$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa File: 4caf6023-3853-3da6-8889-75c7be2a7114.roa (raw, json) Hash identifier: QYtyRYaaGHRsSlImQpAMs70LLgdv5mTHs79UFUuGJSc= Subject key identifier: E3:59:06:65:E4:B6:CF:BE:71:A9:58:66:49:5D:AC:46:6E:E6:32:E5 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D146D5F48B01A6EE1BC417020 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa Signing time: Fri 06 Mar 2026 15:38:07 +0000 ROA not before: Fri 06 Mar 2026 15:38:07 +0000 ROA not after: Thu 04 Jun 2026 14:38:07 +0000 asID: 16740 IP address blocks: 2602:f5c1:32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:5f:48:b0:1a:6e:e1:bc:41:70:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 6 15:38:07 2026 GMT Not After : Jun 4 14:38:07 2026 GMT Subject: CN=ec4195e4-e3a1-4145-ac57-bc203ad9ee21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:4c:82:4b:d0:fd:40:f6:f4:ab:24:0f:d3: 01:cb:7d:26:e9:fb:f0:d7:21:6e:be:35:1c:ba:d0: 05:df:38:c7:78:5b:74:e9:6d:21:fe:23:6b:0b:c0: 1a:81:af:ec:9d:ef:03:73:d5:c1:4b:c1:0c:41:9c: a7:c1:a7:e4:14:6d:01:64:90:d6:9d:c2:59:84:3f: e3:f0:8b:00:f5:a8:d2:65:44:41:95:29:9f:15:9e: 4d:da:b9:33:6c:00:8b:2b:86:f9:48:11:cc:70:d1: 9d:05:c0:64:16:45:38:86:54:35:cf:8c:34:28:02: 1a:01:52:37:a7:69:6d:b5:03:1e:75:53:d7:db:d2: 03:f1:8b:88:67:43:11:23:e0:6a:bb:e2:b6:2d:11: 6c:32:ef:b7:69:1d:84:61:de:34:1a:10:02:2c:ac: 28:65:c3:ac:12:68:de:aa:cd:23:17:fe:cc:42:86: eb:1c:ce:47:4f:e4:83:af:7e:9e:be:bf:34:09:86: 08:3c:aa:b9:e0:b9:4e:86:b0:10:b0:61:04:1c:13: c2:14:1c:d3:c3:6b:2d:83:fc:80:3a:50:ff:f2:3b: a1:82:63:41:bc:f3:81:92:7a:42:86:16:80:e2:94: 13:a4:37:0e:ab:83:ee:3c:0a:fc:30:8a:18:c5:8a: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:59:06:65:E4:B6:CF:BE:71:A9:58:66:49:5D:AC:46:6E:E6:32:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4caf6023-3853-3da6-8889-75c7be2a7114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:32::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:98:e8:75:d4:1d:af:a5:50:23:79:7e:e2:0e:8d:ea:2c:fc: 9d:01:1d:d7:92:15:9e:87:dd:64:c3:1e:71:19:31:61:8c:27: 4c:a2:5b:77:d9:07:64:67:cb:76:02:59:cc:bc:79:1d:70:9a: 87:78:91:f2:7b:55:4f:e9:29:02:18:cf:07:bb:08:97:9a:06: f0:8b:6f:51:ac:ca:9e:62:4a:3c:47:15:b6:98:d8:4b:b9:f7: 9c:ba:03:79:25:0e:4b:7f:b1:7f:3f:e6:4f:00:d8:7b:e2:f8: eb:31:0f:ce:f8:83:7b:9a:e2:27:50:e4:3d:ce:50:34:76:b4: 54:a4:00:e5:61:4a:3c:0b:e9:77:21:8e:ff:a9:34:0f:b7:f1: c6:13:56:77:7c:16:67:6f:30:06:35:2f:6b:73:f1:c6:ba:bf: f9:75:8f:51:3c:4e:d0:21:4f:f4:51:4a:c5:29:90:cb:05:b9: 64:63:4a:7d:00:c3:99:48:45:15:ef:73:08:e1:bb:6a:f3:fc: 20:0a:51:1b:56:7b:3b:b8:f8:dd:e9:9b:ad:96:1a:fa:bc:77: e4:93:d4:2e:26:fe:32:5e:ff:b0:5f:8f:1c:bf:1d:6d:b7:b0: 90:e4:28:81:0f:f5:c4:33:cd:7d:07:da:2b:ab:41:d1:24:21: 73:b9:69:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UbV9IsBpu4bxBcCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMwNjE1MzgwN1oXDTI2MDYwNDE0MzgwN1owLzEtMCsGA1UEAxMk ZWM0MTk1ZTQtZTNhMS00MTQ1LWFjNTctYmMyMDNhZDllZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO1MgkvQ/UD29KskD9MBy30m6fvw1yFuvjUc utAF3zjHeFt06W0h/iNrC8Aaga/sne8Dc9XBS8EMQZynwafkFG0BZJDWncJZhD/j 8IsA9ajSZURBlSmfFZ5N2rkzbACLK4b5SBHMcNGdBcBkFkU4hlQ1z4w0KAIaAVI3 p2lttQMedVPX29ID8YuIZ0MRI+Bqu+K2LRFsMu+3aR2EYd40GhACLKwoZcOsEmje qs0jF/7MQobrHM5HT+SDr36evr80CYYIPKq54LlOhrAQsGEEHBPCFBzTw2stg/yA OlD/8juhgmNBvPOBknpChhaA4pQTpDcOq4PuPAr8MIoYxYpEvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFONZBmXkts++calYZkldrEZu5jLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGNhZjYwMjMtMzg1My0z ZGE2LTg4ODktNzVjN2JlMmE3MTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAISY6HXUHa+lUCN5fuIOjeos/J0BHdeSFZ6H3WTDHnEZMWGMJ0yi W3fZB2Rny3YCWcy8eR1wmod4kfJ7VU/pKQIYzwe7CJeaBvCLb1Gsyp5iSjxHFbaY 2Eu595y6A3klDkt/sX8/5k8A2Hvi+OsxD874g3ua4idQ5D3OUDR2tFSkAOVhSjwL 6Xchjv+pNA+38cYTVnd8FmdvMAY1L2tz8ca6v/l1j1E8TtAhT/RRSsUpkMsFuWRj Sn0Aw5lIRRXvcwjhu2rz/CAKURtWezu4+N3pm62WGvq8d+ST1C4m/jJe/7Bfjxy/ HW23sJDkKIEP9cQzzX0H2iurQdEkIXO5aZM= -----END CERTIFICATE-----Generated at Wed Mar 11 19:06:38 2026 by rpki-client