$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/411c832a-31d1-302a-974f-641d00d13c01.roa File: 411c832a-31d1-302a-974f-641d00d13c01.roa (raw, json) Hash identifier: 3mCZSs49GqIyU9LUSFuGrWSXBTLXoZCM/4z8huoHQ+A= Subject key identifier: 3D:4D:E5:46:72:85:22:4E:B2:60:D8:E7:42:6E:D6:E8:54:DF:90:EF Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D118016C600EB2280BEE1A680 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/411c832a-31d1-302a-974f-641d00d13c01.roa Signing time: Thu 05 Mar 2026 14:28:24 +0000 ROA not before: Thu 05 Mar 2026 14:28:24 +0000 ROA not after: Wed 03 Jun 2026 13:28:24 +0000 asID: 16740 IP address blocks: 2602:f5c1:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:80:16:c6:00:eb:22:80:be:e1:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 5 14:28:24 2026 GMT Not After : Jun 3 13:28:24 2026 GMT Subject: CN=c884dba9-ded1-4c48-b2c3-edd1e2fa6db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:ab:cc:7d:9f:db:62:29:4a:6f:b2:59:23: af:52:e0:b4:45:e3:db:b7:85:cb:89:4b:c7:c3:3b: 10:80:8c:e4:af:92:66:7a:5e:4f:04:5a:05:48:b3: f8:dd:69:fb:eb:f0:06:8b:ed:51:55:83:91:23:45: 9a:10:50:81:59:b6:c5:81:51:b5:88:c5:8a:83:19: 65:2a:43:56:a8:66:c4:58:3f:0c:c6:f5:06:2e:ff: 3d:b0:0d:f7:60:d3:96:b5:23:cd:9a:9e:81:a5:f3: 51:37:58:45:59:66:70:1e:78:74:33:df:44:d7:db: 78:b7:24:87:5c:d0:4f:be:75:95:77:60:b8:3e:82: a4:6c:87:b0:7c:d4:5d:27:0f:85:0e:a8:34:5f:03: 26:d8:9c:9a:b1:1e:ac:00:e7:6a:69:28:51:8d:a0: b4:3c:0a:86:32:2b:5c:f8:a2:60:4b:39:3f:6f:82: 22:89:39:dc:be:ea:41:58:bd:46:f6:6d:4a:20:a0: 3d:d0:43:0e:48:8e:4b:bf:81:48:06:36:55:8c:38: 2f:e5:4f:fc:d4:18:29:a3:c8:92:b6:7d:6d:95:93: a6:b0:b9:62:71:a8:4c:f5:d1:1c:d4:fc:ae:8e:28: cd:2c:d8:97:08:4d:85:80:2d:20:3f:f4:9c:80:26: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:E5:46:72:85:22:4E:B2:60:D8:E7:42:6E:D6:E8:54:DF:90:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/411c832a-31d1-302a-974f-641d00d13c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:38:30:ee:a4:a9:03:fd:01:c2:04:6d:22:0b:0c:03:05:96: 0a:e2:0d:a5:21:d6:89:b4:47:54:70:fb:e8:36:87:88:62:a0: b1:4e:84:52:c8:c2:8d:9f:c2:67:bf:65:65:a1:f1:fe:35:b0: 4f:5d:a2:d0:83:2d:d1:68:7c:4e:09:31:05:8a:29:f8:17:35: 56:d0:88:3b:28:c8:c3:b4:96:0b:24:de:66:af:f1:d1:76:4b: 3b:49:39:49:bf:71:f0:38:0d:ae:0d:8c:dc:4c:3f:39:2f:a4: 63:83:54:20:a9:b2:95:c9:81:ee:c8:9a:16:c9:25:f1:eb:73: 1f:1c:d1:b0:ce:ff:18:88:46:b8:bb:5f:a2:78:75:cf:3f:c0: 92:75:43:07:ec:f8:6a:03:53:c0:9f:8b:56:ce:96:c5:56:2a: c7:62:e6:4e:95:56:55:ea:df:51:90:1c:cb:d8:73:dd:dd:eb: ed:c2:b1:2b:a0:9c:6b:28:68:e5:9f:aa:f9:75:9f:da:a7:44: fc:e6:9a:aa:ca:cf:87:81:a3:de:83:10:79:5f:0b:ce:2e:e9: 3a:f5:9d:df:39:9c:3b:3c:d9:d7:20:ce:13:24:51:ee:b4:72: 37:45:f7:32:b8:c8:fc:a2:63:02:ee:c9:5b:10:7a:7c:04:25: f1:4d:a1:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0RgBbGAOsigL7hpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMwNTE0MjgyNFoXDTI2MDYwMzEzMjgyNFowLzEtMCsGA1UEAxMk Yzg4NGRiYTktZGVkMS00YzQ4LWIyYzMtZWRkMWUyZmE2ZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeGrzH2f22IpSm+yWSOvUuC0RePbt4XLiUvH wzsQgIzkr5Jmel5PBFoFSLP43Wn76/AGi+1RVYORI0WaEFCBWbbFgVG1iMWKgxll KkNWqGbEWD8MxvUGLv89sA33YNOWtSPNmp6BpfNRN1hFWWZwHnh0M99E19t4tySH XNBPvnWVd2C4PoKkbIewfNRdJw+FDqg0XwMm2JyasR6sAOdqaShRjaC0PAqGMitc +KJgSzk/b4IiiTncvupBWL1G9m1KIKA90EMOSI5Lv4FIBjZVjDgv5U/81Bgpo8iS tn1tlZOmsLlicahM9dEc1PyujijNLNiXCE2FgC0gP/ScgCbupwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD1N5UZyhSJOsmDY50Ju1uhU35DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNDExYzgzMmEtMzFkMS0z MDJhLTk3NGYtNjQxZDAwZDEzYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABg4MO6kqQP9AcIEbSILDAMFlgriDaUh1om0R1Rw++g2h4hioLFO hFLIwo2fwme/ZWWh8f41sE9dotCDLdFofE4JMQWKKfgXNVbQiDsoyMO0lgsk3mav 8dF2SztJOUm/cfA4Da4NjNxMPzkvpGODVCCpspXJge7ImhbJJfHrcx8c0bDO/xiI Rri7X6J4dc8/wJJ1Qwfs+GoDU8Cfi1bOlsVWKsdi5k6VVlXq31GQHMvYc93d6+3C sSugnGsoaOWfqvl1n9qnRPzmmqrKz4eBo96DEHlfC84u6Tr1nd85nDs82dcgzhMk Ue60cjdF9zK4yPyiYwLuyVsQenwEJfFNocI= -----END CERTIFICATE-----Generated at Wed Mar 11 19:03:04 2026 by rpki-client