$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa File: 0cefe89b-d729-38a2-87b5-8530769b82bf.roa (raw, json) Hash identifier: XujeN8ZR/dTGvX/ymzvtFT5JaxKqmlZgZHiqLtYqGfg= Subject key identifier: B7:FE:DF:7B:84:1C:77:2B:CE:BC:77:AE:06:5D:9C:4C:25:3C:A0:5F Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584D1B1A0AEEE889702566C27980 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 2602:814:b00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0a:ee:e8:89:70:25:66:c2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d2843926-4260-4b2b-a10d-707dc5768d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:09:8d:7a:0c:cf:8b:d4:6a:b5:90:68:d3: e1:74:b0:0c:c0:2d:a2:82:47:ac:e2:a5:54:8f:0c: a8:b4:a7:8f:d9:8d:5f:9a:d5:c0:b1:19:f5:51:54: 40:0b:9a:87:77:c1:20:b2:db:c7:1d:7e:a6:18:ea: 09:c6:c6:c2:c3:07:e0:22:d1:14:ac:f8:00:1d:cd: 4e:08:13:63:41:5b:10:47:f8:56:1b:89:2c:b9:19: 35:72:e2:b8:a9:99:aa:6c:07:15:3d:8c:91:f6:15: b2:b2:32:e3:39:9f:49:76:43:88:dd:e2:62:c0:23: d8:2e:e7:4a:08:98:9f:a0:e4:c0:d4:db:eb:7a:00: 0e:9f:bf:cb:b6:3c:94:96:43:2e:89:45:0f:54:78: 94:24:74:fc:21:be:ac:3a:29:89:5a:19:c9:96:f2: 5f:7d:d0:bc:97:c8:54:70:8c:b2:70:97:63:66:88: 32:c6:b9:fc:f7:2e:b1:3c:5b:0f:1e:fe:7d:95:93: 5d:5c:97:7a:a6:1e:62:01:02:ce:1c:ea:2e:df:46: e6:c3:7b:47:3e:57:e9:10:eb:bf:0d:46:71:76:ea: cc:a6:c4:57:1b:6b:90:15:6d:1f:3e:b0:d0:6c:75: f4:c9:cc:f9:e5:d9:1b:a3:55:a5:f8:61:86:04:0b: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FE:DF:7B:84:1C:77:2B:CE:BC:77:AE:06:5D:9C:4C:25:3C:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/0cefe89b-d729-38a2-87b5-8530769b82bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b00a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a4:0d:8a:8a:60:a5:84:78:38:f3:5e:83:27:1f:46:1b:79: 2e:12:18:ce:82:cf:31:06:4b:1e:d6:1c:9e:ab:5c:5e:b5:ba: 09:92:9e:62:19:1c:61:d2:b0:ee:b3:57:ea:25:7c:28:fd:a0: 93:7d:15:2b:96:25:f7:63:58:58:c1:ec:5b:86:04:c0:20:d0: 1f:61:97:08:cb:f1:d4:68:e1:e6:d8:d8:38:1b:86:f9:31:9f: e3:ef:09:65:7a:0d:62:97:53:47:24:5b:63:2d:b4:cc:8d:67: 1c:53:36:82:72:78:cd:42:6e:3f:21:3e:9e:3b:cb:7e:b6:d0: 83:2b:65:3a:3a:19:2d:5c:d7:84:df:80:b6:f4:87:d7:4e:8f: 50:3e:8e:01:bb:5a:67:68:46:32:f1:0c:03:98:57:c3:b0:30: 21:f0:2a:57:0d:e4:c0:69:78:86:5a:1b:f5:bb:04:e3:a9:d4: 0e:8a:c7:db:93:15:e4:3e:b1:5a:a3:c1:56:a7:8c:01:d2:3f: 78:4f:3e:ac:54:79:ba:1c:e3:82:ed:7e:3e:2f:25:a3:10:bb: 34:6e:62:93:e9:6d:95:66:16:3a:30:ea:e0:e9:78:84:79:89: 28:01:9a:c2:d5:96:72:56:9d:55:32:d0:0b:ba:69:ab:f8:d9: e8:93:3e:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGgru6IlwJWbCeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDI4NDM5MjYtNDI2MC00YjJiLWExMGQtNzA3ZGM1NzY4ZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAockJjXoMz4vUarWQaNPhdLAMwC2igkes4qVU jwyotKeP2Y1fmtXAsRn1UVRAC5qHd8EgstvHHX6mGOoJxsbCwwfgItEUrPgAHc1O CBNjQVsQR/hWG4ksuRk1cuK4qZmqbAcVPYyR9hWysjLjOZ9JdkOI3eJiwCPYLudK CJifoOTA1NvregAOn7/LtjyUlkMuiUUPVHiUJHT8Ib6sOimJWhnJlvJffdC8l8hU cIyycJdjZogyxrn89y6xPFsPHv59lZNdXJd6ph5iAQLOHOou30bmw3tHPlfpEOu/ DUZxdurMpsRXG2uQFW0fPrDQbHX0ycz55dkbo1Wl+GGGBAspUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLf+33uEHHcrzrx3rgZdnEwlPKBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvMGNlZmU4OWItZDcyOS0z OGEyLTg3YjUtODUzMDc2OWI4MmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2kDYqKYKWEeDjzXoMnH0YbeS4SGM6CzzEGSx7WHJ6rXF61ugmS nmIZHGHSsO6zV+olfCj9oJN9FSuWJfdjWFjB7FuGBMAg0B9hlwjL8dRo4ebY2Dgb hvkxn+PvCWV6DWKXU0ckW2MttMyNZxxTNoJyeM1Cbj8hPp47y3620IMrZTo6GS1c 14TfgLb0h9dOj1A+jgG7WmdoRjLxDAOYV8OwMCHwKlcN5MBpeIZaG/W7BOOp1A6K x9uTFeQ+sVqjwVanjAHSP3hPPqxUeboc44Ltfj4vJaMQuzRuYpPpbZVmFjow6uDp eIR5iSgBmsLVlnJWnVUy0Au6aav42eiTPuI= -----END CERTIFICATE-----Generated at Tue Mar 10 08:30:39 2026 by rpki-client