$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa File: 68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa (raw, json) Hash identifier: q44b9sgJ2gn5Bqg/PLv2wfFv7zYZkpmNgcE0fc1Eeis= Subject key identifier: 22:2E:C4:0A:D1:BF:0C:E9:D4:37:54:A7:53:16:15:06:B1:4D:F4:10 Certificate issuer: /CN=01def58b-19a6-4ba2-b063-220466ef629f Certificate serial: 010D0C9F4328584D0C6A57B11506E2253C2FEC80 Authority key identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa Signing time: Tue 03 Mar 2026 18:45:33 +0000 ROA not before: Tue 03 Mar 2026 18:45:33 +0000 ROA not after: Mon 01 Jun 2026 17:45:33 +0000 asID: 402247 IP address blocks: 2602:f43b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:6a:57:b1:15:06:e2:25:3c:2f:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01def58b-19a6-4ba2-b063-220466ef629f Validity Not Before: Mar 3 18:45:33 2026 GMT Not After : Jun 1 17:45:33 2026 GMT Subject: CN=2354bd06-1390-45a4-b73f-8c45ff9292e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:9c:60:b7:1a:0e:b6:fc:32:17:b9:f7:86: b2:45:62:70:d5:da:5d:d6:a1:79:94:cc:28:d5:4c: 84:51:e8:5c:d4:df:91:cc:30:6d:bd:55:02:6c:e8: f0:70:18:c9:7f:e4:36:b2:b3:77:e5:a2:b8:92:d4: d4:b3:69:83:3b:21:66:9f:04:8e:83:e8:17:58:fc: 38:6f:f9:8f:6e:3f:0a:d3:44:a1:bd:4a:37:b7:f6: 02:39:c7:d4:fe:25:00:0c:42:4e:aa:19:73:c5:99: 93:18:a5:bd:e9:cb:41:47:8f:1c:0c:38:c3:f1:b8: bf:86:8d:8d:73:37:8d:8a:25:c9:fb:58:d0:e3:f6: c6:d8:01:d5:b9:02:e8:21:0c:03:94:32:28:4b:4b: 15:76:cd:09:3e:e7:c4:3f:cb:dd:89:e7:34:c6:1a: 31:cb:c2:b4:1d:6a:ea:80:d2:4d:15:e6:aa:c5:94: 4d:ac:b7:50:91:ee:16:ca:ba:7f:52:66:a1:b1:66: d9:50:df:e5:93:94:02:14:9f:6b:ed:5e:77:c0:86: cd:bb:20:02:9f:e8:6c:b0:84:46:b7:3d:f5:97:ae: bd:7f:89:15:e3:ca:40:18:0b:e3:44:49:a7:c0:82: b7:c2:a8:df:c9:bb:5a:e9:2a:aa:f9:19:96:16:92: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2E:C4:0A:D1:BF:0C:E9:D4:37:54:A7:53:16:15:06:B1:4D:F4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl X509v3 Authority Key Identifier: keyid:2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f43b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:22:63:fc:67:aa:61:5b:21:14:86:96:e2:3c:23:92:3a:4e: 09:55:c0:1a:20:8c:33:33:dd:e2:f1:5d:36:7b:bf:69:f7:17: 74:1c:0e:40:91:c3:80:55:67:44:dd:51:5b:1d:77:44:c7:c9: a1:c4:53:2a:d4:23:3a:7d:f3:db:3e:12:1b:d4:65:3f:83:44: c2:b1:07:42:22:a9:ab:77:04:b1:61:5d:a7:da:55:cf:3a:98: 38:5d:d1:0c:a2:9e:04:27:ab:39:76:6e:ad:6d:9d:36:ee:d5: b8:99:84:52:fb:22:3a:1b:e5:44:cb:93:09:3c:2e:a2:3a:5d: 78:16:0b:72:f5:52:df:94:1a:31:11:74:5d:d9:12:72:97:f8: 00:41:e5:7f:6a:b7:00:02:b7:eb:f9:08:5a:83:ac:02:2f:88: 75:a6:18:1e:92:90:63:7a:20:9b:85:a1:67:37:8a:7e:41:35: b7:0b:16:2e:63:51:13:56:b0:e7:0d:9d:e9:7b:85:d0:df:0f: 2a:93:bb:e5:a7:06:85:35:30:c5:a2:bf:c7:44:6f:da:d6:0f: cc:95:92:f7:b1:72:ec:b6:36:6b:7b:75:74:ae:40:73:84:f7: 76:ff:b0:7f:11:98:ed:3a:ac:c2:00:46:31:9a:0d:e6:dc:f0: 66:04:c9:97 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0MalexFQbiJTwv7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFkZWY1OGItMTlhNi00YmEyLWIwNjMtMjIwNDY2ZWY2 MjlmMB4XDTI2MDMwMzE4NDUzM1oXDTI2MDYwMTE3NDUzM1owLzEtMCsGA1UEAxMk MjM1NGJkMDYtMTM5MC00NWE0LWI3M2YtOGM0NWZmOTI5MmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wmcYLcaDrb8Mhe594ayRWJw1dpd1qF5lMwo 1UyEUehc1N+RzDBtvVUCbOjwcBjJf+Q2srN35aK4ktTUs2mDOyFmnwSOg+gXWPw4 b/mPbj8K00ShvUo3t/YCOcfU/iUADEJOqhlzxZmTGKW96ctBR48cDDjD8bi/ho2N czeNiiXJ+1jQ4/bG2AHVuQLoIQwDlDIoS0sVds0JPufEP8vdiec0xhoxy8K0HWrq gNJNFeaqxZRNrLdQke4Wyrp/UmahsWbZUN/lk5QCFJ9r7V53wIbNuyACn+hssIRG tz31l669f4kV48pAGAvjREmnwIK3wqjfybta6Sqq+RmWFpJKewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCIuxArRvwzp1DdUp1MWFQaxTfQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRl ZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0NjZlZjYyOWYvNjhmNzA5NWEtODhmMS0z MzI3LTllZDItNGVjODNhYzY1ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDFkZWY1OGItMTlhNi00YmEyLWIw NjMtMjIwNDY2ZWY2MjlmLzAxZGVmNThiLTE5YTYtNGJhMi1iMDYzLTIyMDQ2NmVm NjI5Zi5jcmwwHwYDVR0jBBgwFoAUK9hlRqqMkIySm19brCrm3ntZXIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRlZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0 NjZlZjYyOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0OwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGCJj/GeqYVshFIaW4jwjkjpOCVXAGiCMMzPd4vFdNnu/afcXdBwO QJHDgFVnRN1RWx13RMfJocRTKtQjOn3z2z4SG9RlP4NEwrEHQiKpq3cEsWFdp9pV zzqYOF3RDKKeBCerOXZurW2dNu7VuJmEUvsiOhvlRMuTCTwuojpdeBYLcvVS35Qa MRF0XdkScpf4AEHlf2q3AAK36/kIWoOsAi+IdaYYHpKQY3ogm4WhZzeKfkE1twsW LmNRE1aw5w2d6XuF0N8PKpO75acGhTUwxaK/x0Rv2tYPzJWS97Fy7LY2a3t1dK5A c4T3dv+wfxGY7TqswgBGMZoN5tzwZgTJlw== -----END CERTIFICATE-----Generated at Thu Mar 5 18:40:27 2026 by rpki-client