$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa File: 4db9529a-f1c2-3000-a17a-ee4910ce4131.roa (raw, json) Hash identifier: fJtd44wzX7LzJGrb6Vr9SKaD93bZKeQgNrOeRotcUvs= Subject key identifier: 83:2E:48:F1:EB:64:36:EA:90:61:66:ED:A1:BB:18:D2:3E:D1:CE:06 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D186CF99DF3B4F93C83009680 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa Signing time: Sun 08 Mar 2026 02:00:31 +0000 ROA not before: Sun 08 Mar 2026 02:00:31 +0000 ROA not after: Sat 06 Jun 2026 01:00:31 +0000 asID: 16740 IP address blocks: 2602:f5c1:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:18:6c:f9:9d:f3:b4:f9:3c:83:00:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 8 02:00:31 2026 GMT Not After : Jun 6 01:00:31 2026 GMT Subject: CN=e70f6f5e-b154-4a23-962a-7d8eb0c52309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3a:df:19:71:90:ac:b9:1e:dc:3e:e5:c9:70: 70:35:02:b1:0b:6e:81:c6:b6:e9:bd:78:fe:e1:a1: 76:a1:17:7f:fe:93:9e:3d:c2:2a:f8:41:9c:77:54: 99:99:35:47:5c:e4:6a:2a:4d:e4:c3:82:84:dc:bd: c2:e3:d3:53:8f:d0:68:fa:e2:f4:0c:3d:ad:11:10: ce:af:ca:0b:06:bc:da:72:fa:14:19:f1:5f:d3:d3: a7:52:d4:c9:53:3e:85:78:8e:7d:3e:19:d1:1c:77: 41:f9:6e:a0:b2:1d:46:3c:37:95:41:0c:f9:2d:7b: 78:6c:b2:9e:97:a2:50:26:69:d0:5b:f7:65:e0:bc: b6:29:a4:85:6c:63:a8:17:87:be:f7:17:04:7b:3f: 4b:0e:11:08:18:62:83:cc:6f:c4:26:f8:bb:72:6f: 6e:ef:80:07:c7:45:77:bf:ca:56:41:0d:67:1c:a7: f2:04:8d:ee:90:a4:be:da:c7:2e:fa:be:60:45:4a: c6:1c:04:98:eb:d1:fe:75:5e:98:c3:72:5a:8b:72: be:8b:51:c9:4b:b1:0e:d8:68:96:a8:7f:63:ba:2c: 8e:79:8e:f0:67:a5:95:ea:7d:98:be:63:b8:8c:2d: cf:99:30:48:93:f2:a8:8c:22:2a:04:90:90:04:e6: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2E:48:F1:EB:64:36:EA:90:61:66:ED:A1:BB:18:D2:3E:D1:CE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4db9529a-f1c2-3000-a17a-ee4910ce4131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6b:e4:e1:d5:76:46:f7:8f:27:2b:15:43:3f:d8:79:d3:b7: 63:24:76:84:5b:d9:5b:3c:62:aa:2d:94:42:2c:a2:21:54:fe: 16:a4:66:9c:39:d2:6f:40:f4:31:16:9f:1b:bb:2a:20:bc:2a: 45:1f:a1:9d:0c:0c:16:bd:2f:ff:3d:55:f8:05:fc:33:df:a4: 29:27:29:ff:7f:73:09:99:c0:19:4c:67:17:30:e4:84:9c:31: 7c:a4:84:13:41:98:b8:67:21:46:ad:84:0b:49:03:9a:8a:a3: 9b:df:de:85:52:d2:e3:3c:5f:55:9f:52:fe:95:dd:be:15:6e: 19:af:2b:6e:13:9e:88:14:95:e3:e7:e9:3f:f3:4f:ac:9d:80: 4c:c2:34:f8:ea:34:e8:aa:c3:4c:f0:b2:ed:4e:3c:16:63:ca: d2:ca:4c:9c:75:74:0e:df:93:16:b0:73:88:55:3d:20:cb:d6: 46:d7:9a:25:79:05:7d:c5:a5:0b:8f:da:fe:de:64:1a:e3:1c: 6f:10:4a:f3:a6:91:16:7c:05:3f:aa:d0:04:18:a4:c5:d5:d1: 8c:85:8d:36:63:32:11:0f:4f:de:73:21:b5:21:c7:58:78:d7: 87:de:f6:43:e7:b5:51:4f:4d:1b:5a:25:b1:89:b4:8d:bb:d4: 5e:c1:a7:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0YbPmd87T5PIMAloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMwODAyMDAzMVoXDTI2MDYwNjAxMDAzMVowLzEtMCsGA1UEAxMk ZTcwZjZmNWUtYjE1NC00YTIzLTk2MmEtN2Q4ZWIwYzUyMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzrfGXGQrLke3D7lyXBwNQKxC26BxrbpvXj+ 4aF2oRd//pOePcIq+EGcd1SZmTVHXORqKk3kw4KE3L3C49NTj9Bo+uL0DD2tERDO r8oLBrzacvoUGfFf09OnUtTJUz6FeI59PhnRHHdB+W6gsh1GPDeVQQz5LXt4bLKe l6JQJmnQW/dl4Ly2KaSFbGOoF4e+9xcEez9LDhEIGGKDzG/EJvi7cm9u74AHx0V3 v8pWQQ1nHKfyBI3ukKS+2scu+r5gRUrGHASY69H+dV6Yw3Jai3K+i1HJS7EO2GiW qH9juiyOeY7wZ6WV6n2YvmO4jC3PmTBIk/KojCIqBJCQBOZEmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMuSPHrZDbqkGFm7aG7GNI+0c4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGRiOTUyOWEtZjFjMi0z MDAwLWExN2EtZWU0OTEwY2U0MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpr5OHVdkb3jycrFUM/2HnTt2MkdoRb2Vs8YqotlEIsoiFU/hak Zpw50m9A9DEWnxu7KiC8KkUfoZ0MDBa9L/89VfgF/DPfpCknKf9/cwmZwBlMZxcw 5IScMXykhBNBmLhnIUathAtJA5qKo5vf3oVS0uM8X1WfUv6V3b4VbhmvK24TnogU lePn6T/zT6ydgEzCNPjqNOiqw0zwsu1OPBZjytLKTJx1dA7fkxawc4hVPSDL1kbX miV5BX3FpQuP2v7eZBrjHG8QSvOmkRZ8BT+q0AQYpMXV0YyFjTZjMhEPT95zIbUh x1h414fe9kPntVFPTRtaJbGJtI271F7Bp8E= -----END CERTIFICATE-----Generated at Wed Mar 11 19:05:22 2026 by rpki-client