C9F4328584D59EA6039AAFC8AB6ED96AC00 Authority key identifier: 64:2E:1D:CF:D8:3E:08:5E:0C:F9:D8:83:17:85:CB:2E:0C:F5:39:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 401898 IP address blocks: 2602:f5ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:60:39:aa:fc:8a:b6:ed:96:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=6def1ae0-e615-439c-8fa7-3264e3239514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:b4:19:3e:22:e3:0b:66:0c:66:dd:1c:09: 67:32:8e:29:a4:44:2b:cd:f1:c1:aa:80:99:37:d2: ae:21:af:94:61:97:58:ea:5a:20:30:3d:7a:df:71: 79:31:49:eb:7c:76:f7:d3:70:6c:0c:28:67:e7:67: 5b:8c:28:50:43:db:8a:2e:fb:66:c4:3c:9c:8c:7e: ee:89:2e:98:da:50:ed:ff:63:a7:1b:a1:8b:71:03: 60:9b:7f:b4:c8:fe:f4:11:1a:ba:c6:70:43:57:52: 8d:87:99:da:9c:38:14:be:92:63:85:e5:3a:2e:7c: db:d6:c4:a1:78:a6:af:41:4a:51:9c:69:69:a0:a9: 45:fb:02:e8:bf:7b:48:c0:9c:8d:b6:51:9e:9e:24: a7:bf:40:59:31:3f:e7:ab:2f:4a:2c:9f:d3:d8:19: 05:b7:a5:d1:ed:08:fa:43:d1:bb:65:84:50:6a:5f: bc:0a:76:13:0a:d5:1d:57:28:49:cf:ff:57:7b:f3: da:ab:68:68:4d:68:27:15:ec:5f:3d:e5:5f:ec:e9: 6e:59:2c:35:12:43:d6:d6:1f:6b:c7:f9:0b:5f:b8: 68:35:ca:d2:c1:e2:73:a1:9a:06:6b:d3:47:d1:af: 07:3d:62:c7:67:47:b7:0c:9c:49:59:1b:06:b6:a9: 9e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:73:A3:0E:C0:DC:31:74:8A:CD:10:D8:E2:23:98:DF:DE:79:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/33fe89fd-975e-3f3c-bcfd-053ad93b15fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.crl X509v3 Authority Key Identifier: keyid:64:2E:1D:CF:D8:3E:08:5E:0C:F9:D8:83:17:85:CB:2E:0C:F5:39:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/eb2e4a2b-bd29-4283-8cbb-abe3faf67aa1.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:7d:53:ad:64:1b:06:e6:de:c5:fc:40:75:52:c1:68:78:f4: 6e:86:12:5f:f3:76:67:79:49:55:d0:e6:b2:12:f8:f3:fe:77: 97:25:bb:71:ed:be:d3:0a:1b:18:a7:f1:9f:84:88:50:24:d8: 9c:07:a2:36:e3:8a:c2:b0:91:c5:52:33:47:8e:d7:35:e0:c3: 0c:78:42:62:e6:2d:75:a7:43:a1:7c:b9:14:94:2e:15:5d:bc: 76:2b:22:d8:67:b1:d0:30:fd:3a:43:22:e2:26:6f:f3:6a:28: aa:d0:c7:f7:3a:97:e0:a1:b6:a1:c4:56:5a:8b:88:e0:b1:b5: 1c:05:9c:cc:7b:dd:29:90:e1:de:5a:6d:b5:54:84:cf:e1:45: 58:f6:0d:f1:04:f7:23:49:ce:7b:6f:2c:fd:48:21:06:2b:59: f5:6f:b6:bd:74:13:7c:67:27:ab:37:f0:ff:2d:6c:04:6b:cc: 29:f7:11:eb:e8:ce:46:29:b4:9a:44:ba:0f:04:46:53:b9:1b: a1:45:17:42:05:ac:35:cf:5a:1b:a1:92:28:91:94:06:2d:b6: 9e:3d:98:7b:e7:e2:59:8b:0d:10:d2:06:a0:2d:6f:f5:02:26: 5d:20:36:6c:05:06:b4:6c:3a:8d:01:4d:d6:32:1e:c6:d1:cb: 3b:db:7f:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6mA5qvyKtu2WrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIyZTRhMmItYmQyOS00MjgzLThjYmItYWJlM2ZhZjY3 YWExMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NmRlZjFhZTAtZTYxNS00MzljLThmYTctMzI2NGUzMjM5NTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVS0GT4i4wtmDGbdHAlnMo4ppEQrzfHBqoCZ N9KuIa+UYZdY6logMD1633F5MUnrfHb303BsDChn52dbjChQQ9uKLvtmxDycjH7u iS6Y2lDt/2OnG6GLcQNgm3+0yP70ERq6xnBDV1KNh5nanDgUvpJjheU6Lnzb1sSh eKavQUpRnGlpoKlF+wLov3tIwJyNtlGeniSnv0BZMT/nqy9KLJ/T2BkFt6XR7Qj6 Q9G7ZYRQal+8CnYTCtUdVyhJz/9Xe/Paq2hoTWgnFexfPeVf7OluWSw1EkPW1h9r x/kLX7hoNcrSweJzoZoGa9NH0a8HPWLHZ0e3DJxJWRsGtqmeTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLlc6MOwNwxdIrNENjiI5jf3nndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYjJl NGEyYi1iZDI5LTQyODMtOGNiYi1hYmUzZmFmNjdhYTEvMzNmZTg5ZmQtOTc1ZS0z ZjNjLWJjZmQtMDUzYWQ5M2IxNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWIyZTRhMmItYmQyOS00MjgzLThj YmItYWJlM2ZhZjY3YWExL2ViMmU0YTJiLWJkMjktNDI4My04Y2JiLWFiZTNmYWY2 N2FhMS5jcmwwHwYDVR0jBBgwFoAUZC4dz9g+CF4M+diDF4XLLgz1OR0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYjJlNGEyYi1iZDI5LTQyODMtOGNiYi1hYmUz ZmFmNjdhYTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1rAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL19U61kGwbm3sX8QHVSwWh49G6GEl/zdmd5SVXQ5rIS+PP+d5cl u3HtvtMKGxin8Z+EiFAk2JwHojbjisKwkcVSM0eO1zXgwwx4QmLmLXWnQ6F8uRSU LhVdvHYrIthnsdAw/TpDIuImb/NqKKrQx/c6l+ChtqHEVlqLiOCxtRwFnMx73SmQ 4d5abbVUhM/hRVj2DfEE9yNJzntvLP1IIQYrWfVvtr10E3xnJ6s38P8tbARrzCn3 EevozkYptJpEug8ERlO5G6FFF0IFrDXPWhuhkiiRlAYttp49mHvn4lmLDRDSBqAt b/UCJl0gNmwFBrRsOo0BTdYyHsbRyzvbfys= -----END CERTIFICATE-----Generated at Tue Apr 7 16:30:56 2026 by rpki-client