$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa File: e8f13100-d644-3a83-b082-19ac1aaf66a9.roa (raw, json) Hash identifier: krED8y23qJ6kufXofU+duOlswzukG0Xq4rzy2SeeDT0= Subject key identifier: BA:BE:C2:DD:E0:CA:BE:5D:22:81:79:C6:56:84:BF:5A:2E:47:4A:39 Certificate issuer: /CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Certificate serial: 010D0C9F4328584D0EA7C0CC8883EFF091EBE1C0 Authority key identifier: B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 40081 IP address blocks: 2602:f948::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:c0:cc:88:83:ef:f0:91:eb:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b98849-0471-48f0-9db6-e4f6b59aa178 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=ffcea286-02b5-44bf-8e95-827fbe2c0c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ba:2d:99:4b:14:b2:ab:f6:b7:d3:a5:cb:89: 07:41:28:55:f9:53:5f:fc:bb:c5:b0:f4:51:b5:56: fe:b2:80:0c:ab:3a:54:be:51:63:62:66:5c:46:01: 2e:20:01:cd:a7:22:87:01:ae:23:8c:81:dc:29:14: 42:20:f1:f2:53:f6:52:0a:e3:d2:10:92:aa:37:7a: 0d:7c:be:68:0c:ac:e0:d0:9c:2a:de:13:6e:8f:6b: 35:25:44:09:43:75:59:89:44:c5:ba:82:0e:47:4f: 40:6f:f2:52:a8:55:c8:94:e2:0b:27:78:8c:b8:04: 6e:2f:95:5f:7e:05:0c:70:9d:81:ee:d0:34:70:55: 33:a6:4e:77:96:15:29:03:d4:c7:01:7b:65:df:29: 5a:c3:6a:4d:7f:a7:8b:83:02:17:72:1d:4c:c2:8e: 29:25:41:0f:65:45:f1:35:0d:87:05:09:e0:72:13: 58:03:cb:1f:72:8f:82:c9:25:e1:26:c4:79:5d:3f: b4:af:ba:f6:4e:bc:10:ad:0b:b7:ec:fb:df:cd:bd: cf:e8:1d:a4:4c:d8:a6:dc:82:5c:43:33:20:9b:26: f5:42:11:63:c8:64:bb:c9:99:28:18:bd:ff:39:70: 9b:78:66:1b:73:9b:84:44:57:fb:47:8b:72:7f:52: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:C2:DD:E0:CA:BE:5D:22:81:79:C6:56:84:BF:5A:2E:47:4A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/e8f13100-d644-3a83-b082-19ac1aaf66a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178/25b98849-0471-48f0-9db6-e4f6b59aa178.crl X509v3 Authority Key Identifier: keyid:B9:5A:19:12:3F:E3:00:0F:1C:14:7F:63:87:80:DB:CA:83:1A:65:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b98849-0471-48f0-9db6-e4f6b59aa178.cer sbgp-ipAddrBlock: critical IPv6: 2602:f948::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f8:b4:df:ec:75:8e:89:0d:cf:ea:13:c8:a0:a3:f2:b3:12: 61:ff:be:6d:46:1b:6c:c2:ba:a8:c9:b7:3c:73:55:45:4f:a1: 74:9b:d8:f1:bf:4b:8e:13:37:98:60:0c:96:90:1b:2e:1d:3a: 24:90:f0:c2:69:a6:93:48:a1:0d:0b:be:91:c8:32:8e:8e:d9: 12:e0:73:cd:98:7b:79:ee:0e:39:bb:ce:58:7e:78:7b:d2:be: b5:99:e3:e1:73:09:dd:ab:65:e5:b1:db:76:09:ed:10:b1:2d: 5d:47:ca:50:48:d3:4c:11:3c:89:82:7a:13:b0:57:bc:dc:2b: a1:ad:ae:7a:a6:9e:03:5a:bd:8f:fb:43:d5:f6:6b:1d:67:67: a5:5f:95:cf:8a:83:6a:1b:72:cb:70:5b:35:55:ea:9a:ca:dd: bd:23:37:9e:34:1a:04:74:98:c2:cf:35:bc:ad:6a:0d:1b:50: 31:d5:b6:3e:a3:6e:c2:88:9c:d1:9f:06:53:e5:d9:89:86:be: 65:3f:7a:1b:9d:be:d4:fa:5a:46:85:97:3c:bc:67:68:f7:cc: 3c:92:7a:79:db:9f:7d:4a:63:f0:80:67:6f:d3:7a:e9:dd:dd: 21:3f:87:f2:74:0f:2c:19:03:b1:c2:c8:97:e4:d1:4c:64:9e: 23:17:f5:c6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Op8DMiIPv8JHr4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViOTg4NDktMDQ3MS00OGYwLTlkYjYtZTRmNmI1OWFh MTc4MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ZmZjZWEyODYtMDJiNS00NGJmLThlOTUtODI3ZmJlMmMwYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLotmUsUsqv2t9Oly4kHQShV+VNf/LvFsPRR tVb+soAMqzpUvlFjYmZcRgEuIAHNpyKHAa4jjIHcKRRCIPHyU/ZSCuPSEJKqN3oN fL5oDKzg0Jwq3hNuj2s1JUQJQ3VZiUTFuoIOR09Ab/JSqFXIlOILJ3iMuARuL5Vf fgUMcJ2B7tA0cFUzpk53lhUpA9THAXtl3ylaw2pNf6eLgwIXch1Mwo4pJUEPZUXx NQ2HBQngchNYA8sfco+CySXhJsR5XT+0r7r2TrwQrQu37Pvfzb3P6B2kTNim3IJc QzMgmyb1QhFjyGS7yZkoGL3/OXCbeGYbc5uERFf7R4tyf1KnAQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLq+wt3gyr5dIoF5xlaEv1ouR0o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI5 ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2YjU5YWExNzgvZThmMTMxMDAtZDY0NC0z YTgzLWIwODItMTlhYzFhYWY2NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViOTg4NDktMDQ3MS00OGYwLTlk YjYtZTRmNmI1OWFhMTc4LzI1Yjk4ODQ5LTA0NzEtNDhmMC05ZGI2LWU0ZjZiNTlh YTE3OC5jcmwwHwYDVR0jBBgwFoAUuVoZEj/jAA8cFH9jh4DbyoMaZVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNWI5ODg0OS0wNDcxLTQ4ZjAtOWRiNi1lNGY2 YjU5YWExNzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5SAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADfi03+x1jokNz+oTyKCj8rMSYf++bUYbbMK6qMm3PHNVRU+hdJvY 8b9LjhM3mGAMlpAbLh06JJDwwmmmk0ihDQu+kcgyjo7ZEuBzzZh7ee4OObvOWH54 e9K+tZnj4XMJ3atl5bHbdgntELEtXUfKUEjTTBE8iYJ6E7BXvNwroa2ueqaeA1q9 j/tD1fZrHWdnpV+Vz4qDahtyy3BbNVXqmsrdvSM3njQaBHSYws81vK1qDRtQMdW2 PqNuwoic0Z8GU+XZiYa+ZT96G52+1PpaRoWXPLxnaPfMPJJ6eduffUpj8IBnb9N6 6d3dIT+H8nQPLBkDscLIl+TRTGSeIxf1xg== -----END CERTIFICATE-----Generated at Fri Mar 13 08:32:42 2026 by rpki-client