$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa File: 3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (raw, json) Hash identifier: KloYHPwBfJq3oPgDdAbxQvk6KZbvATmOh4Ma8BJesTM= Subject key identifier: 12:B0:73:17:59:18:FA:30:2B:D6:1A:0F:5C:3B:80:69:61:A7:5E:47 Certificate issuer: /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Certificate serial: 010D0C9F4328584D117267916EFF546F3CBF4880 Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 32002 IP address blocks: 2602:f964:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:67:91:6e:ff:54:6f:3c:bf:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=7ca44f90-0ac6-43c9-806f-b1a1d8fd8215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:59:6c:57:8d:c0:83:62:72:c4:76:77:d3: 2e:5a:4e:2d:ed:55:76:df:d5:d2:c2:de:8a:6f:d0: 65:2a:63:b5:86:39:12:1f:93:bb:15:0f:15:51:12: 21:13:4c:42:34:cd:a6:15:a8:09:49:02:ee:b3:be: 12:47:7e:51:28:25:19:14:c3:5a:da:1b:b9:7f:6a: 44:ca:6b:c4:33:cb:1a:c4:0f:c7:c7:5e:84:bd:85: 69:8b:db:e0:3d:0a:98:4e:e6:f9:df:6c:d8:50:a4: 37:6d:3c:f9:8d:b9:c0:a1:6f:52:3f:d2:55:67:1c: cf:9d:8c:e3:6b:87:ed:e2:ff:1d:76:95:ee:5a:8d: f2:ac:c3:67:74:51:c3:94:6a:a1:bf:a8:50:8a:7c: 54:e0:36:83:4e:05:15:30:f2:e8:1d:84:0d:96:b0: 03:ec:e6:b7:ea:74:72:7c:9e:51:cc:34:a5:c0:6c: 6a:bc:f9:8d:ce:a6:24:d8:86:03:71:96:0e:13:18: 9d:37:95:93:39:af:a5:3e:be:84:45:f5:be:66:3e: fc:36:9e:67:c3:17:ea:af:67:af:a0:2d:7c:d5:e2: 81:6a:33:73:07:e7:ae:24:29:6c:e6:6a:9d:65:9b: f5:c9:74:64:c1:a9:51:33:e2:87:ed:d4:e6:c1:be: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B0:73:17:59:18:FA:30:2B:D6:1A:0F:5C:3B:80:69:61:A7:5E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl X509v3 Authority Key Identifier: keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f964:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2a:8c:a8:ad:a1:74:32:c3:ec:3f:c1:f3:c4:d4:04:89:8e: 2c:a3:ae:63:6b:06:82:96:bf:0b:b0:73:d7:79:91:f9:d0:37: 9d:62:c3:e8:83:45:9e:05:7f:1c:dd:0d:27:a0:8b:51:20:65: ae:1c:db:a7:09:06:93:c0:96:6b:d3:80:d6:2f:a8:50:34:fd: 14:a0:6c:f9:e0:3e:6d:0b:05:75:9a:75:e8:ad:69:3a:cd:9f: e9:82:12:6b:86:91:1f:a3:95:16:a9:3b:61:c4:f0:72:17:2a: d4:b2:9d:b0:8a:7d:93:e2:a5:32:e2:4d:ef:85:3b:a8:52:86: 3f:b5:bb:a2:ba:6c:19:fc:15:ee:48:0e:cd:0d:8c:8a:09:fe: b9:e3:8d:02:93:81:ee:90:f3:c8:24:b8:b1:9a:27:4e:83:c7: 57:6a:c5:d9:a9:45:11:3b:c0:a1:a1:d5:35:48:9c:ac:fa:4e: 76:50:b7:08:4c:06:d9:44:22:06:57:3e:b6:eb:df:77:81:c7: 2e:b9:c0:f7:39:59:12:f6:4d:7f:fc:e3:59:de:9f:a8:a6:5a: 44:8d:46:78:37:9f:7a:72:36:75:54:14:3d:1a:54:68:df:f6: e8:39:be:3f:4b:bd:70:ca:82:73:95:2a:ac:66:71:3e:4c:69: 9c:27:ad:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0RcmeRbv9Ubzy/SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiODRlMmItYWZiZS00YjM1LWIwMDUtZTBkZmNhMmUy M2Q4MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk N2NhNDRmOTAtMGFjNi00M2M5LTgwNmYtYjFhMWQ4ZmQ4MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9pZbFeNwINicsR2d9MuWk4t7VV239XSwt6K b9BlKmO1hjkSH5O7FQ8VURIhE0xCNM2mFagJSQLus74SR35RKCUZFMNa2hu5f2pE ymvEM8saxA/Hx16EvYVpi9vgPQqYTub532zYUKQ3bTz5jbnAoW9SP9JVZxzPnYzj a4ft4v8ddpXuWo3yrMNndFHDlGqhv6hQinxU4DaDTgUVMPLoHYQNlrAD7Oa36nRy fJ5RzDSlwGxqvPmNzqYk2IYDcZYOExidN5WTOa+lPr6ERfW+Zj78Np5nwxfqr2ev oC181eKBajNzB+euJCls5mqdZZv1yXRkwalRM+KH7dTmwb5wPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKwcxdZGPowK9YaD1w7gGlhp15HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hOGI4 NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRmY2EyZTIzZDgvM2JjZmIzM2UtY2JkNi0z ZTQ1LTk1NGQtNjFhYzMwMTI2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYThiODRlMmItYWZiZS00YjM1LWIw MDUtZTBkZmNhMmUyM2Q4L2E4Yjg0ZTJiLWFmYmUtNGIzNS1iMDA1LWUwZGZjYTJl MjNkOC5jcmwwHwYDVR0jBBgwFoAUJyaHnCMjdlLoJfSaxiQ6/6bmTi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hOGI4NGUyYi1hZmJlLTRiMzUtYjAwNS1lMGRm Y2EyZTIzZDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ZAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFsqjKitoXQyw+w/wfPE1ASJjiyjrmNrBoKWvwuwc9d5kfnQN51i w+iDRZ4FfxzdDSegi1EgZa4c26cJBpPAlmvTgNYvqFA0/RSgbPngPm0LBXWadeit aTrNn+mCEmuGkR+jlRapO2HE8HIXKtSynbCKfZPipTLiTe+FO6hShj+1u6K6bBn8 Fe5IDs0NjIoJ/rnjjQKTge6Q88gkuLGaJ06Dx1dqxdmpRRE7wKGh1TVInKz6TnZQ twhMBtlEIgZXPrbr33eBxy65wPc5WRL2TX/841nen6imWkSNRng3n3pyNnVUFD0a VGjf9ug5vj9LvXDKgnOVKqxmcT5MaZwnrcY= -----END CERTIFICATE-----Generated at Sat Mar 21 02:26:46 2026 by rpki-client