$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa File: 85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa (raw, json) Hash identifier: Sdb9ZbLTKF9XXMAns62IvEgKUTZTTXZdJWVFZECAUI0= Subject key identifier: DA:7A:29:95:A4:E7:5F:77:3C:93:A6:70:77:3A:6D:6D:B7:E3:A6:AB Certificate issuer: /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Certificate serial: 010D0C9F4328584D0D0A8C0CFBDA518783374D80 Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa Signing time: Wed 04 Mar 2026 00:08:20 +0000 ROA not before: Wed 04 Mar 2026 00:08:20 +0000 ROA not after: Mon 01 Jun 2026 23:08:20 +0000 asID: 16509 IP address blocks: 2602:815:b081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:0a:8c:0c:fb:da:51:87:83:37:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695 Validity Not Before: Mar 4 00:08:20 2026 GMT Not After : Jun 1 23:08:20 2026 GMT Subject: CN=4cf40bc4-3a5d-45e4-a57c-769e6144d64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:bb:89:f0:75:59:70:7b:f8:ee:a1:6c:78: 1b:9c:f0:b8:ed:0c:0f:1f:1a:91:98:97:8b:31:09: 70:4a:6d:09:b0:18:ec:b3:bf:4f:01:b4:21:fe:5a: 27:ea:27:d8:4f:6f:d2:73:52:9c:2a:11:0b:7a:cb: 38:d7:36:b2:e1:74:fc:e5:30:89:4c:ed:16:84:78: 9b:20:15:8a:90:4f:ce:68:6c:da:d4:15:6a:0a:02: 32:ac:03:0c:5c:68:90:8a:ee:ef:d6:47:68:10:0f: 24:59:2f:38:06:69:98:2a:4e:d5:85:17:57:d5:95: 74:70:fd:dd:f0:81:b4:cf:dc:0e:cc:5c:98:46:db: 89:d3:20:b4:c5:4f:a5:67:47:b5:0d:70:de:91:a3: 57:e7:40:d8:d5:4e:98:bf:e9:8e:f7:ec:fe:58:db: ad:34:5b:c4:d3:06:b5:e5:52:2c:72:81:d3:54:bf: 02:a5:d4:eb:aa:79:19:f3:7d:67:9f:b9:3e:8e:1e: a8:ef:36:f4:cd:09:5e:01:64:3d:33:1b:bb:73:5f: 61:a1:56:56:c1:50:30:71:ed:01:74:45:d6:ce:77: e0:15:85:ca:f2:e5:f4:f2:97:ff:86:c5:d2:14:d4: 8f:6f:d4:d9:fe:36:35:13:6c:bf:f2:ad:08:79:d6: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7A:29:95:A4:E7:5F:77:3C:93:A6:70:77:3A:6D:6D:B7:E3:A6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/85c4e5a1-af4e-3bf6-987a-40b13b37b0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl X509v3 Authority Key Identifier: keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer sbgp-ipAddrBlock: critical IPv6: 2602:815:b081::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:66:3e:43:dc:53:79:c1:ed:53:8b:f1:dc:08:c0:05:9a:82: 83:c4:69:11:25:06:ac:a1:5b:f7:11:05:a3:e7:09:f4:ca:ea: 9e:cc:2b:b9:98:da:eb:a1:5b:2f:1a:0c:d3:b2:ca:d0:28:99: 5e:fa:cc:c0:a0:e2:1c:5c:8a:08:34:ca:b9:51:0d:9c:21:64: 7c:08:a3:2f:53:46:21:0e:b5:54:2e:c1:62:ac:18:6a:0f:99: c9:58:c8:46:ca:d1:9b:d6:1b:14:57:b6:c5:02:bb:01:83:b1: d8:20:4d:f8:a4:60:3f:0c:26:ff:15:f9:f8:eb:f1:55:09:af: c7:50:92:0b:66:59:1c:fc:e5:52:89:82:7a:af:28:da:e5:d1: a5:08:26:51:4f:6b:b3:57:e9:ef:7c:35:1d:01:ca:e2:07:3b: 5b:2a:e1:e5:90:61:04:a6:4e:3d:a9:71:99:3e:c2:1a:6d:60: e4:7a:a3:89:2d:6c:b0:10:5c:f7:98:af:85:12:f7:6b:df:6f: 42:b4:68:ff:f0:7b:0a:ff:fd:03:11:22:59:f6:de:65:4e:20: b0:cc:df:e3:73:ba:69:de:c4:bd:e6:8f:29:21:a3:df:95:18: f5:6d:ab:d0:aa:0f:70:a1:db:b6:4a:a1:47:01:d4:33:d2:3f: fd:d4:5d:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NCowM+9pRh4M3TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiYTJmYTItZmFkYy00YzFiLTkxMWYtNmY0MTE2NGU5 Njk1MB4XDTI2MDMwNDAwMDgyMFoXDTI2MDYwMTIzMDgyMFowLzEtMCsGA1UEAxMk NGNmNDBiYzQtM2E1ZC00NWU0LWE1N2MtNzY5ZTYxNDRkNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsm7ifB1WXB7+O6hbHgbnPC47QwPHxqRmJeL MQlwSm0JsBjss79PAbQh/lon6ifYT2/Sc1KcKhELess41zay4XT85TCJTO0WhHib IBWKkE/OaGza1BVqCgIyrAMMXGiQiu7v1kdoEA8kWS84BmmYKk7VhRdX1ZV0cP3d 8IG0z9wOzFyYRtuJ0yC0xU+lZ0e1DXDekaNX50DY1U6Yv+mO9+z+WNutNFvE0wa1 5VIscoHTVL8CpdTrqnkZ831nn7k+jh6o7zb0zQleAWQ9Mxu7c19hoVZWwVAwce0B dEXWznfgFYXK8uX08pf/hsXSFNSPb9TZ/jY1E2y/8q0IedbTjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNp6KZWk5193PJOmcHc6bW2346arMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZmJh MmZhMi1mYWRjLTRjMWItOTExZi02ZjQxMTY0ZTk2OTUvODVjNGU1YTEtYWY0ZS0z YmY2LTk4N2EtNDBiMTNiMzdiMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGZiYTJmYTItZmFkYy00YzFiLTkx MWYtNmY0MTE2NGU5Njk1LzRmYmEyZmEyLWZhZGMtNGMxYi05MTFmLTZmNDExNjRl OTY5NS5jcmwwHwYDVR0jBBgwFoAUEw3ejkIX+yDaaId7Is50uWqN9V8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZmJhMmZhMi1mYWRjLTRjMWItOTExZi02ZjQx MTY0ZTk2OTUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFbCB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlmPkPcU3nB7VOL8dwIwAWagoPEaRElBqyhW/cRBaPnCfTK6p7M K7mY2uuhWy8aDNOyytAomV76zMCg4hxcigg0yrlRDZwhZHwIoy9TRiEOtVQuwWKs GGoPmclYyEbK0ZvWGxRXtsUCuwGDsdggTfikYD8MJv8V+fjr8VUJr8dQkgtmWRz8 5VKJgnqvKNrl0aUIJlFPa7NX6e98NR0ByuIHO1sq4eWQYQSmTj2pcZk+whptYOR6 o4ktbLAQXPeYr4US92vfb0K0aP/wewr//QMRIln23mVOILDM3+NzumnexL3mjykh o9+VGPVtq9CqD3Ch27ZKoUcB1DPSP/3UXcE= -----END CERTIFICATE-----Generated at Thu Mar 19 12:31:10 2026 by rpki-client