$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa File: 1d043c19-75aa-3747-a0b3-d122a5895fe4.roa (raw, json) Hash identifier: VC3Q7R1QxNP4a7ScStb7TbSPdoJLbTiyzTIhRqvo4BQ= Subject key identifier: 85:6D:21:12:DA:D9:C0:21:00:42:55:B5:7F:86:CA:46:2B:8B:55:EF Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584D4D5A3BB1222C5FA2819A7580 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 401185 IP address blocks: 2602:f655::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:3b:b1:22:2c:5f:a2:81:9a:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ea3ae97a-65df-4d28-a021-9521f7f7540b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:25:00:2e:dd:0c:fe:f0:cc:f4:ba:b2:03: dc:6e:16:c6:79:57:75:e2:5e:f3:48:c9:2a:1d:3c: 78:d6:3c:2f:f6:22:86:1f:72:9f:72:f8:93:9a:5e: ff:61:57:7a:26:c1:08:9c:5b:c1:7f:7c:25:5d:8e: 03:a0:57:36:d4:f6:68:f3:a9:3a:93:7c:04:f2:79: c8:25:37:e1:da:66:9e:b5:ca:51:38:23:49:f8:c5: 0c:d0:cd:bd:da:60:6d:f3:59:ee:94:75:64:04:6a: 9c:58:a8:4b:ef:50:e5:aa:7e:08:e1:b6:e5:2f:42: 5e:e0:24:70:47:8c:78:cf:f4:65:bd:4d:24:df:f4: 47:9f:0f:58:58:af:a7:27:46:28:85:13:6c:86:8a: ab:66:55:3b:80:6d:bc:dd:55:3f:2b:a3:34:5d:11: 3f:fb:bd:cc:18:e5:de:9f:e5:48:35:93:e6:e1:d6: 4f:71:58:05:35:04:32:13:5e:60:9b:09:a2:98:5c: ec:60:09:a8:e1:72:f8:ef:b6:26:69:33:eb:6c:67: c0:a1:20:4f:46:49:ce:a0:9f:74:8a:a6:db:88:70: df:27:ef:b6:0a:98:4a:d8:53:9f:94:48:45:fc:20: 56:89:9b:24:57:93:5d:e7:09:35:4f:59:f7:a7:19: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:21:12:DA:D9:C0:21:00:42:55:B5:7F:86:CA:46:2B:8B:55:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/1d043c19-75aa-3747-a0b3-d122a5895fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f655::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:44:13:b3:86:8e:61:32:8d:b6:75:30:42:b4:21:e0:68:3a: c5:7f:a1:f9:27:1b:16:05:58:50:b0:d6:df:e4:01:4c:c2:8f: 42:2a:03:34:40:a1:92:45:c4:3e:30:b3:36:5f:46:a0:d5:32: fd:ec:b2:42:23:39:a8:72:64:d5:72:af:2c:e0:b9:db:53:20: 08:d6:42:fb:fd:9c:56:d2:2f:36:51:9f:6c:35:18:46:b9:29: 39:51:84:75:e0:8a:ea:bb:d4:c3:23:15:a1:ce:bf:97:40:4b: 88:5c:ab:f1:88:5b:c6:88:ec:fd:af:ba:4e:27:88:0b:f7:83: 1a:a5:e8:a5:79:25:9c:33:ee:7a:da:04:b2:ef:a5:7a:e0:b8: f4:b8:55:f4:3a:a3:e1:18:bb:2c:66:a2:79:bb:8e:63:04:7d: 10:31:da:c8:f1:67:74:38:e1:d7:ca:a3:08:54:37:78:6e:e7: ed:85:6a:b5:30:dd:5f:2a:76:16:40:7a:83:17:e4:5f:8c:50: aa:01:3a:11:e5:97:6e:b6:6d:84:e7:d6:cd:cd:0c:a5:1d:42: cd:89:2f:24:09:a3:49:10:19:9d:c6:e4:a2:26:5f:e0:65:fa: 06:51:23:38:68:15:c6:6e:25:6f:9e:13:29:ac:95:e5:b0:96: 4f:a6:36:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWjuxIixfooGadYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZWEzYWU5N2EtNjVkZi00ZDI4LWEwMjEtOTUyMWY3Zjc1NDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3YlAC7dDP7wzPS6sgPcbhbGeVd14l7zSMkq HTx41jwv9iKGH3KfcviTml7/YVd6JsEInFvBf3wlXY4DoFc21PZo86k6k3wE8nnI JTfh2maetcpROCNJ+MUM0M292mBt81nulHVkBGqcWKhL71Dlqn4I4bblL0Je4CRw R4x4z/RlvU0k3/RHnw9YWK+nJ0YohRNshoqrZlU7gG283VU/K6M0XRE/+73MGOXe n+VINZPm4dZPcVgFNQQyE15gmwmimFzsYAmo4XL477YmaTPrbGfAoSBPRknOoJ90 iqbbiHDfJ++2CphK2FOflEhF/CBWiZskV5Nd5wk1T1n3pxki0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVtIRLa2cAhAEJVtX+GykYri1XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvMWQwNDNjMTktNzVhYS0z NzQ3LWEwYjMtZDEyMmE1ODk1ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL2VQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdEE7OGjmEyjbZ1MEK0IeBoOsV/ofknGxYFWFCw1t/kAUzCj0Iq AzRAoZJFxD4wszZfRqDVMv3sskIjOahyZNVyryzgudtTIAjWQvv9nFbSLzZRn2w1 GEa5KTlRhHXgiuq71MMjFaHOv5dAS4hcq/GIW8aI7P2vuk4niAv3gxql6KV5JZwz 7nraBLLvpXrguPS4VfQ6o+EYuyxmonm7jmMEfRAx2sjxZ3Q44dfKowhUN3hu5+2F arUw3V8qdhZAeoMX5F+MUKoBOhHll262bYTn1s3NDKUdQs2JLyQJo0kQGZ3G5KIm X+Bl+gZRIzhoFcZuJW+eEymsleWwlk+mNlE= -----END CERTIFICATE-----Generated at Wed Apr 15 15:56:42 2026 by rpki-client