$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/b0c0a37b-26c2-3135-b25b-2bc8e2de16a6.roa File: b0c0a37b-26c2-3135-b25b-2bc8e2de16a6.roa (raw, json) Hash identifier: JOpN4amHFBkrBrx7HtCmIC7pYtyxhTb3IqMZo8VzVek= Subject key identifier: 0A:E7:95:89:9B:40:B6:A8:8B:49:0C:75:3C:54:29:08:E8:1A:4C:12 Certificate issuer: /CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf Certificate serial: 010D0C9F4328584D55BA48125D5680364518B8E0 Authority key identifier: DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/b0c0a37b-26c2-3135-b25b-2bc8e2de16a6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 20454 IP address blocks: 2602:810:4003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:48:12:5d:56:80:36:45:18:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2cc1c3b-d144-4350-8e42-9af4627c1cdf Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=796142bc-d840-4ec3-a24b-f0ef8cdfc462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:ca:8f:13:9b:69:9f:96:a3:fa:d6:d3:9c: a7:2e:cb:37:b0:4f:fc:8f:4a:66:95:81:31:5c:e3: b2:9f:cd:91:f7:3e:06:e0:2d:28:dc:c6:db:ea:c1: fc:e8:c3:00:f7:7a:6e:ff:9f:0a:97:75:1f:4f:52: 79:be:3f:99:a2:b3:e5:65:39:ce:94:04:92:cd:ea: 0f:67:b6:7c:3c:72:53:b7:36:af:05:bb:de:ed:2b: be:a6:e9:e4:27:7b:20:9c:e6:bd:a1:5b:d9:74:c6: c3:5f:d5:4d:8b:63:10:81:be:c7:93:bf:ab:b8:ce: a5:81:a3:2b:30:b0:f6:55:d1:5a:68:ca:63:f1:5d: 83:15:65:f6:8c:f8:6a:84:32:bd:d9:26:de:03:23: 8f:e9:ed:ef:93:6b:9e:d2:f0:45:cc:21:29:b0:76: 03:08:35:42:ac:b8:ae:86:37:36:5f:f2:5f:03:84: 87:63:0a:14:17:24:d2:bb:76:f8:72:ab:98:8f:f1: 21:64:50:0e:fb:7a:e3:0c:05:fb:18:6b:7f:aa:6d: a2:98:fb:eb:85:68:03:21:e7:32:31:38:1b:71:63: d3:c7:3b:66:38:78:1c:59:8b:73:26:d8:ac:3f:2d: 84:ea:e9:de:d5:1c:ba:cb:a0:ef:25:fe:53:66:9e: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E7:95:89:9B:40:B6:A8:8B:49:0C:75:3C:54:29:08:E8:1A:4C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/b0c0a37b-26c2-3135-b25b-2bc8e2de16a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.crl X509v3 Authority Key Identifier: keyid:DD:98:CA:96:11:81:EA:1C:37:97:5D:D9:9F:01:2A:4C:67:E6:06:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f2cc1c3b-d144-4350-8e42-9af4627c1cdf.cer sbgp-ipAddrBlock: critical IPv6: 2602:810:4003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e1:30:91:5b:ea:61:a6:58:aa:2f:27:ee:94:ad:f2:22:78: d2:3e:68:5b:86:ef:ea:95:c5:61:07:fa:c7:ca:d2:ca:50:65: ea:6a:ef:54:62:72:c6:41:38:0f:79:9c:0f:23:da:c5:a3:77: 4b:a4:c9:5d:6e:10:df:35:1b:18:dc:f3:7a:a6:8d:ec:32:aa: 04:03:c7:f1:9d:8e:af:e0:87:0c:c7:e5:19:3d:10:32:33:f9: 8f:67:3b:83:59:54:a5:a9:a8:4d:8c:fd:63:bd:3b:df:9f:30: 6f:41:eb:b0:a5:57:b4:72:5f:ea:ba:3d:6e:d0:90:52:53:d0: b7:b7:07:a3:80:68:be:eb:0e:3b:d0:5b:c3:cd:76:6d:c5:54: 84:53:47:97:60:17:be:3f:5d:93:13:e4:54:fd:cb:d7:f9:02: ee:66:ff:d0:01:10:f0:00:67:36:58:ee:7f:f5:55:89:ae:e8: ea:5f:37:6c:45:8d:99:de:9d:04:d8:d9:a5:d5:7b:0a:8c:65: 7b:fa:08:a8:94:72:6e:00:ff:78:34:0a:76:b4:a5:54:8b:98: 79:76:04:55:73:72:1c:85:cc:89:25:f4:8a:95:28:d7:35:b7: 53:5a:92:e1:ad:b2:11:5c:e5:d1:4e:88:95:41:88:5e:57:c7: 64:e9:d1:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1VukgSXVaANkUYuOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJjYzFjM2ItZDE0NC00MzUwLThlNDItOWFmNDYyN2Mx Y2RmMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Nzk2MTQyYmMtZDg0MC00ZWMzLWEyNGItZjBlZjhjZGZjNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA/KjxObaZ+Wo/rW05ynLss3sE/8j0pmlYEx XOOyn82R9z4G4C0o3Mbb6sH86MMA93pu/58Kl3UfT1J5vj+ZorPlZTnOlASSzeoP Z7Z8PHJTtzavBbve7Su+punkJ3sgnOa9oVvZdMbDX9VNi2MQgb7Hk7+ruM6lgaMr MLD2VdFaaMpj8V2DFWX2jPhqhDK92SbeAyOP6e3vk2ue0vBFzCEpsHYDCDVCrLiu hjc2X/JfA4SHYwoUFyTSu3b4cquYj/EhZFAO+3rjDAX7GGt/qm2imPvrhWgDIecy MTgbcWPTxztmOHgcWYtzJtisPy2E6une1Ry6y6DvJf5TZp5WZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFArnlYmbQLaoi0kMdTxUKQjoGkwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMmNj MWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0NjI3YzFjZGYvYjBjMGEzN2ItMjZjMi0z MTM1LWIyNWItMmJjOGUyZGUxNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjJjYzFjM2ItZDE0NC00MzUwLThl NDItOWFmNDYyN2MxY2RmL2YyY2MxYzNiLWQxNDQtNDM1MC04ZTQyLTlhZjQ2Mjdj MWNkZi5jcmwwHwYDVR0jBBgwFoAU3ZjKlhGB6hw3l13ZnwEqTGfmBpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mMmNjMWMzYi1kMTQ0LTQzNTAtOGU0Mi05YWY0 NjI3YzFjZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIEEAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3hMJFb6mGmWKovJ+6UrfIieNI+aFuG7+qVxWEH+sfK0spQZepq 71RicsZBOA95nA8j2sWjd0ukyV1uEN81Gxjc83qmjewyqgQDx/Gdjq/ghwzH5Rk9 EDIz+Y9nO4NZVKWpqE2M/WO9O9+fMG9B67ClV7RyX+q6PW7QkFJT0Le3B6OAaL7r DjvQW8PNdm3FVIRTR5dgF74/XZMT5FT9y9f5Au5m/9ABEPAAZzZY7n/1VYmu6Opf N2xFjZnenQTY2aXVewqMZXv6CKiUcm4A/3g0Cna0pVSLmHl2BFVzchyFzIkl9IqV KNc1t1NakuGtshFc5dFOiJVBiF5Xx2Tp0T8= -----END CERTIFICATE-----Generated at Thu Apr 2 18:17:43 2026 by rpki-client