$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/3736c4fd-a8ac-3248-b4a1-10092c1e8f59.roa File: 3736c4fd-a8ac-3248-b4a1-10092c1e8f59.roa (raw, json) Hash identifier: FZwM75JKRXTp9ROi+Id1Fj++tW8MKfRZBOKaDsB3D2c= Subject key identifier: 58:15:23:B5:A3:06:D6:D9:EF:41:B4:FC:1F:32:6A:6A:89:10:FC:87 Certificate issuer: /CN=2654343f-7862-4859-8638-b9c2008b3151 Certificate serial: 010D0C9F4328584D1597EA020E0ED2C8002D6480 Authority key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/3736c4fd-a8ac-3248-b4a1-10092c1e8f59.roa Signing time: Sat 07 Mar 2026 01:39:38 +0000 ROA not before: Sat 07 Mar 2026 01:39:38 +0000 ROA not after: Fri 05 Jun 2026 00:39:38 +0000 asID: 7201 IP address blocks: 2602:f99f:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:97:ea:02:0e:0e:d2:c8:00:2d:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2654343f-7862-4859-8638-b9c2008b3151 Validity Not Before: Mar 7 01:39:38 2026 GMT Not After : Jun 5 00:39:38 2026 GMT Subject: CN=869a37aa-b5fa-4ccf-8904-5f07f9bddb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:a8:ca:18:70:18:98:ad:69:39:c2:6d:af: 3c:64:d6:8a:c6:74:0f:47:3d:e6:bb:d2:8b:8c:2d: 9f:cc:3b:53:df:e0:d3:25:2f:9b:d5:45:f4:38:12: a0:86:25:73:c7:e1:56:36:49:1e:da:24:0e:b0:89: 09:58:b2:c7:7f:97:b1:db:eb:4e:53:7a:0a:00:60: 76:36:50:0b:47:80:34:49:56:d3:86:1c:d1:a8:ce: d0:cf:ab:b0:28:fd:fa:78:f4:a5:43:d6:c5:89:9a: 07:39:e4:c0:e3:a5:4e:10:81:ea:5b:bd:29:fe:a2: 4b:53:e2:5f:25:db:9a:d0:b1:df:e5:ec:f6:d5:f7: 73:c0:95:6a:3e:f6:b3:b6:dc:07:50:2f:1e:29:20: b6:da:31:b4:97:b2:35:63:8c:b6:e1:00:2c:27:05: ba:94:42:a0:a4:f8:e9:e7:88:55:b5:47:fb:77:43: 7d:dd:03:3e:52:76:18:4c:42:47:ef:8f:2d:c4:57: ab:73:2a:d6:e7:da:11:26:2c:37:96:0e:8f:b6:77: 52:c4:d9:e2:7e:bd:e2:df:1e:fc:08:9a:f7:7b:cb: 85:65:2d:d6:22:2b:e9:32:ac:07:c0:4e:0e:01:a1: 7e:77:66:a5:0c:f6:6e:f7:9e:72:72:70:30:5a:54: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:23:B5:A3:06:D6:D9:EF:41:B4:FC:1F:32:6A:6A:89:10:FC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/3736c4fd-a8ac-3248-b4a1-10092c1e8f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.crl X509v3 Authority Key Identifier: keyid:9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99f:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:72:84:e9:54:8a:11:a5:dc:22:80:8d:cc:d1:3d:a7:df:4e: 62:b5:66:0d:4e:4f:c7:f1:86:d2:d9:dd:e9:25:31:91:cf:4d: 64:d6:d2:69:55:b4:0e:ad:9e:01:b6:98:1e:08:97:d2:31:8a: df:b1:ab:43:28:08:c2:ba:29:d7:a9:1b:24:0e:5a:55:63:66: 6f:f9:6e:e7:ad:20:48:93:55:8a:79:38:95:0c:6a:98:de:6d: f3:d1:f2:dd:b2:d9:1a:79:d3:38:7e:bb:67:e7:aa:10:20:bd: 42:a7:e0:60:2e:55:83:4d:6e:fa:0a:5d:6e:07:1c:ec:2b:64: c0:2b:5d:ad:c1:df:6d:e5:cc:66:82:7e:ec:e1:d6:a5:85:d0: d0:2a:b3:a3:f6:5f:e6:63:c7:c7:2b:34:8a:44:e1:90:52:93: fb:e0:df:7e:ac:88:46:3e:75:d7:70:3b:cd:4c:16:bd:d4:c4: 4b:ea:3d:89:24:de:d9:83:08:a9:25:9f:d6:41:f0:a0:51:40: 76:fc:a6:98:63:7e:bf:ab:b2:51:2e:e1:54:bd:dd:c2:4b:9e: e6:31:18:7b:52:20:70:aa:58:ad:af:a5:55:89:6b:b7:71:49: 3f:8a:2d:d6:7d:34:bb:2f:f5:17:b1:e6:0c:b0:55:84:ea:9a: 10:02:8e:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Vl+oCDg7SyAAtZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjY1NDM0M2YtNzg2Mi00ODU5LTg2MzgtYjljMjAwOGIz MTUxMB4XDTI2MDMwNzAxMzkzOFoXDTI2MDYwNTAwMzkzOFowLzEtMCsGA1UEAxMk ODY5YTM3YWEtYjVmYS00Y2NmLTg5MDQtNWYwN2Y5YmRkYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTyoyhhwGJitaTnCba88ZNaKxnQPRz3mu9KL jC2fzDtT3+DTJS+b1UX0OBKghiVzx+FWNkke2iQOsIkJWLLHf5ex2+tOU3oKAGB2 NlALR4A0SVbThhzRqM7Qz6uwKP36ePSlQ9bFiZoHOeTA46VOEIHqW70p/qJLU+Jf Jdua0LHf5ez21fdzwJVqPvazttwHUC8eKSC22jG0l7I1Y4y24QAsJwW6lEKgpPjp 54hVtUf7d0N93QM+UnYYTEJH748txFercyrW59oRJiw3lg6PtndSxNnifr3i3x78 CJr3e8uFZS3WIivpMqwHwE4OAaF+d2alDPZu955ycnAwWlRMsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgVI7WjBtbZ70G0/B8yamqJEPyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNjU0 MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4YjMxNTEvMzczNmM0ZmQtYThhYy0z MjQ4LWI0YTEtMTAwOTJjMWU4ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjY1NDM0M2YtNzg2Mi00ODU5LTg2 MzgtYjljMjAwOGIzMTUxLzI2NTQzNDNmLTc4NjItNDg1OS04NjM4LWI5YzIwMDhi MzE1MS5jcmwwHwYDVR0jBBgwFoAUnRBVd/Isk1w3HyAYScRHGGUtgi4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMy MDA4YjMxNTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5nwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZyhOlUihGl3CKAjczRPaffTmK1Zg1OT8fxhtLZ3eklMZHPTWTW 0mlVtA6tngG2mB4Il9Ixit+xq0MoCMK6KdepGyQOWlVjZm/5buetIEiTVYp5OJUM apjebfPR8t2y2Rp50zh+u2fnqhAgvUKn4GAuVYNNbvoKXW4HHOwrZMArXa3B323l zGaCfuzh1qWF0NAqs6P2X+Zjx8crNIpE4ZBSk/vg336siEY+dddwO81MFr3UxEvq PYkk3tmDCKkln9ZB8KBRQHb8pphjfr+rslEu4VS93cJLnuYxGHtSIHCqWK2vpVWJ a7dxST+KLdZ9NLsv9Rex5gywVYTqmhACjsk= -----END CERTIFICATE-----Generated at Sat Mar 14 14:25:39 2026 by rpki-client