$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa File: d2a082d0-19b1-32d7-91a3-222f02e26207.roa (raw, json) Hash identifier: iJpY2bjLcPv2twb2DykTIVGbmogTKV5OLwRflJCcJdE= Subject key identifier: D6:FA:16:EE:11:76:35:C5:E7:3F:0F:8D:28:7C:2E:F3:B2:48:93:C4 Certificate issuer: /CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Certificate serial: 010D0C9F4328584D2A74DEB549AB554FD3CDCC00 Authority key identifier: 4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 398876 IP address blocks: 2602:f5d9::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:de:b5:49:ab:55:4f:d3:cd:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36d9917c-1061-4b0d-9db2-f1c82dcadd29 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=e24d5bbc-96ed-4961-b16d-2321fd3fd366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:42:85:e8:67:47:ab:be:0e:76:85:f2:b4:bc: c4:a6:1c:ad:b1:9d:de:8a:17:d6:26:5d:9e:b3:10: 87:17:33:f6:75:fa:e7:f4:86:6f:79:f6:e3:1f:69: a9:40:26:a9:18:20:d6:66:ca:84:ce:03:d6:1b:00: 6d:8a:b8:92:2a:7d:66:d8:a3:89:41:74:fe:cc:57: b4:cf:cd:68:6c:ea:30:79:73:8b:38:ec:c0:43:f8: 27:bc:f7:41:cf:c2:9c:02:d3:8b:f8:2e:9f:34:4a: 47:f7:49:00:9d:54:c8:2c:bb:bf:13:52:cb:a5:6d: 62:5d:bf:17:24:9b:95:49:d5:66:17:11:61:d4:cd: b5:3d:f0:f6:89:c4:72:cf:ac:eb:84:fa:49:ce:34: f8:ac:ef:68:97:90:31:cb:1b:4a:20:23:30:21:02: bc:ca:f6:b6:b0:aa:c3:d5:ec:17:02:bb:14:85:d3: 70:16:aa:bc:61:a6:93:eb:39:3b:4e:3d:d1:59:58: f5:eb:67:44:0e:80:07:8e:56:f3:fc:ad:e2:d0:ad: d9:ad:c3:20:59:d5:b7:75:bf:0a:0b:95:ee:bc:29: 90:0b:38:42:b5:0b:46:85:2f:38:e7:da:c9:15:fe: 7e:94:4c:d1:8f:87:fb:96:e4:35:b4:12:4d:13:80: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FA:16:EE:11:76:35:C5:E7:3F:0F:8D:28:7C:2E:F3:B2:48:93:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/d2a082d0-19b1-32d7-91a3-222f02e26207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29/36d9917c-1061-4b0d-9db2-f1c82dcadd29.crl X509v3 Authority Key Identifier: keyid:4A:A1:D5:64:07:70:76:F9:DB:55:C8:0E:9B:6B:44:B2:C0:27:46:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36d9917c-1061-4b0d-9db2-f1c82dcadd29.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5d9::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:62:12:af:c7:f9:0d:d9:19:39:c1:de:61:4f:2d:70:09:30: f5:c2:a9:b8:69:6e:74:45:c1:44:84:d2:1e:3f:74:bf:37:f1: 2f:dd:3b:11:db:f9:3b:95:a1:c4:a4:c8:89:6f:d0:ed:c1:09: ce:a2:4b:3a:8f:c1:27:f5:30:10:83:b6:7d:52:29:b3:52:c8: e0:81:a8:f1:40:f3:d2:81:b3:03:89:41:91:49:af:2a:7f:7d: 6a:28:45:71:85:26:74:99:8b:6d:0c:5b:83:64:30:bc:c7:a0: 11:fa:81:c0:2d:1b:42:c9:e8:b1:30:f9:48:a0:2c:13:fd:db: 7b:78:51:88:c9:7a:a5:b2:f9:14:5e:e0:56:5e:03:a1:c1:04: c9:4e:46:d8:42:0c:f2:98:31:84:13:f5:f0:8b:1e:13:33:8a: e4:bd:3a:fd:f2:53:4f:30:1a:3d:41:f5:bd:83:66:e5:2c:72: 45:03:69:70:f3:2e:e6:2c:3f:8d:7c:0e:ea:5e:76:39:4d:d3: 14:e1:9e:30:2e:e1:95:6a:e3:0a:31:47:24:53:1e:21:14:1f: e6:9c:7d:a0:33:6d:d2:cc:54:b9:37:0c:4a:7d:a3:f4:08:85: 6a:9f:df:75:79:5d:06:d7:1a:09:09:7f:63:95:97:3d:d1:27: b3:e6:c7:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0qdN61SatVT9PNzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZkOTkxN2MtMTA2MS00YjBkLTlkYjItZjFjODJkY2Fk ZDI5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTI0ZDViYmMtOTZlZC00OTYxLWIxNmQtMjMyMWZkM2ZkMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0KF6GdHq74OdoXytLzEphytsZ3eihfWJl2e sxCHFzP2dfrn9IZvefbjH2mpQCapGCDWZsqEzgPWGwBtiriSKn1m2KOJQXT+zFe0 z81obOoweXOLOOzAQ/gnvPdBz8KcAtOL+C6fNEpH90kAnVTILLu/E1LLpW1iXb8X JJuVSdVmFxFh1M21PfD2icRyz6zrhPpJzjT4rO9ol5AxyxtKICMwIQK8yva2sKrD 1ewXArsUhdNwFqq8YaaT6zk7Tj3RWVj162dEDoAHjlbz/K3i0K3ZrcMgWdW3db8K C5XuvCmQCzhCtQtGhS8459rJFf5+lEzRj4f7luQ1tBJNE4CJhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNb6Fu4RdjXF5z8PjSh8LvOySJPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5 OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4MmRjYWRkMjkvZDJhMDgyZDAtMTliMS0z MmQ3LTkxYTMtMjIyZjAyZTI2MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZkOTkxN2MtMTA2MS00YjBkLTlk YjItZjFjODJkY2FkZDI5LzM2ZDk5MTdjLTEwNjEtNGIwZC05ZGIyLWYxYzgyZGNh ZGQyOS5jcmwwHwYDVR0jBBgwFoAUSqHVZAdwdvnbVcgOm2tEssAnRrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNmQ5OTE3Yy0xMDYxLTRiMGQtOWRiMi1mMWM4 MmRjYWRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL12QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcmISr8f5DdkZOcHeYU8tcAkw9cKpuGludEXBRITSHj90vzfxL907 Edv5O5WhxKTIiW/Q7cEJzqJLOo/BJ/UwEIO2fVIps1LI4IGo8UDz0oGzA4lBkUmv Kn99aihFcYUmdJmLbQxbg2QwvMegEfqBwC0bQsnosTD5SKAsE/3be3hRiMl6pbL5 FF7gVl4DocEEyU5G2EIM8pgxhBP18IseEzOK5L06/fJTTzAaPUH1vYNm5SxyRQNp cPMu5iw/jXwO6l52OU3TFOGeMC7hlWrjCjFHJFMeIRQf5px9oDNt0sxUuTcMSn2j 9AiFap/fdXldBtcaCQl/Y5WXPdEns+bHOA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:03:10 2026 by rpki-client