$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/c2587296-745d-3478-894d-dffc700db286.roa File: c2587296-745d-3478-894d-dffc700db286.roa (raw, json) Hash identifier: /Tkr9NAgz/0hdYvpRFCShI8X82IlUhaMydtdm4+qB8U= Subject key identifier: 41:A1:47:2E:C4:67:AE:5C:55:11:5A:2F:A1:28:D7:FB:82:CB:D7:CC Certificate issuer: /CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Certificate serial: 010D0C9F4328584D2A74DC16278B286392AB8200 Authority key identifier: 29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/c2587296-745d-3478-894d-dffc700db286.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 63208 IP address blocks: 2602:f499::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:dc:16:27:8b:28:63:92:ab:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cfd68f-5452-437e-b80d-ac981dd1cf19 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=b688086d-c181-4d65-ae52-41850a6ac1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a4:9f:ce:06:a7:e7:15:34:3b:5b:a7:41:e1: 21:ac:76:42:62:c4:84:03:78:a3:8e:9e:ea:e5:9a: 9b:83:85:d6:3f:a5:e0:05:41:39:89:7f:26:95:f3: 9e:4f:b4:58:8b:1b:04:c2:a8:18:45:3b:66:e2:a0: e8:cf:b2:72:c7:e1:f2:ed:12:76:cc:e0:00:12:51: 2d:48:f0:1e:78:c5:a9:f7:9f:2b:07:a7:2f:47:6a: 72:4c:6e:40:96:bb:e8:0f:00:97:98:c9:32:26:18: e1:2b:42:d8:2f:4a:df:cc:d9:bc:1d:59:34:32:01: f6:27:36:a2:54:81:f2:94:1d:80:cf:3b:bc:ae:30: 33:32:7d:ec:94:a7:45:12:29:a8:b6:fc:03:a7:0d: 7c:4b:f2:d9:c2:26:69:e7:9f:c4:17:30:93:4a:c4: 4d:58:00:8b:aa:6b:c5:5e:de:6d:70:30:3b:0f:7c: 24:81:7b:c7:59:ab:10:81:72:66:69:c9:a7:c1:2b: ea:d7:1c:fe:95:6b:c3:be:b0:d1:4a:4f:70:81:53: 1d:44:64:e8:83:b1:f4:1e:78:ff:03:8e:d1:d0:9f: 0e:91:04:56:9c:b8:81:68:b0:1e:04:cd:9c:b2:83: a1:9a:17:e7:3d:8f:33:a2:c4:63:1e:a6:57:66:ff: a3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A1:47:2E:C4:67:AE:5C:55:11:5A:2F:A1:28:D7:FB:82:CB:D7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/c2587296-745d-3478-894d-dffc700db286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19/43cfd68f-5452-437e-b80d-ac981dd1cf19.crl X509v3 Authority Key Identifier: keyid:29:A4:87:A5:2C:40:C1:F8:27:FA:9B:9F:22:FE:5C:CF:9E:ED:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/43cfd68f-5452-437e-b80d-ac981dd1cf19.cer sbgp-ipAddrBlock: critical IPv6: 2602:f499::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d5:b7:54:f2:9d:c5:bb:c9:02:6a:11:c6:e1:3e:73:05:d2: 6d:89:e4:ae:5f:94:24:90:ce:92:36:56:09:59:32:e7:5e:f6: 1b:2e:eb:3e:89:81:b8:22:de:d6:a4:7c:6e:59:a0:6b:68:d6: 8d:51:5d:4c:35:c6:27:2d:6b:a5:b6:be:f9:1a:c1:24:2b:cc: 7e:6c:8b:97:88:48:7c:bc:de:3a:cd:5f:ca:b1:db:f1:88:e1: 6b:7e:10:12:17:29:93:c8:93:57:56:62:24:1b:9b:ac:90:f8: 81:0e:e5:7a:55:c9:0f:14:9a:3c:6a:8f:03:ee:df:92:15:28: 96:1c:bf:0d:38:63:c0:8c:2b:a8:83:22:1b:4d:d3:18:86:08: 6a:b5:f2:0f:94:3f:2e:99:8a:31:b8:64:81:0f:a0:b1:f8:c4: 1e:d7:85:ea:52:7f:e3:92:17:27:63:ae:15:cd:ca:3f:63:31: ec:57:2d:2a:e6:96:5d:e6:8a:4a:1f:12:97:c5:2f:41:b2:fe: 35:97:60:7c:64:a2:0f:8f:19:39:e1:10:5a:4d:3f:42:36:16: 8c:d6:53:77:1b:ed:fb:b7:ae:88:dd:35:c5:69:9d:14:c1:3e: 7e:d9:e8:5b:37:17:45:2a:b0:00:82:17:e7:66:1d:28:80:79: 24:27:03:b4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0qdNwWJ4soY5KrggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4MGQtYWM5ODFkZDFj ZjE5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YjY4ODA4NmQtYzE4MS00ZDY1LWFlNTItNDE4NTBhNmFjMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaSfzgan5xU0O1unQeEhrHZCYsSEA3ijjp7q 5Zqbg4XWP6XgBUE5iX8mlfOeT7RYixsEwqgYRTtm4qDoz7Jyx+Hy7RJ2zOAAElEt SPAeeMWp958rB6cvR2pyTG5AlrvoDwCXmMkyJhjhK0LYL0rfzNm8HVk0MgH2Jzai VIHylB2Azzu8rjAzMn3slKdFEimotvwDpw18S/LZwiZp55/EFzCTSsRNWACLqmvF Xt5tcDA7D3wkgXvHWasQgXJmacmnwSvq1xz+lWvDvrDRSk9wgVMdRGTog7H0Hnj/ A47R0J8OkQRWnLiBaLAeBM2csoOhmhfnPY8zosRjHqZXZv+j6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEGhRy7EZ65cVRFaL6Eo1/uCy9fMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80M2Nm ZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4MWRkMWNmMTkvYzI1ODcyOTYtNzQ1ZC0z NDc4LTg5NGQtZGZmYzcwMGRiMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDNjZmQ2OGYtNTQ1Mi00MzdlLWI4 MGQtYWM5ODFkZDFjZjE5LzQzY2ZkNjhmLTU0NTItNDM3ZS1iODBkLWFjOTgxZGQx Y2YxOS5jcmwwHwYDVR0jBBgwFoAUKaSHpSxAwfgn+pufIv5cz57tHB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80M2NmZDY4Zi01NDUyLTQzN2UtYjgwZC1hYzk4 MWRkMWNmMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0mQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAYtW3VPKdxbvJAmoRxuE+cwXSbYnkrl+UJJDOkjZWCVky5172Gy7r PomBuCLe1qR8blmga2jWjVFdTDXGJy1rpba++RrBJCvMfmyLl4hIfLzeOs1fyrHb 8Yjha34QEhcpk8iTV1ZiJBubrJD4gQ7lelXJDxSaPGqPA+7fkhUolhy/DThjwIwr qIMiG03TGIYIarXyD5Q/LpmKMbhkgQ+gsfjEHteF6lJ/45IXJ2OuFc3KP2Mx7Fct KuaWXeaKSh8Sl8UvQbL+NZdgfGSiD48ZOeEQWk0/QjYWjNZTdxvt+7euiN01xWmd FME+ftnoWzcXRSqwAIIX52YdKIB5JCcDtA== -----END CERTIFICATE-----Generated at Sun Mar 15 06:05:33 2026 by rpki-client