$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa File: 09f0dca4-7037-3620-9a0d-95fbf887be2d.roa (raw, json) Hash identifier: WV3LNIh3qw6o/lg/Sx6ZJJei4XNyDCO6dJ2HHLPyhso= Subject key identifier: 7D:41:92:C1:33:D2:89:00:21:4C:4D:E5:99:77:E5:22:72:A3:51:63 Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Certificate serial: 010D0C9F4328584D0BDD0A1DC535DCBDEC0C0700 Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 29802 IP address blocks: 2602:f972:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:0a:1d:c5:35:dc:bd:ec:0c:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=a2da7ce3-0779-4f8c-bff4-ecfe5e57ee33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5a:4e:ab:56:56:10:ac:fc:4a:53:4a:7f:17: 4c:a3:f9:78:f3:d6:ba:16:f6:bf:2c:33:b2:97:29: bc:fe:0c:bd:78:df:7e:ca:62:bc:37:97:1e:37:a7: f6:f6:4a:72:41:f6:48:8f:76:48:a4:d2:30:62:bf: 22:6c:5b:44:93:1b:8d:06:2b:3b:ba:ff:67:4f:8c: 47:90:ce:56:51:01:5a:cc:59:fd:db:7a:53:27:bc: 02:48:f8:2a:18:5e:43:d3:19:8e:19:48:1b:c1:77: a9:76:3d:7d:fb:9a:2a:f9:24:46:3d:91:47:6b:10: f8:7c:0e:88:f2:3d:f2:f0:77:0b:25:a0:3b:22:a8: 24:c8:7c:35:48:d7:80:63:d5:7d:da:89:ee:2e:27: 1a:9d:2c:f5:76:3a:8c:c2:0c:40:3b:46:fc:0c:e7: 8e:71:a3:0d:6b:e7:9e:9e:6f:b3:c3:eb:82:8b:4c: bb:ee:ac:15:e5:bb:91:bc:a6:45:6b:4e:df:3d:e3: 85:e4:d3:ae:67:fc:c4:e9:dc:eb:c9:ac:3e:46:0f: f5:d1:42:4b:ec:5c:8e:a3:08:0c:40:7f:fc:a5:6e: 52:f0:71:8c:50:15:8f:78:92:f9:5b:4b:26:0d:6a: 96:52:43:2d:71:b5:9e:fc:b4:92:cf:c4:41:40:fc: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:92:C1:33:D2:89:00:21:4C:4D:E5:99:77:E5:22:72:A3:51:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/09f0dca4-7037-3620-9a0d-95fbf887be2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl X509v3 Authority Key Identifier: keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer sbgp-ipAddrBlock: critical IPv6: 2602:f972:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1a:ce:f3:e5:96:fd:7a:5b:86:c6:ed:04:22:e7:70:0c:09: 09:f3:86:94:2f:fc:4f:a4:d7:2b:0c:81:33:f0:0e:8a:ae:1c: 6b:68:d1:8f:e4:a4:01:92:91:da:1e:18:d1:20:2b:4f:84:8c: c1:c5:00:09:78:b5:d8:ed:ad:e6:4b:9c:c6:fe:32:1d:c6:41: eb:d3:45:46:ec:7f:48:c0:61:68:78:74:fd:65:a5:0e:cf:38: 4c:62:79:c3:0d:04:a9:46:67:44:ce:d5:3a:94:ab:34:ae:92: bd:d4:26:66:41:10:82:76:cb:dc:76:e5:3b:d0:d0:33:6f:9a: 70:2a:9b:c9:a0:36:2c:3e:12:b7:31:bc:4e:8a:15:14:64:8f: 17:52:27:df:e1:cb:ff:18:ea:6b:ee:8a:3a:a9:12:93:fa:b6: b5:73:58:4b:d1:20:34:d1:79:ca:cc:2d:a4:de:1e:89:c5:1c: 39:fe:73:b7:92:05:9b:09:08:60:fe:76:65:fd:f5:84:a9:ba: 28:ed:78:15:29:e0:d4:60:18:f4:20:6f:bb:e5:80:32:c8:22: 19:b3:f6:5d:77:a5:6d:38:7a:86:d5:f3:61:f0:03:75:90:62: 87:b3:6a:5e:c1:62:09:bd:86:4d:19:5b:e3:a2:e2:6a:16:89: 46:e0:0b:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3QodxTXcvewMBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4 Njg4MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YTJkYTdjZTMtMDc3OS00ZjhjLWJmZjQtZWNmZTVlNTdlZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1pOq1ZWEKz8SlNKfxdMo/l489a6Fva/LDOy lym8/gy9eN9+ymK8N5ceN6f29kpyQfZIj3ZIpNIwYr8ibFtEkxuNBis7uv9nT4xH kM5WUQFazFn923pTJ7wCSPgqGF5D0xmOGUgbwXepdj19+5oq+SRGPZFHaxD4fA6I 8j3y8HcLJaA7IqgkyHw1SNeAY9V92onuLicanSz1djqMwgxAO0b8DOeOcaMNa+ee nm+zw+uCi0y77qwV5buRvKZFa07fPeOF5NOuZ/zE6dzryaw+Rg/10UJL7FyOowgM QH/8pW5S8HGMUBWPeJL5W0smDWqWUkMtcbWe/LSSz8RBQPyd2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH1BksEz0okAIUxN5Zl35SJyo1FjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMDlmMGRjYTQtNzAzNy0z NjIwLTlhMGQtOTVmYmY4ODdiZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4 ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH8azvPllv16W4bG7QQi53AMCQnzhpQv/E+k1ysMgTPwDoquHGto 0Y/kpAGSkdoeGNEgK0+EjMHFAAl4tdjtreZLnMb+Mh3GQevTRUbsf0jAYWh4dP1l pQ7POExiecMNBKlGZ0TO1TqUqzSukr3UJmZBEIJ2y9x25TvQ0DNvmnAqm8mgNiw+ ErcxvE6KFRRkjxdSJ9/hy/8Y6mvuijqpEpP6trVzWEvRIDTRecrMLaTeHonFHDn+ c7eSBZsJCGD+dmX99YSpuijteBUp4NRgGPQgb7vlgDLIIhmz9l13pW04eobV82Hw A3WQYoezal7BYgm9hk0ZW+Oi4moWiUbgC3s= -----END CERTIFICATE-----Generated at Thu Mar 26 12:28:24 2026 by rpki-client