$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa File: 8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa (raw, json) Hash identifier: B99P190IncYtjmjQ57Y0pqK6jQVjSji2wgwPwBrdkf0= Subject key identifier: 30:72:45:6A:68:06:D8:CC:C0:4C:60:DE:3B:2D:84:6C:DF:06:A7:C8 Certificate issuer: /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382 Certificate serial: 010D0C9F4328584D5F7FB3EF18D0274FE8D56D18 Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 402004 IP address blocks: 2602:f54e:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b3:ef:18:d0:27:4f:e8:d5:6d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=e682586e-2959-40bb-aaad-0447c5dd7041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:15:e5:23:cf:aa:84:7d:60:66:e5:d1:1c:6b: ac:77:b4:88:dc:54:ac:60:c2:df:17:51:af:9f:fc: 9e:05:e1:b3:21:10:ee:47:f6:be:97:db:7b:97:5c: 38:c9:b7:e3:24:1a:c9:a6:64:f1:54:0b:ea:44:19: 44:1d:a3:ff:41:73:2a:8f:1c:42:80:d7:41:d3:15: 61:ba:4a:9e:32:43:81:df:93:6f:ff:8e:e0:bf:86: f8:28:bf:23:94:45:b3:33:7a:31:68:d3:47:06:7f: 7e:03:5f:1b:51:44:03:f6:6c:5f:97:1a:10:38:96: 5d:dd:ec:b0:ea:3c:04:ac:8d:04:65:07:c0:43:c8: 03:d2:ce:50:eb:6b:f3:50:d3:70:a3:2e:ff:56:91: f3:3d:2c:92:f9:1d:af:2d:31:b3:a3:fb:46:e4:9f: c1:97:91:7b:e1:ff:8b:4b:11:54:c1:5f:ed:65:07: 8a:62:47:f8:c8:0c:ed:3d:6f:50:f1:3e:87:ce:43: cf:61:57:a4:18:19:35:83:95:ed:3b:44:34:e3:6b: 07:84:2e:a7:ec:16:f1:42:02:c4:20:33:d0:0c:cb: d6:7f:db:a4:33:3f:5e:a1:60:32:09:8e:39:c2:fb: 11:35:00:00:58:d6:dd:ca:da:29:d7:08:c5:77:7c: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:72:45:6A:68:06:D8:CC:C0:4C:60:DE:3B:2D:84:6C:DF:06:A7:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/8021d1c0-d9f2-3469-a6fa-37212e5567b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl X509v3 Authority Key Identifier: keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer sbgp-ipAddrBlock: critical IPv6: 2602:f54e:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:aa:25:d7:b5:a4:f0:7c:42:4a:53:e0:0b:61:f5:26:a9:ab: 28:51:8f:bc:4d:66:50:72:3d:e9:f5:42:01:a1:98:62:4d:f5: b6:24:72:b6:25:82:b5:69:1c:1d:a4:a9:d3:79:3d:d6:c4:2f: 24:16:55:88:c9:f4:2a:64:6c:53:17:05:0c:29:5d:13:88:9c: 85:31:4e:ed:0d:bf:db:40:2d:ef:52:80:f6:16:21:69:f0:9a: 8d:8c:a4:f1:21:e2:c2:11:84:fc:cb:13:11:4e:6a:c0:af:86: 25:cb:e6:1f:e7:1b:c2:3e:90:24:6e:7b:b8:6f:e8:b6:ac:74: 11:11:c1:20:4a:f2:a7:55:69:64:9a:21:e0:06:df:9c:11:d4: 4f:ce:b4:53:a0:64:88:05:ac:0e:98:30:56:91:d1:64:b9:0d: c8:1e:90:59:ed:40:c0:a1:48:a6:6f:c9:5e:92:a4:10:8b:b0: a4:b6:01:0f:7e:43:b1:e8:fd:d4:3a:81:aa:f9:b3:89:5f:aa: 0e:b8:6a:2a:58:8b:80:09:00:d5:63:ea:24:d3:72:aa:5d:ff: c0:36:ce:1f:6b:f3:97:26:3a:69:ba:2b:e8:a9:4b:1e:35:47: f4:14:e4:98:aa:e6:d1:ea:89:5b:e0:2a:22:4d:e9:fd:3e:b9: f5:68:ee:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff7PvGNAnT+jVbRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI2N2YyMGYtMjBkMS00YjVlLTliYzAtNDBlZTFlZDI2 MzgyMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTY4MjU4NmUtMjk1OS00MGJiLWFhYWQtMDQ0N2M1ZGQ3MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBXlI8+qhH1gZuXRHGusd7SI3FSsYMLfF1Gv n/yeBeGzIRDuR/a+l9t7l1w4ybfjJBrJpmTxVAvqRBlEHaP/QXMqjxxCgNdB0xVh ukqeMkOB35Nv/47gv4b4KL8jlEWzM3oxaNNHBn9+A18bUUQD9mxflxoQOJZd3eyw 6jwErI0EZQfAQ8gD0s5Q62vzUNNwoy7/VpHzPSyS+R2vLTGzo/tG5J/Bl5F74f+L SxFUwV/tZQeKYkf4yAztPW9Q8T6HzkPPYVekGBk1g5XtO0Q042sHhC6n7BbxQgLE IDPQDMvWf9ukMz9eoWAyCY45wvsRNQAAWNbdytop1wjFd3z4twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDByRWpoBtjMwExg3jsthGzfBqfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3 ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVlMWVkMjYzODIvODAyMWQxYzAtZDlmMi0z NDY5LWE2ZmEtMzcyMTJlNTU2N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDI2N2YyMGYtMjBkMS00YjVlLTli YzAtNDBlZTFlZDI2MzgyLzQyNjdmMjBmLTIwZDEtNGI1ZS05YmMwLTQwZWUxZWQy NjM4Mi5jcmwwHwYDVR0jBBgwFoAUX21pncc06OH6jrPIbyQeQ0NJw7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVl MWVkMjYzODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1TgAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+qJde1pPB8QkpT4Ath9SapqyhRj7xNZlByPen1QgGhmGJN9bYk crYlgrVpHB2kqdN5PdbELyQWVYjJ9CpkbFMXBQwpXROInIUxTu0Nv9tALe9SgPYW IWnwmo2MpPEh4sIRhPzLExFOasCvhiXL5h/nG8I+kCRue7hv6LasdBERwSBK8qdV aWSaIeAG35wR1E/OtFOgZIgFrA6YMFaR0WS5DcgekFntQMChSKZvyV6SpBCLsKS2 AQ9+Q7Ho/dQ6gar5s4lfqg64aipYi4AJANVj6iTTcqpd/8A2zh9r85cmOmm6K+ip Sx41R/QU5Jiq5tHqiVvgKiJN6f0+ufVo7m4= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:14 2026 by rpki-client