$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa File: 68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa (raw, json) Hash identifier: oxlQ2BPNG84CvM+oLMMeJB28brCZtDLr06iAtn9q7OY= Subject key identifier: 81:2B:DB:D5:96:78:4D:7D:51:B8:CC:FE:68:E9:CC:48:45:B2:71:ED Certificate issuer: /CN=01def58b-19a6-4ba2-b063-220466ef629f Certificate serial: 010D0C9F4328584DEC7B47D5DC3DD508508E6A80 Authority key identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 402247 IP address blocks: 2602:f43b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:47:d5:dc:3d:d5:08:50:8e:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01def58b-19a6-4ba2-b063-220466ef629f Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=6731b4ee-45f6-4c14-a023-7cde4c8e95c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:83:f5:88:21:f9:3f:6c:b3:63:02:c4:68: 9d:e2:1a:48:e5:c6:46:86:cf:b0:07:e5:c7:8b:a7: 7a:bd:3b:6f:d3:5e:dc:87:94:e5:a2:91:c8:fc:21: cf:53:5d:0a:21:7b:e0:b7:61:d1:d6:97:8c:50:3a: 44:34:5c:0c:97:31:0a:7b:da:c8:2f:58:22:f7:60: 34:51:ae:e3:b7:54:3e:69:e4:75:ad:d6:e2:46:34: ed:29:52:77:1f:37:1c:a3:db:e9:ea:16:c5:9f:76: b9:30:fc:59:f0:06:52:47:d7:e3:a7:4d:eb:17:c2: 0a:84:6d:da:a5:80:7f:6e:96:b7:28:f4:60:b2:5e: e4:48:d5:76:97:76:49:1d:5e:2f:95:33:1e:0e:3a: 16:b8:7b:20:a3:ac:23:ad:00:33:92:0a:b1:1f:38: ae:03:28:2b:13:4b:49:ca:09:a0:f4:ba:d6:0c:f8: 88:1d:87:2d:32:36:04:5f:93:3b:e9:8c:51:ac:a0: 06:fb:92:6a:5c:44:26:11:0f:e3:28:c5:f9:41:26: ac:f2:3c:a7:db:2d:88:c9:d0:f7:ac:e4:ab:d9:a1: f9:83:65:c7:33:03:00:f8:ca:9b:88:36:78:9e:ad: 8c:21:f0:5b:2f:d6:76:9a:49:35:78:81:8e:45:42: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:DB:D5:96:78:4D:7D:51:B8:CC:FE:68:E9:CC:48:45:B2:71:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/68f7095a-88f1-3327-9ed2-4ec83ac6587e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.crl X509v3 Authority Key Identifier: keyid:2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f43b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:43:ed:84:2d:6f:8c:95:ab:c7:af:fc:52:53:d9:64:bd:06: b5:ec:23:b6:5a:a2:67:c9:9b:80:45:5d:9b:9b:e6:ff:40:83: cb:35:d4:bd:21:f7:12:cb:ac:9e:5d:73:bd:59:9f:1f:82:2d: 71:66:87:a4:a7:a8:28:fb:8a:9d:20:98:fe:91:eb:f1:3e:27: 59:7f:f7:9d:f3:26:b8:ab:8e:d2:b1:67:52:68:ec:db:3e:33: da:bd:71:08:46:05:39:48:46:23:43:42:61:95:7d:ef:dd:cc: 0f:1b:03:18:8e:2b:0b:e9:9d:b9:85:8c:84:44:ab:8d:29:76: fb:e4:d7:5c:e1:37:52:0c:e8:d1:1c:80:e1:23:c4:cf:45:07: 34:70:c9:e2:36:3c:37:67:b9:e4:b8:3a:1d:fa:33:d8:aa:e0: 8a:26:38:e5:8c:1a:27:4f:9e:56:87:e2:bf:26:43:13:6a:55: 6b:23:25:f5:ee:96:a3:52:de:8b:51:2b:38:4b:35:14:6b:0c: 2b:e4:a6:e8:f5:64:e4:8e:0f:78:77:b3:35:16:53:1c:be:1e: ad:9d:45:ba:66:bd:e1:2c:ab:fd:a1:60:f1:1f:58:6d:a1:92: f7:db:52:6e:ae:2c:0d:da:20:90:41:14:d7:57:8d:43:a2:ed: e6:7e:95:24 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3se0fV3D3VCFCOaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFkZWY1OGItMTlhNi00YmEyLWIwNjMtMjIwNDY2ZWY2 MjlmMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk NjczMWI0ZWUtNDVmNi00YzE0LWEwMjMtN2NkZTRjOGU5NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzaD9Ygh+T9ss2MCxGid4hpI5cZGhs+wB+XH i6d6vTtv017ch5TlopHI/CHPU10KIXvgt2HR1peMUDpENFwMlzEKe9rIL1gi92A0 Ua7jt1Q+aeR1rdbiRjTtKVJ3Hzcco9vp6hbFn3a5MPxZ8AZSR9fjp03rF8IKhG3a pYB/bpa3KPRgsl7kSNV2l3ZJHV4vlTMeDjoWuHsgo6wjrQAzkgqxHziuAygrE0tJ ygmg9LrWDPiIHYctMjYEX5M76YxRrKAG+5JqXEQmEQ/jKMX5QSas8jyn2y2IydD3 rOSr2aH5g2XHMwMA+MqbiDZ4nq2MIfBbL9Z2mkk1eIGORUKa+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIEr29WWeE19UbjM/mjpzEhFsnHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRl ZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0NjZlZjYyOWYvNjhmNzA5NWEtODhmMS0z MzI3LTllZDItNGVjODNhYzY1ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDFkZWY1OGItMTlhNi00YmEyLWIw NjMtMjIwNDY2ZWY2MjlmLzAxZGVmNThiLTE5YTYtNGJhMi1iMDYzLTIyMDQ2NmVm NjI5Zi5jcmwwHwYDVR0jBBgwFoAUK9hlRqqMkIySm19brCrm3ntZXIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMWRlZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0 NjZlZjYyOWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0OwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAhUPthC1vjJWrx6/8UlPZZL0GtewjtlqiZ8mbgEVdm5vm/0CDyzXU vSH3Esusnl1zvVmfH4ItcWaHpKeoKPuKnSCY/pHr8T4nWX/3nfMmuKuO0rFnUmjs 2z4z2r1xCEYFOUhGI0NCYZV9793MDxsDGI4rC+mduYWMhESrjSl2++TXXOE3Ugzo 0RyA4SPEz0UHNHDJ4jY8N2e55Lg6Hfoz2KrgiiY45YwaJ0+eVofivyZDE2pVayMl 9e6Wo1Lei1ErOEs1FGsMK+Sm6PVk5I4PeHezNRZTHL4erZ1Fuma94Syr/aFg8R9Y baGS99tSbq4sDdogkEEU11eNQ6Lt5n6VJA== -----END CERTIFICATE-----Generated at Thu Jun 4 18:20:52 2026 by rpki-client