$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa File: b8cf2895-ac49-3412-9f96-565f1707b420.roa (raw, json) Hash identifier: Apux8QDXGc9PeC+T0l9Y27TsxcAc4jm3lZeXjMTWc6U= Subject key identifier: 3F:12:1F:5D:18:D7:C1:40:33:6B:D1:13:D0:FB:0E:94:BE:7D:11:83 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D1DE48EEBBF8A7F1940B50B80 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 16740 IP address blocks: 2602:f5c1:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:8e:eb:bf:8a:7f:19:40:b5:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=2cf8d863-773e-4afe-aeaf-903aba1425c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:e8:5d:f6:08:02:8b:4a:6f:57:86:58:52: 0e:00:dd:e4:c0:fc:71:a9:66:c5:5d:eb:88:2b:9b: 69:fd:ce:a2:e6:ec:c9:7b:01:cb:b2:9f:a9:af:d4: 58:7f:06:5a:c6:83:57:89:85:90:ab:33:51:15:dd: e3:55:8b:07:ee:30:82:cf:da:0b:0a:01:22:d6:77: 62:de:0d:d9:56:1f:e9:c7:6e:e8:9c:8e:0e:55:58: eb:11:42:5b:8c:ee:5c:da:32:a3:1a:aa:76:29:17: 0d:11:f5:29:32:a8:29:b7:6a:57:4e:b6:da:d2:8e: 0c:82:e6:ba:cb:72:36:3e:d2:13:e8:e0:c7:11:7d: 2a:ed:98:a4:dc:77:07:c5:14:b7:d2:a1:6c:bf:83: 8a:91:3c:46:f3:7d:82:a2:51:64:37:f1:fc:fd:a8: 54:78:db:d4:c6:03:63:b8:b0:06:c6:e0:0d:88:08: 06:13:57:fa:e4:ea:60:86:5b:cf:92:45:e5:0c:fe: f5:4a:b1:4c:89:a1:1b:92:ce:7e:49:a8:81:91:4b: fe:b1:e7:eb:1f:f3:c9:cd:37:fb:72:91:bc:4a:98: 22:41:f9:a6:24:20:4d:9d:c4:67:88:a8:7a:a8:45: d9:46:4e:c5:67:2c:ee:d8:36:e6:12:67:7b:37:d9: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:12:1F:5D:18:D7:C1:40:33:6B:D1:13:D0:FB:0E:94:BE:7D:11:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/b8cf2895-ac49-3412-9f96-565f1707b420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:b1:ac:09:aa:62:23:eb:a8:83:b3:ef:d6:81:22:78:0c:13: f5:0a:cb:22:c8:08:a9:03:2d:c2:d5:39:0c:2d:e2:a9:da:84: 80:fb:02:2a:61:e9:c5:7c:ef:44:61:c4:80:bd:06:a7:cb:a4: 91:7f:43:f3:3b:6c:3b:61:74:f7:40:2a:86:81:e1:78:2b:d8: 7c:11:52:f8:11:2b:a2:0a:c5:09:4d:9d:d5:f6:d6:0c:0c:40: 54:07:e4:72:eb:64:fe:c3:23:12:d7:63:e4:72:d9:75:dd:27: 9a:f1:9c:af:92:a9:d6:5b:a8:97:fe:b7:e7:4f:6f:46:67:33: cf:89:d4:2d:a8:5b:65:e2:1a:fa:1e:8f:d0:5d:50:de:12:79: d9:6e:2d:28:21:44:39:73:6c:92:59:61:2a:c1:7c:48:55:3a: b2:85:19:6a:dc:2b:a2:32:3e:24:29:7b:68:a1:b0:11:12:23: e6:7c:dc:98:d7:d1:6c:c2:c3:2d:c6:de:e2:29:3b:30:e9:4c: 49:08:37:7a:5d:7c:69:fa:9e:ce:4e:ef:7c:a4:0f:f6:82:ff: 63:fe:76:96:39:f5:69:a0:5e:5c:8a:e7:95:ac:61:5b:30:46: 38:df:ef:e8:6f:c0:6a:3e:e6:2d:0d:db:1e:71:5f:1c:da:ec: 44:4d:48:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0d5I7rv4p/GUC1C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk MmNmOGQ4NjMtNzczZS00YWZlLWFlYWYtOTAzYWJhMTQyNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3zoXfYIAotKb1eGWFIOAN3kwPxxqWbFXeuI K5tp/c6i5uzJewHLsp+pr9RYfwZaxoNXiYWQqzNRFd3jVYsH7jCCz9oLCgEi1ndi 3g3ZVh/px27onI4OVVjrEUJbjO5c2jKjGqp2KRcNEfUpMqgpt2pXTrba0o4Mgua6 y3I2PtIT6ODHEX0q7Zik3HcHxRS30qFsv4OKkTxG832ColFkN/H8/ahUeNvUxgNj uLAGxuANiAgGE1f65OpghlvPkkXlDP71SrFMiaEbks5+SaiBkUv+sefrH/PJzTf7 cpG8SpgiQfmmJCBNncRniKh6qEXZRk7FZyzu2DbmEmd7N9kDuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8SH10Y18FAM2vRE9D7DpS+fRGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYjhjZjI4OTUtYWM0OS0z NDEyLTlmOTYtNTY1ZjE3MDdiNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALOxrAmqYiPrqIOz79aBIngME/UKyyLICKkDLcLVOQwt4qnahID7 Aiph6cV870RhxIC9BqfLpJF/Q/M7bDthdPdAKoaB4Xgr2HwRUvgRK6IKxQlNndX2 1gwMQFQH5HLrZP7DIxLXY+Ry2XXdJ5rxnK+SqdZbqJf+t+dPb0ZnM8+J1C2oW2Xi Gvoej9BdUN4SedluLSghRDlzbJJZYSrBfEhVOrKFGWrcK6IyPiQpe2ihsBESI+Z8 3JjX0WzCwy3G3uIpOzDpTEkIN3pdfGn6ns5O73ykD/aC/2P+dpY59WmgXlyK55Ws YVswRjjf7+hvwGo+5i0N2x5xXxza7ERNSDQ= -----END CERTIFICATE-----Generated at Wed Mar 11 19:05:32 2026 by rpki-client