$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/67a00e61-3f59-3872-a158-c54bb565c571.roa File: 67a00e61-3f59-3872-a158-c54bb565c571.roa (raw, json) Hash identifier: 3DpXm8bG8X7gDkUVMf1iW9IlUhrztNcZ/kMVAkVEBf0= Subject key identifier: 30:CA:74:B4:1C:65:1A:BA:80:54:95:36:07:5E:50:6D:73:44:A2:C8 Certificate issuer: /CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Certificate serial: 010D0C9F4328584D3B00FC8D8652F3B7374C17C0 Authority key identifier: 89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/67a00e61-3f59-3872-a158-c54bb565c571.roa Signing time: Fri 20 Mar 2026 11:16:15 +0000 ROA not before: Fri 20 Mar 2026 11:16:15 +0000 ROA not after: Thu 18 Jun 2026 11:16:15 +0000 asID: 18636 IP address blocks: 2602:f4f2:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:00:fc:8d:86:52:f3:b7:37:4c:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9 Validity Not Before: Mar 20 11:16:15 2026 GMT Not After : Jun 18 11:16:15 2026 GMT Subject: CN=cb860624-2f73-4c9f-a507-33e95d05653e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:41:6c:79:ad:74:1b:17:ac:5c:6c:e8:21: 26:fa:6d:be:ae:07:5c:5d:dc:3d:e7:15:b6:9a:e7: d4:00:b5:09:e6:77:43:cf:f6:7e:79:9f:94:24:c4: f3:da:f0:ff:9b:21:16:54:5f:df:2a:f7:7d:00:ec: 08:0f:91:11:99:01:8e:4c:a4:b2:01:c0:d0:cd:e6: cc:91:70:69:ae:50:09:23:d9:e4:7d:d4:fb:6a:18: 4e:2b:f3:e3:60:8f:77:2b:24:36:47:82:7d:10:d2: 23:85:14:45:c8:a5:db:d5:a3:f5:29:d5:a6:f2:25: 12:dd:fe:c0:34:30:79:08:b4:23:fa:49:c0:6a:3a: 96:91:ee:e4:d8:fe:e5:7f:c2:ff:25:cf:20:ad:0f: 6e:b0:33:d7:cf:20:d6:33:c8:ad:17:32:76:23:da: e3:16:b3:1a:01:c7:07:5b:7a:9e:76:ca:af:00:cc: 8b:8e:ce:5d:57:dd:ca:bd:41:ee:21:31:6d:9b:13: 91:c7:81:04:cb:34:02:4d:46:f2:f6:13:5e:7d:d6: 37:22:23:94:66:c0:49:ca:bf:b5:5e:f3:64:33:02: 9e:5a:08:4c:06:f9:21:d2:3e:fa:2a:55:d7:10:90: 3a:f8:b5:72:e0:4d:e7:24:ca:17:9a:f7:91:0d:ff: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CA:74:B4:1C:65:1A:BA:80:54:95:36:07:5E:50:6D:73:44:A2:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/67a00e61-3f59-3872-a158-c54bb565c571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.crl X509v3 Authority Key Identifier: keyid:89:FB:57:4B:38:7C:D1:A6:73:70:36:7D:2D:E7:E5:A5:2B:B5:69:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ec367bb0-a6e0-4769-9e93-e8e9b6a1acb9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f4f2:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ce:63:db:95:28:ec:af:c2:be:b5:68:86:e7:4b:39:19:74: 18:d1:47:b1:30:51:92:82:d5:e5:1d:1d:95:18:4f:ac:7c:15: 94:e8:b0:fa:ad:a4:47:44:d4:c2:cc:11:e8:b0:9d:36:04:85: 0a:1c:a2:55:ee:82:26:bf:30:89:9e:b3:5f:bd:c5:a1:24:84: cc:50:ba:b5:dc:72:5f:48:43:6c:36:bc:68:03:6a:67:3c:09: 3f:47:c3:9e:a8:b4:db:20:05:50:b5:88:99:e5:0b:cd:13:8d: 44:a5:73:a6:56:21:4b:ad:3a:e7:3b:a3:1e:f6:89:64:4f:b9: 22:8e:68:5c:63:96:36:56:6a:26:c3:71:b9:e9:a8:e1:5a:36: 07:a2:e2:53:3e:0b:38:d8:05:c6:d2:ef:f6:29:39:f5:98:35: c7:fe:f6:8b:7c:2f:0e:c8:76:10:4d:99:24:5f:7f:77:db:b1: 0a:f5:13:d1:93:97:32:6e:58:9d:ee:57:c9:7b:6a:68:ab:e4: bf:62:11:0d:f0:a9:06:b1:1c:b0:b7:b1:f3:4d:64:ef:cf:9b: 3c:52:e7:80:a0:7b:dc:f8:4e:04:dc:cf:c6:c3:33:da:6e:48: 02:20:ce:ac:8b:8f:72:2e:f5:3f:a2:6e:a2:6b:68:62:79:33: d1:3a:a3:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07APyNhlLztzdMF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMzNjdiYjAtYTZlMC00NzY5LTllOTMtZThlOWI2YTFh Y2I5MB4XDTI2MDMyMDExMTYxNVoXDTI2MDYxODExMTYxNVowLzEtMCsGA1UEAxMk Y2I4NjA2MjQtMmY3My00YzlmLWE1MDctMzNlOTVkMDU2NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna1BbHmtdBsXrFxs6CEm+m2+rgdcXdw95xW2 mufUALUJ5ndDz/Z+eZ+UJMTz2vD/myEWVF/fKvd9AOwID5ERmQGOTKSyAcDQzebM kXBprlAJI9nkfdT7ahhOK/PjYI93KyQ2R4J9ENIjhRRFyKXb1aP1KdWm8iUS3f7A NDB5CLQj+knAajqWke7k2P7lf8L/Jc8grQ9usDPXzyDWM8itFzJ2I9rjFrMaAccH W3qedsqvAMyLjs5dV93KvUHuITFtmxORx4EEyzQCTUby9hNefdY3IiOUZsBJyr+1 XvNkMwKeWghMBvkh0j76KlXXEJA6+LVy4E3nJMoXmveRDf/RQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDKdLQcZRq6gFSVNgdeUG1zRKLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2 N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5YjZhMWFjYjkvNjdhMDBlNjEtM2Y1OS0z ODcyLWExNTgtYzU0YmI1NjVjNTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWMzNjdiYjAtYTZlMC00NzY5LTll OTMtZThlOWI2YTFhY2I5L2VjMzY3YmIwLWE2ZTAtNDc2OS05ZTkzLWU4ZTliNmEx YWNiOS5jcmwwHwYDVR0jBBgwFoAUiftXSzh80aZzcDZ9LeflpSu1aZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYzM2N2JiMC1hNmUwLTQ3NjktOWU5My1lOGU5 YjZhMWFjYjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL08gAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvOY9uVKOyvwr61aIbnSzkZdBjRR7EwUZKC1eUdHZUYT6x8FZTo sPqtpEdE1MLMEeiwnTYEhQocolXugia/MImes1+9xaEkhMxQurXccl9IQ2w2vGgD amc8CT9Hw56otNsgBVC1iJnlC80TjUSlc6ZWIUutOuc7ox72iWRPuSKOaFxjljZW aibDcbnpqOFaNgei4lM+CzjYBcbS7/YpOfWYNcf+9ot8Lw7IdhBNmSRff3fbsQr1 E9GTlzJuWJ3uV8l7amir5L9iEQ3wqQaxHLC3sfNNZO/PmzxS54Cge9z4TgTcz8bD M9puSAIgzqyLj3Iu9T+ibqJraGJ5M9E6o/k= -----END CERTIFICATE-----Generated at Sat Mar 28 21:30:02 2026 by rpki-client