$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa File: 3cff927a-f198-366e-8e76-9857222f0035.roa (raw, json) Hash identifier: 7WQyJEqMHJ/uQD1SkU/7evBaNZfIJq0F4mrARUTB/xU= Subject key identifier: 2A:21:8C:52:8A:E3:31:B2:54:FC:1F:0D:CB:4F:B8:E5:FE:70:B6:D3 Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584D2644C9072912503F616DB680 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 13566 IP address blocks: 2602:fa64:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:c9:07:29:12:50:3f:61:6d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=aefaf48e-13ee-4dc9-9157-16b0e4b0987a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:97:f1:b6:d8:55:e8:75:fa:4d:60:93:19: aa:4e:ce:22:45:c7:b9:f0:ba:8f:1f:d5:4d:d9:ff: 41:01:9c:9d:8f:7f:55:d2:24:3f:57:ec:b3:a0:f3: d1:51:bf:3c:64:c5:75:cc:94:35:f7:b5:28:5d:b6: 90:dc:7a:3d:6b:b0:c7:98:1b:4d:9f:a9:05:71:74: 3c:ef:cb:05:4c:38:ce:d4:1f:28:98:fe:bb:93:2e: b1:e4:0b:42:e6:4b:1b:11:2a:40:b9:84:7d:59:76: 11:b6:f8:fe:f4:62:bf:63:d3:4b:27:2d:1b:73:ff: 6f:e3:81:4a:c1:72:a2:91:43:ae:81:46:0e:38:43: e6:67:db:b2:10:18:f3:8f:85:a6:e5:82:2e:6e:e7: 56:47:36:0f:14:c2:ea:ff:d9:32:63:e2:36:57:e9: a2:80:a1:9c:d0:48:d6:fa:e7:9d:b3:02:e4:f4:0b: 12:b4:d2:fc:2b:e8:a3:db:fe:dd:b5:f6:65:1d:3c: d9:95:48:4c:07:b3:6b:82:09:bd:61:11:0c:23:e1: 4d:22:9a:31:fa:ac:c7:65:a5:58:ed:67:21:c2:cb: 4d:a9:9f:a2:9a:8d:bb:e7:b8:26:c4:76:02:50:6d: f3:fd:48:4d:16:b3:0a:77:23:df:f8:af:ef:0e:aa: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:8C:52:8A:E3:31:B2:54:FC:1F:0D:CB:4F:B8:E5:FE:70:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/3cff927a-f198-366e-8e76-9857222f0035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa64:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c3:f4:6a:31:9e:c8:0d:e4:0a:76:36:ac:2b:1e:b1:72:3c: bf:ef:63:f6:86:f5:d1:72:c3:1c:64:42:67:5f:5a:47:ff:5c: a3:35:bf:ea:7a:07:5c:b9:63:2f:8c:a2:42:02:59:3a:81:6e: a8:db:20:cf:7e:07:ee:56:18:38:e6:dc:94:12:e4:58:0a:4b: df:d5:0a:60:75:1b:e2:83:76:e1:cb:31:45:0d:49:2c:47:7a: 11:d4:e4:e7:65:9e:24:cf:0c:a2:ac:cc:79:f2:70:a1:ca:76: e1:c0:85:2e:23:46:d8:4f:9e:d8:a5:a4:19:95:74:3a:94:0e: 36:0e:c1:f7:b4:d2:71:73:03:cf:8f:b7:c7:43:a4:0a:c4:7a: ea:28:32:68:2b:89:af:c4:a5:72:93:d8:e7:94:b9:5a:7a:41: ad:08:7a:5b:14:c2:f6:31:c2:0e:d4:0c:36:53:5b:c3:76:ad: 6a:a1:d6:68:95:b4:99:00:f3:d5:4f:f7:ce:41:a1:a4:7b:86: 95:88:29:bf:be:39:53:1a:f3:31:84:3d:50:fc:4f:f5:8b:9f: 9d:84:8e:1d:31:75:d7:a0:28:20:34:a7:72:d8:35:66:a8:8b: 6f:0d:91:fd:d7:13:05:40:ad:f0:7e:a6:bb:bf:87:40:41:bc: 63:7a:7d:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRMkHKRJQP2FttoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YWVmYWY0OGUtMTNlZS00ZGM5LTkxNTctMTZiMGU0YjA5ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibyX8bbYVeh1+k1gkxmqTs4iRce58LqPH9VN 2f9BAZydj39V0iQ/V+yzoPPRUb88ZMV1zJQ197UoXbaQ3Ho9a7DHmBtNn6kFcXQ8 78sFTDjO1B8omP67ky6x5AtC5ksbESpAuYR9WXYRtvj+9GK/Y9NLJy0bc/9v44FK wXKikUOugUYOOEPmZ9uyEBjzj4Wm5YIubudWRzYPFMLq/9kyY+I2V+migKGc0EjW +uedswLk9AsStNL8K+ij2/7dtfZlHTzZlUhMB7Nrggm9YREMI+FNIpox+qzHZaVY 7WchwstNqZ+imo2757gmxHYCUG3z/UhNFrMKdyPf+K/vDqruTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCohjFKK4zGyVPwfDctPuOX+cLbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvM2NmZjkyN2EtZjE5OC0z NjZlLThlNzYtOTg1NzIyMmYwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ZAAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTD9GoxnsgN5Ap2NqwrHrFyPL/vY/aG9dFywxxkQmdfWkf/XKM1 v+p6B1y5Yy+MokICWTqBbqjbIM9+B+5WGDjm3JQS5FgKS9/VCmB1G+KDduHLMUUN SSxHehHU5OdlniTPDKKszHnycKHKduHAhS4jRthPntilpBmVdDqUDjYOwfe00nFz A8+Pt8dDpArEeuooMmgria/EpXKT2OeUuVp6Qa0IelsUwvYxwg7UDDZTW8N2rWqh 1miVtJkA89VP985BoaR7hpWIKb++OVMa8zGEPVD8T/WLn52Ejh0xddegKCA0p3LY NWaoi28Nkf3XEwVArfB+pru/h0BBvGN6fcU= -----END CERTIFICATE-----Generated at Fri Mar 13 10:54:26 2026 by rpki-client