$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa File: 2a31dd75-45e6-307f-b715-e7b55a1e5617.roa (raw, json) Hash identifier: GYMb3fP+FmySMX7Nuwgyy/oHp49B5UTfgsJTJgb6mQs= Subject key identifier: C0:38:52:86:CF:84:6D:3F:ED:40:7F:7D:7D:3E:D8:29:B4:20:78:0C Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584D1B1A0AD81E40CCECDF3EA5C0 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 2602:814:b008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0a:d8:1e:40:cc:ec:df:3e:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ae2cd9f7-89d2-46b8-9aa7-4fd4858d2526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:72:6e:ce:8f:fb:4f:ff:ae:8d:af:88:05: a0:67:51:76:69:74:4d:f5:c1:55:59:cd:ca:4d:91: 70:7b:a2:95:80:dc:45:51:d7:a2:32:2e:6c:bf:31: 52:f1:70:22:9c:10:77:56:0a:23:e6:18:c6:6f:c5: d8:af:71:25:b8:f0:a0:ff:13:59:ab:e1:8f:d1:e9: be:b0:aa:6d:d9:8f:5e:22:31:96:54:94:4f:e9:6f: a4:c1:88:b6:53:25:dd:67:44:6e:93:97:d6:b4:6d: bc:81:c2:be:4d:f6:7a:62:1b:e1:88:2d:bc:ff:48: 22:e5:68:85:7f:ba:08:b0:b0:ea:ee:9c:04:57:65: 33:5d:16:a4:c7:97:b6:2b:16:f6:ce:bb:49:73:dd: a0:4e:9f:00:6a:c9:ca:f6:2b:a8:f4:28:19:d2:f2: 02:bb:d7:b4:b5:fd:9a:44:2d:1a:9d:05:fa:f4:1b: 6d:6b:de:0e:82:5e:0b:bf:83:82:a6:77:f0:bf:98: 2e:4b:1f:55:01:8d:37:e6:c9:f6:c5:18:a6:b8:2f: 93:8f:47:37:eb:82:26:93:6d:15:d1:cd:4f:08:25: db:78:88:65:8c:3a:3b:48:42:4e:c2:10:f2:f4:22: 01:e1:13:16:03:54:18:17:bf:04:d4:ab:e4:33:af: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:52:86:CF:84:6D:3F:ED:40:7F:7D:7D:3E:D8:29:B4:20:78:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/2a31dd75-45e6-307f-b715-e7b55a1e5617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv6: 2602:814:b008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a1:ff:07:e6:a9:e5:43:1e:52:78:b4:31:ca:de:e9:5f:88: 7b:fe:b9:d1:d8:9b:57:ac:70:b8:c6:0a:35:28:61:ba:08:ae: c8:c7:0e:ba:6e:bb:a6:3c:e6:3f:5c:83:af:f5:5f:2b:15:12: ff:4f:45:dd:7c:4c:9a:26:d7:40:55:e8:ea:66:73:40:8b:e7: cf:56:67:68:e1:04:62:55:0b:fb:1c:dd:72:34:b5:9a:03:90: 72:6b:1b:56:52:db:04:ef:27:62:10:7a:99:4e:84:5d:11:59: ca:7b:b6:77:7d:5e:97:40:0c:e9:92:f3:bf:5a:ac:d8:14:13: 94:a3:e8:45:ab:5f:8b:e9:19:aa:44:99:f4:09:fb:3a:ee:22: c0:44:40:9f:d6:39:c6:e3:ea:e9:a5:62:3b:59:0e:21:9a:3f: 66:e7:43:4a:b3:65:ba:5f:1a:94:4c:2e:77:5e:bb:98:5f:5a: d1:8a:89:b2:a6:85:93:01:fd:90:83:d7:42:5f:25:79:2e:58: 91:de:8a:fe:84:77:12:f0:ad:94:38:b5:fe:2a:e7:43:3f:32: 4a:c6:26:5b:fc:22:6f:16:f8:81:f7:e3:f9:e1:a7:b7:19:9e: 5d:e1:84:9f:30:f7:95:37:35:ef:32:77:8e:77:79:76:e1:61: 2c:ac:01:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGgrYHkDM7N8+pcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YWUyY2Q5ZjctODlkMi00NmI4LTlhYTctNGZkNDg1OGQyNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vZybs6P+0//ro2viAWgZ1F2aXRN9cFVWc3K TZFwe6KVgNxFUdeiMi5svzFS8XAinBB3Vgoj5hjGb8XYr3EluPCg/xNZq+GP0em+ sKpt2Y9eIjGWVJRP6W+kwYi2UyXdZ0Ruk5fWtG28gcK+TfZ6YhvhiC28/0gi5WiF f7oIsLDq7pwEV2UzXRakx5e2Kxb2zrtJc92gTp8AasnK9iuo9CgZ0vICu9e0tf2a RC0anQX69Btta94Ogl4Lv4OCpnfwv5guSx9VAY035sn2xRimuC+Tj0c364Imk20V 0c1PCCXbeIhljDo7SEJOwhDy9CIB4RMWA1QYF78E1KvkM68qQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMA4UobPhG0/7UB/fX0+2Cm0IHgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvMmEzMWRkNzUtNDVlNi0z MDdmLWI3MTUtZTdiNTVhMWU1NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFLAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGah/wfmqeVDHlJ4tDHK3ulfiHv+udHYm1escLjGCjUoYboIrsjH Drpuu6Y85j9cg6/1XysVEv9PRd18TJom10BV6Opmc0CL589WZ2jhBGJVC/sc3XI0 tZoDkHJrG1ZS2wTvJ2IQeplOhF0RWcp7tnd9XpdADOmS879arNgUE5Sj6EWrX4vp GapEmfQJ+zruIsBEQJ/WOcbj6umlYjtZDiGaP2bnQ0qzZbpfGpRMLndeu5hfWtGK ibKmhZMB/ZCD10JfJXkuWJHeiv6EdxLwrZQ4tf4q50M/MkrGJlv8Im8W+IH34/nh p7cZnl3hhJ8w95U3Ne8yd453eXbhYSysAaw= -----END CERTIFICATE-----Generated at Tue Mar 10 08:29:33 2026 by rpki-client