$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa File: 7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa (raw, json) Hash identifier: oN4eROEEw2Q6Zhoo0ud+V7LJ0enkv/FWaOUFKmsdaVo= Subject key identifier: EA:54:9B:4E:3E:1F:29:27:55:CE:D6:66:49:95:3E:76:90:ED:4E:54 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584D422F8AE651DEAF3CC0E28D80 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 11017 IP address blocks: 2602:f98b:20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8a:e6:51:de:af:3c:c0:e2:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=82ea72d0-1d41-4839-bb97-295f5d407f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:b2:2e:c9:ae:29:73:5a:2b:b4:1c:75:85: 81:d3:7f:2c:53:64:d0:39:b8:7a:28:2e:cb:03:eb: e5:e1:02:88:6f:43:27:f5:b6:50:31:39:51:4e:12: 6d:25:24:5b:d0:c8:0c:03:25:fe:21:e4:de:22:ef: 5f:39:32:ac:27:04:0f:e0:0d:62:67:28:73:87:44: be:97:90:c1:ee:f2:92:59:05:58:29:eb:7d:3e:42: 52:ab:bc:34:a4:73:c1:6f:cf:00:ba:7b:95:1d:16: 98:cf:00:f7:9b:68:ec:ab:07:43:5e:15:c8:58:14: 85:40:cc:e4:08:a2:a9:62:00:b5:ce:d7:7a:99:d0: 58:78:74:98:5c:db:0c:43:ca:06:fc:8e:ca:0c:46: 83:45:bb:83:fe:1b:54:a6:d7:f5:fb:ee:e0:88:5d: f5:c6:9c:88:b2:52:8f:01:30:1e:af:5f:92:2c:7b: 64:5b:3c:94:4f:d7:4f:db:27:a0:89:f4:6a:9f:4a: b7:5b:21:dc:2a:48:93:c3:a3:5d:ca:97:fc:11:2f: fb:61:86:31:ea:7b:66:24:33:b5:04:85:de:5e:00: ae:ca:f4:01:82:e4:84:16:1d:fb:2d:d2:37:41:ad: ce:f7:e2:23:ff:0d:98:a6:87:00:a2:65:4e:2c:0c: dc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:54:9B:4E:3E:1F:29:27:55:CE:D6:66:49:95:3E:76:90:ED:4E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/7fdf9821-afc2-3f48-9e2c-ea5354ee6e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0b:07:4b:fe:97:31:8e:31:ee:31:81:f5:6e:93:e5:75:95: aa:b6:f3:79:7f:2e:d9:3f:53:2a:19:d0:ee:04:4a:7b:56:47: b4:37:16:5d:3e:9f:c8:e6:19:76:54:c0:3a:02:85:b1:b6:09: e7:91:53:19:29:3d:b8:2f:e0:89:37:65:fa:c5:fb:30:21:97: d2:04:65:2c:9d:58:13:12:0c:95:c2:41:40:ca:a9:08:9e:2c: 45:0e:ca:cf:bd:00:a2:a8:87:7e:0a:8d:56:a4:4b:18:bc:26: 75:67:45:0e:07:69:ad:02:9b:6b:ea:62:e1:e0:05:f9:ed:a9: a1:fa:be:e9:31:6d:ab:0f:a0:f1:b6:1e:4d:9d:9b:f6:c3:d5: e5:9a:47:1f:d4:80:ab:e4:75:91:a0:bf:41:c3:03:f6:5a:17: fd:8d:be:de:9c:ee:36:95:50:d0:0d:52:f9:14:32:e8:d9:ee: 4a:9d:57:20:55:28:a0:8c:91:e5:b8:df:c4:24:9e:35:85:9f: 04:45:bf:33:1e:97:13:1f:44:85:cc:fc:45:6b:8e:89:60:31: 9e:ec:63:6f:bd:20:fb:a3:2d:62:b1:ab:cf:3e:34:35:be:27: 9c:c9:77:c9:1a:15:34:50:b1:0a:51:af:17:c4:2d:c6:aa:b3: 86:1d:30:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4rmUd6vPMDijYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ODJlYTcyZDAtMWQ0MS00ODM5LWJiOTctMjk1ZjVkNDA3Zjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HuyLsmuKXNaK7QcdYWB038sU2TQObh6KC7L A+vl4QKIb0Mn9bZQMTlRThJtJSRb0MgMAyX+IeTeIu9fOTKsJwQP4A1iZyhzh0S+ l5DB7vKSWQVYKet9PkJSq7w0pHPBb88AunuVHRaYzwD3m2jsqwdDXhXIWBSFQMzk CKKpYgC1ztd6mdBYeHSYXNsMQ8oG/I7KDEaDRbuD/htUptf1++7giF31xpyIslKP ATAer1+SLHtkWzyUT9dP2yegifRqn0q3WyHcKkiTw6Ndypf8ES/7YYYx6ntmJDO1 BIXeXgCuyvQBguSEFh37LdI3Qa3O9+Ij/w2YpocAomVOLAzcSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOpUm04+HyknVc7WZkmVPnaQ7U5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvN2ZkZjk4MjEtYWZjMi0z ZjQ4LTllMmMtZWE1MzU0ZWU2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIYLB0v+lzGOMe4xgfVuk+V1laq283l/Ltk/UyoZ0O4ESntWR7Q3 Fl0+n8jmGXZUwDoChbG2CeeRUxkpPbgv4Ik3ZfrF+zAhl9IEZSydWBMSDJXCQUDK qQieLEUOys+9AKKoh34KjVakSxi8JnVnRQ4Haa0Cm2vqYuHgBfntqaH6vukxbasP oPG2Hk2dm/bD1eWaRx/UgKvkdZGgv0HDA/ZaF/2Nvt6c7jaVUNANUvkUMujZ7kqd VyBVKKCMkeW438QknjWFnwRFvzMelxMfRIXM/EVrjolgMZ7sY2+9IPujLWKxq88+ NDW+J5zJd8kaFTRQsQpRrxfELcaqs4YdMIY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:06 2026 by rpki-client