$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/3b2cbec5-6b44-31e7-87d8-59b031e72434.roa File: 3b2cbec5-6b44-31e7-87d8-59b031e72434.roa (raw, json) Hash identifier: 9BdHym363+3inuNKVPs2UxZic6sCOU5D6tOXoJToYoQ= Subject key identifier: 17:9E:BE:79:F1:1E:61:76:59:A1:73:BC:3A:FA:9A:96:8C:11:09:0C Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Certificate serial: 010D0C9F4328584D5454E64181F860B45CD87B40 Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/3b2cbec5-6b44-31e7-87d8-59b031e72434.roa Signing time: Sun 29 Mar 2026 13:00:30 +0000 ROA not before: Sun 29 Mar 2026 13:00:30 +0000 ROA not after: Sat 27 Jun 2026 13:00:30 +0000 asID: 20473 IP address blocks: 2602:f93b:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 31 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:54:e6:41:81:f8:60:b4:5c:d8:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Validity Not Before: Mar 29 13:00:30 2026 GMT Not After : Jun 27 13:00:30 2026 GMT Subject: CN=5162b568-da55-4ed6-8b15-fd94987cf4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:cf:49:9a:b3:22:73:f1:30:ba:43:9a:0f: a0:24:49:a2:b1:38:a6:e9:b8:fa:18:2a:c4:1c:8f: d5:f0:13:b2:c8:68:e3:6d:ea:1f:4c:aa:ed:2f:55: 1a:79:7b:44:7e:86:6c:9a:bf:31:98:8f:a8:b8:1d: 6e:56:fa:a3:40:3c:cc:f2:19:57:de:b4:94:b4:b8: dc:c0:99:80:a4:17:8c:73:f0:fb:aa:33:60:aa:c0: d1:e7:4e:8f:f0:6d:19:e9:f9:b3:33:e5:2f:6f:8f: c0:55:31:2f:68:b9:85:de:e7:6e:f8:8e:df:f4:b9: 57:37:c0:81:90:79:92:51:31:0e:5b:b2:56:6b:5e: f9:38:64:dd:c4:e6:b5:d2:b5:f3:9e:a7:e4:c8:36: 39:c1:8f:bf:84:09:6f:33:39:0d:55:35:8a:8d:14: 02:1c:5a:ba:f1:e0:20:04:c1:e0:a7:be:29:23:41: 32:3e:a6:f0:01:e6:30:19:de:28:8a:54:88:b3:63: b4:d7:22:10:c4:87:ee:0b:10:2b:08:dc:c4:34:18: b8:b7:57:f2:8d:42:7d:90:6c:6e:b3:d6:7e:b6:49: 65:95:89:16:f2:1a:23:82:24:d2:24:37:8d:23:f3: cb:36:61:e8:95:0f:2e:93:be:fd:fa:53:49:67:d3: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:BE:79:F1:1E:61:76:59:A1:73:BC:3A:FA:9A:96:8C:11:09:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/3b2cbec5-6b44-31e7-87d8-59b031e72434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl X509v3 Authority Key Identifier: keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f93b:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fc:09:ea:68:18:49:60:ad:c0:63:e7:13:b0:f0:d0:5c:80: 5a:22:cb:3d:c5:48:04:61:c2:1e:6b:45:e6:4c:42:37:34:36: ff:2b:c5:15:8d:a6:d1:ea:c1:15:e7:26:45:5c:9d:7c:fc:d8: ba:03:fd:be:74:28:1c:23:28:af:2f:53:33:ff:13:15:c1:a9: 43:94:1f:85:b4:af:a4:dc:f3:dc:c9:e8:56:5c:0a:8d:94:67: c8:17:78:5f:86:a4:43:56:16:9b:0a:2c:bd:b6:b1:3d:2d:af: 2d:fb:74:ad:6b:7e:45:72:1e:99:be:08:a6:3e:28:0d:fe:36: 40:61:4a:6f:b5:c1:51:30:95:65:ae:7a:8e:c4:f8:b9:3b:b5: 4f:1e:c2:65:41:4a:a2:29:f7:ba:5c:7c:18:ed:a7:10:6e:59: f3:10:f6:4f:e9:b8:f5:5a:cf:56:94:ce:66:1b:e5:1a:74:7f: 58:13:9a:d8:9a:ae:f7:55:cc:17:0f:61:82:f4:9b:a6:4c:6d: 7b:a6:f7:ab:cd:f7:1d:5c:3c:81:b0:5b:81:2c:05:3e:70:ce: ef:88:b1:42:b6:39:eb:95:d2:4f:78:e7:07:c2:aa:8d:37:24: 93:7f:86:a6:67:04:8e:c6:45:84:45:c8:f9:73:74:e4:60:be: 38:1e:48:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1UVOZBgfhgtFzYe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj MmU4MB4XDTI2MDMyOTEzMDAzMFoXDTI2MDYyNzEzMDAzMFowLzEtMCsGA1UEAxMk NTE2MmI1NjgtZGE1NS00ZWQ2LThiMTUtZmQ5NDk4N2NmNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzTPSZqzInPxMLpDmg+gJEmisTim6bj6GCrE HI/V8BOyyGjjbeofTKrtL1UaeXtEfoZsmr8xmI+ouB1uVvqjQDzM8hlX3rSUtLjc wJmApBeMc/D7qjNgqsDR506P8G0Z6fmzM+Uvb4/AVTEvaLmF3udu+I7f9LlXN8CB kHmSUTEOW7JWa175OGTdxOa10rXznqfkyDY5wY+/hAlvMzkNVTWKjRQCHFq68eAg BMHgp74pI0EyPqbwAeYwGd4oilSIs2O01yIQxIfuCxArCNzENBi4t1fyjUJ9kGxu s9Z+tklllYkW8hojgiTSJDeNI/PLNmHolQ8uk779+lNJZ9Oo2QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBeevnnxHmF2WaFzvDr6mpaMEQkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvM2IyY2JlYzUtNmI0NC0z MWU3LTg3ZDgtNTliMDMxZTcyNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3 YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4 NzQ3N2MyZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5OwMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXPwJ6mgYSWCtwGPnE7Dw0FyAWiLLPcVIBGHCHmtF5kxCNzQ2/yvF FY2m0erBFecmRVydfPzYugP9vnQoHCMory9TM/8TFcGpQ5QfhbSvpNzz3MnoVlwK jZRnyBd4X4akQ1YWmwosvbaxPS2vLft0rWt+RXIemb4Ipj4oDf42QGFKb7XBUTCV Za56jsT4uTu1Tx7CZUFKoin3ulx8GO2nEG5Z8xD2T+m49VrPVpTOZhvlGnR/WBOa 2Jqu91XMFw9hgvSbpkxte6b3q833HVw8gbBbgSwFPnDO74ixQrY565XST3jnB8Kq jTckk3+GpmcEjsZFhEXI+XN05GC+OB5IOA== -----END CERTIFICATE-----Generated at Sun Mar 29 22:13:30 2026 by rpki-client