$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa File: 2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa (raw, json) Hash identifier: KTlb6PKcradFLSLjimnX6/0Tlc+SQYLiVqP176Db3Oc= Subject key identifier: 14:F7:20:F3:D2:36:3F:14:93:1C:38:7C:56:A7:48:4E:B2:D4:65:24 Certificate issuer: /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Certificate serial: 010D0C9F4328584D492A5CAC49396518D8E8EA80 Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 395437 IP address blocks: 2605:5a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5c:ac:49:39:65:18:d8:e8:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=028345d1-68dc-492d-9ceb-727614886fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:08:5e:cf:28:22:e8:71:23:5c:94:38:d0: 94:d4:ad:a9:2f:56:1b:6c:71:50:37:c1:83:86:67: ee:5c:8f:34:c7:f6:57:67:04:9c:b5:20:ce:2b:65: 73:ad:8a:1b:cf:3b:83:8d:67:3c:60:9f:5f:79:76: f9:c8:3f:35:ff:2b:d4:d3:6b:07:ce:0e:cf:49:7c: f1:45:ec:f8:03:18:cb:87:a0:aa:6a:47:65:db:32: e6:3b:23:2f:93:1b:eb:84:89:ba:69:91:31:37:78: 0e:af:44:91:f9:b8:47:bc:9a:9f:12:ac:89:88:60: 27:26:2f:de:7b:41:61:2d:7f:34:f7:7d:79:5e:82: d1:20:c1:12:d1:b1:96:88:52:2b:e4:92:ce:83:00: 35:58:dd:8b:3c:e5:5a:04:2f:9a:82:fc:23:8d:49: d0:b9:8b:b7:eb:fe:2a:36:56:4e:d1:4a:9d:78:0d: 8f:96:fe:56:8c:d1:b6:99:d8:e0:30:94:fe:06:86: 4d:7d:92:4f:a0:ec:c0:29:ed:5e:28:20:8e:77:f3: 1b:f5:9b:9f:8e:64:0e:a1:c6:3f:a9:31:7f:5c:a1: 46:07:20:07:25:00:9b:6a:61:05:d8:0a:49:5d:32: 4c:48:ff:1b:3f:28:38:0c:8a:f6:f8:1c:d1:c0:14: ae:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F7:20:F3:D2:36:3F:14:93:1C:38:7C:56:A7:48:4E:B2:D4:65:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl X509v3 Authority Key Identifier: keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer sbgp-ipAddrBlock: critical IPv6: 2605:5a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:47:fe:66:c8:a1:f4:6a:c4:83:a4:b3:68:bc:6a:54:c5:39: b8:1e:85:5c:39:cc:29:9c:a7:2b:2b:80:69:f3:95:9f:fc:d3: c9:c3:ac:22:9f:5d:a2:c6:32:4e:9d:0e:0b:6e:c2:52:f5:f4: f9:4a:9e:79:62:c5:c7:47:de:6c:c1:3c:78:46:4a:a2:9d:c5: c9:f0:af:99:59:76:bc:cd:e4:34:72:11:1d:02:d5:15:f4:82: 86:d3:be:97:17:6c:90:05:e3:47:8d:82:78:0a:bb:01:70:e9: 82:36:3a:0e:ba:71:32:40:e2:85:f5:f7:6a:38:c2:8a:eb:9f: d0:c8:b5:07:aa:cc:41:29:c4:a8:bd:9e:96:08:c5:18:1d:6e: b0:cb:f6:81:6e:e1:e9:c3:0b:72:fe:ed:2e:7f:58:ec:02:a4: d6:dd:98:31:3b:fe:27:a1:19:22:12:b6:5a:7d:45:20:9c:92: dc:f6:e9:19:62:df:08:f1:f4:e8:49:85:a3:77:02:a0:9a:34: 07:31:df:9d:96:45:2c:45:14:08:d4:4c:95:46:f2:dc:f8:63: 28:0b:e3:1d:44:f3:79:18:25:53:ee:a7:42:8b:93:92:e2:24: 7c:ff:39:3d:c2:7a:07:80:fc:e1:3b:c8:9a:c6:8d:61:7e:1c: 81:8c:58:6d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1JKlysSTllGNjo6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBkMDMyMjUtYzViNi00N2M0LTlmNGUtN2RlMWQxNmQ1 NTRmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MDI4MzQ1ZDEtNjhkYy00OTJkLTljZWItNzI3NjE0ODg2ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukMIXs8oIuhxI1yUONCU1K2pL1YbbHFQN8GD hmfuXI80x/ZXZwSctSDOK2VzrYobzzuDjWc8YJ9feXb5yD81/yvU02sHzg7PSXzx Rez4AxjLh6Cqakdl2zLmOyMvkxvrhIm6aZExN3gOr0SR+bhHvJqfEqyJiGAnJi/e e0FhLX809315XoLRIMES0bGWiFIr5JLOgwA1WN2LPOVaBC+agvwjjUnQuYu36/4q NlZO0UqdeA2Plv5WjNG2mdjgMJT+BoZNfZJPoOzAKe1eKCCOd/Mb9ZufjmQOocY/ qTF/XKFGByAHJQCbamEF2ApJXTJMSP8bPyg4DIr2+BzRwBSuOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBT3IPPSNj8Ukxw4fFanSE6y1GUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQw MzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUxZDE2ZDU1NGYvMmNlNjYyZTgtMWU2Yy0z YjdmLTk4YzYtNWYxMTY0ZjRkZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDBkMDMyMjUtYzViNi00N2M0LTlm NGUtN2RlMWQxNmQ1NTRmLzQwZDAzMjI1LWM1YjYtNDdjNC05ZjRlLTdkZTFkMTZk NTU0Zi5jcmwwHwYDVR0jBBgwFoAU6DRhhWrT1VHbhGXdoM02Pj/ijxMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MGQwMzIyNS1jNWI2LTQ3YzQtOWY0ZS03ZGUx ZDE2ZDU1NGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVaQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7R/5myKH0asSDpLNovGpUxTm4HoVcOcwpnKcrK4Bp85Wf/NPJw6wi n12ixjJOnQ4LbsJS9fT5Sp55YsXHR95swTx4RkqincXJ8K+ZWXa8zeQ0chEdAtUV 9IKG076XF2yQBeNHjYJ4CrsBcOmCNjoOunEyQOKF9fdqOMKK65/QyLUHqsxBKcSo vZ6WCMUYHW6wy/aBbuHpwwty/u0uf1jsAqTW3ZgxO/4noRkiErZafUUgnJLc9ukZ Yt8I8fToSYWjdwKgmjQHMd+dlkUsRRQI1EyVRvLc+GMoC+MdRPN5GCVT7qdCi5OS 4iR8/zk9wnoHgPzhO8iaxo1hfhyBjFht -----END CERTIFICATE-----Generated at Sat Mar 28 12:17:44 2026 by rpki-client