$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/cefba616-2263-3e6e-a774-efd997a2d1e3.roa File: cefba616-2263-3e6e-a774-efd997a2d1e3.roa (raw, json) Hash identifier: PJEFB5s06y8UllMzAiz+UBXvnVoHO+NazqCIw8RpnmU= Subject key identifier: 2D:21:6E:FD:D0:63:7B:11:3B:91:44:1D:14:7B:5E:D5:4A:68:41:E9 Certificate issuer: /CN=0d419888-80a0-4fd9-90ba-6342b677f849 Certificate serial: 010D0C9F4328584D27AA0B79E698B5FB92B24880 Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/cefba616-2263-3e6e-a774-efd997a2d1e3.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 13378 IP address blocks: 2602:f7b8::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:0b:79:e6:98:b5:fb:92:b2:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=ef2e824d-7348-42c5-a692-ef6f7be104a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:18:c2:c9:dd:b1:f2:a9:96:97:42:3f:90:70: 58:39:5d:01:3b:9c:de:c8:3c:6d:3e:24:87:db:b6: 18:bf:9a:4e:e0:7c:c0:5d:be:ce:28:b2:5d:9c:67: 02:9c:f4:c1:09:31:57:63:22:9c:f4:c6:81:17:55: dd:3c:a9:0e:0d:0d:fe:61:c3:00:9e:1e:50:ae:a4: 9d:8f:5d:7d:73:3d:44:b1:d7:e2:7c:76:c9:cd:1e: 4d:9b:32:40:d6:78:6a:0b:f0:d2:35:9f:81:19:09: 8a:bd:dd:a9:68:ec:00:99:eb:49:66:dc:de:7b:1f: be:bc:7e:30:54:2a:41:34:07:c7:5b:a5:1b:2a:c8: 83:26:11:56:d7:bd:c9:e6:e8:b3:7f:33:cc:46:0c: f0:d6:dd:b7:2b:e0:45:b4:39:ef:fc:05:11:55:1a: 52:2c:86:ec:3f:70:c2:d7:f4:8c:56:ab:1b:cc:c9: f0:48:44:88:dd:66:df:95:08:e0:4a:6a:ef:67:72: 22:e5:fc:a1:bd:f0:4f:40:08:9f:d1:dc:e4:19:d9: d4:25:a9:7b:26:23:75:5c:23:9f:4c:37:5b:df:99: 1e:a3:8d:a1:f1:6b:a0:52:38:88:39:7e:44:90:4f: 35:42:63:ff:e1:9a:b6:84:d4:6e:60:39:e4:e0:cf: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:21:6E:FD:D0:63:7B:11:3B:91:44:1D:14:7B:5E:D5:4A:68:41:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/cefba616-2263-3e6e-a774-efd997a2d1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl X509v3 Authority Key Identifier: keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c2:71:94:f0:96:a7:53:d9:10:16:dc:e1:59:c8:a9:fb:bd: c3:a8:b3:bf:a6:1c:ba:74:e8:8f:cf:38:20:86:dc:0d:bf:ca: 49:4f:6e:16:e3:9b:bc:81:26:50:e5:59:11:73:3a:91:49:98: 36:a1:0b:b7:04:29:bc:df:4e:67:28:90:54:f4:5a:d4:fc:cc: 70:3e:ab:2b:08:ba:7e:d9:6f:8d:54:12:0b:39:07:58:26:9a: 85:eb:13:71:5e:b9:b6:70:83:37:7a:09:c0:23:81:e0:cd:fc: e4:73:52:f9:a9:a9:67:a2:80:3c:f6:3f:89:93:e8:48:d7:a0: db:2c:4d:c5:67:87:81:7d:53:79:b9:80:0d:10:d6:73:f0:2c: 1b:4e:ef:68:e5:a3:08:7d:a3:e2:e4:7b:0b:d5:c2:e9:9c:e3: 31:d6:36:f0:64:19:a0:ba:53:ca:a3:41:31:d8:e9:c2:7d:b8: 6f:de:e5:c7:db:50:6a:8b:b5:43:23:3f:a7:3f:b4:07:51:fb: 11:63:b7:9b:f8:d7:27:53:3b:ae:b0:68:18:8f:ee:e3:7d:72: c5:db:15:bd:12:0d:5d:34:5e:36:62:4a:48:35:91:e7:c9:9c: 8b:71:b8:53:50:7e:2d:95:5d:03:c7:e4:97:30:b7:e7:01:42: cd:52:83:f9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0nqgt55pi1+5KySIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ0MTk4ODgtODBhMC00ZmQ5LTkwYmEtNjM0MmI2Nzdm ODQ5MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWYyZTgyNGQtNzM0OC00MmM1LWE2OTItZWY2ZjdiZTEwNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphjCyd2x8qmWl0I/kHBYOV0BO5zeyDxtPiSH 27YYv5pO4HzAXb7OKLJdnGcCnPTBCTFXYyKc9MaBF1XdPKkODQ3+YcMAnh5QrqSd j119cz1EsdfifHbJzR5NmzJA1nhqC/DSNZ+BGQmKvd2paOwAmetJZtzeex++vH4w VCpBNAfHW6UbKsiDJhFW173J5uizfzPMRgzw1t23K+BFtDnv/AURVRpSLIbsP3DC 1/SMVqsbzMnwSESI3WbflQjgSmrvZ3Ii5fyhvfBPQAif0dzkGdnUJal7JiN1XCOf TDdb35keo42h8WugUjiIOX5EkE81QmP/4Zq2hNRuYDnk4M/1PwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC0hbv3QY3sRO5FEHRR7XtVKaEHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQx OTg4OC04MGEwLTRmZDktOTBiYS02MzQyYjY3N2Y4NDkvY2VmYmE2MTYtMjI2My0z ZTZlLWE3NzQtZWZkOTk3YTJkMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ0MTk4ODgtODBhMC00ZmQ5LTkw YmEtNjM0MmI2NzdmODQ5LzBkNDE5ODg4LTgwYTAtNGZkOS05MGJhLTYzNDJiNjc3 Zjg0OS5jcmwwHwYDVR0jBBgwFoAUQeDNvQAmJWZ21tpDmhJFbaSoFoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQxOTg4OC04MGEwLTRmZDktOTBiYS02MzQy YjY3N2Y4NDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3uAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKMJxlPCWp1PZEBbc4VnIqfu9w6izv6YcunToj884IIbcDb/KSU9u FuObvIEmUOVZEXM6kUmYNqELtwQpvN9OZyiQVPRa1PzMcD6rKwi6ftlvjVQSCzkH WCaahesTcV65tnCDN3oJwCOB4M385HNS+ampZ6KAPPY/iZPoSNeg2yxNxWeHgX1T ebmADRDWc/AsG07vaOWjCH2j4uR7C9XC6ZzjMdY28GQZoLpTyqNBMdjpwn24b97l x9tQaou1QyM/pz+0B1H7EWO3m/jXJ1M7rrBoGI/u431yxdsVvRINXTReNmJKSDWR 58mci3G4U1B+LZVdA8fklzC35wFCzVKD+Q== -----END CERTIFICATE-----Generated at Sat Mar 21 17:34:56 2026 by rpki-client