$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa File: f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa (raw, json) Hash identifier: l6zEtH/Sg+HXGPJp+G0fcI6M6mZgKp/ShGuK4FlTpH8= Subject key identifier: 4E:66:DE:59:6C:D7:65:4F:52:62:D0:F9:FA:C7:12:0C:8A:38:A0:52 Certificate issuer: /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Certificate serial: 010D0C9F4328584D343A1AF33F4FC44364D27400 Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 401167 IP address blocks: 2602:f8a1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1a:f3:3f:4f:c4:43:64:d2:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=5dfdeeec-9557-4e37-83d7-9a532e358e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:fb:81:b4:ff:03:fa:53:f1:9b:1a:83:af: 41:fe:2a:68:9d:c1:c1:0c:5e:b3:3d:ed:8b:2b:ef: 17:3e:e3:cf:13:7a:23:e8:cc:ca:a2:a6:cc:02:df: a8:6d:49:f0:45:d1:fb:5a:61:bf:87:7c:98:0f:d8: 94:66:23:ca:6a:aa:32:ec:66:9d:25:86:4d:b0:77: a4:18:3c:20:e2:02:71:ec:4d:e2:32:c4:97:36:3a: ca:37:dd:be:34:34:3f:8f:fc:18:54:be:07:ea:61: 22:56:f5:86:6c:b6:0a:fe:ad:25:0b:6f:02:9a:0b: b2:71:3c:b6:46:38:28:86:8a:84:81:8d:70:f6:a7: 3e:23:8a:20:49:a2:31:b2:f9:2c:0b:e8:8b:01:5d: 3f:f4:f4:ef:ab:62:39:79:0b:c3:0c:d5:dd:7a:2e: 3c:f4:c7:d2:e9:66:ad:ab:4d:02:d0:2b:13:35:d3: 49:60:71:a8:13:db:f5:ad:03:1b:e8:83:b9:a2:b8: 80:9d:0c:9e:3b:a6:2d:8f:6a:44:5a:cd:a0:ba:37: 0d:3a:6b:ac:10:60:21:48:5b:40:b9:21:49:0d:a5: 68:01:8d:34:73:35:00:b5:10:4e:61:2c:65:3c:d4: e6:bd:5d:f7:78:f4:ea:60:6c:58:b0:6a:15:71:64: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:66:DE:59:6C:D7:65:4F:52:62:D0:F9:FA:C7:12:0C:8A:38:A0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl X509v3 Authority Key Identifier: keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8a1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6a:e0:98:c6:52:73:93:41:21:67:93:89:b5:58:7e:ab:85: 70:c1:3d:f0:f7:9f:75:3f:d1:37:28:3b:8c:ab:8f:d0:d4:0f: b0:bb:be:39:81:5e:db:a6:c5:89:0e:ff:63:5e:ee:c0:48:ce: e4:75:f0:9e:82:6e:b1:a0:fd:9a:c2:f6:12:b0:3d:f3:20:2f: b1:91:e8:c9:05:3d:ed:38:47:62:b8:17:a2:73:02:21:f0:ef: ee:93:63:fd:ea:ba:f5:76:c4:c2:85:e2:1a:56:ee:f7:be:98: 4f:b8:38:ef:99:3f:ed:62:85:ca:0e:59:74:97:c2:78:e6:20: ff:86:59:55:55:4b:72:33:e9:d2:e3:e8:79:f6:fd:c2:6f:e0: 7d:08:a3:01:c7:00:4c:70:43:fb:98:39:48:0b:01:b6:a9:46: 30:c7:21:e1:83:d1:13:7a:a2:42:94:6a:ae:08:e4:76:f0:2e: 8c:ea:7c:b6:eb:be:05:34:b4:35:b4:5d:37:bc:f0:59:53:76: c1:53:10:ca:e7:f4:8a:bf:a1:4d:ff:28:e6:14:d0:3c:96:94: 9f:a2:bf:90:63:95:81:f4:83:7a:e9:a9:c4:5d:c5:43:00:88: 7d:96:a2:18:09:8c:43:1b:6c:c1:a5:ab:16:20:ca:e9:75:6c: eb:17:3b:14 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE00OhrzP0/EQ2TSdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4YjU4MTQtMjAzMS00YjU0LWI5ZTEtYmM1ZWFhY2Y4 NzQ1MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NWRmZGVlZWMtOTU1Ny00ZTM3LTgzZDctOWE1MzJlMzU4ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE77gbT/A/pT8Zsag69B/iponcHBDF6zPe2L K+8XPuPPE3oj6MzKoqbMAt+obUnwRdH7WmG/h3yYD9iUZiPKaqoy7GadJYZNsHek GDwg4gJx7E3iMsSXNjrKN92+NDQ/j/wYVL4H6mEiVvWGbLYK/q0lC28CmguycTy2 RjgohoqEgY1w9qc+I4ogSaIxsvksC+iLAV0/9PTvq2I5eQvDDNXdei489MfS6Wat q00C0CsTNdNJYHGoE9v1rQMb6IO5oriAnQyeO6Ytj2pEWs2gujcNOmusEGAhSFtA uSFJDaVoAY00czUAtRBOYSxlPNTmvV33ePTqYGxYsGoVcWT04QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE5m3lls12VPUmLQ+frHEgyKOKBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDhi NTgxNC0yMDMxLTRiNTQtYjllMS1iYzVlYWFjZjg3NDUvZjEzN2IyYjctZTRhNi0z Y2IxLWI3OWItYzZjYzNjN2I0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4YjU4MTQtMjAzMS00YjU0LWI5 ZTEtYmM1ZWFhY2Y4NzQ1LzkwOGI1ODE0LTIwMzEtNGI1NC1iOWUxLWJjNWVhYWNm ODc0NS5jcmwwHwYDVR0jBBgwFoAUxy0jB/tZ7sD5Nm2VELDdECfr/HwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDhiNTgxNC0yMDMxLTRiNTQtYjllMS1iYzVl YWFjZjg3NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4oQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAK2rgmMZSc5NBIWeTibVYfquFcME98PefdT/RNyg7jKuP0NQPsLu+ OYFe26bFiQ7/Y17uwEjO5HXwnoJusaD9msL2ErA98yAvsZHoyQU97ThHYrgXonMC IfDv7pNj/eq69XbEwoXiGlbu976YT7g475k/7WKFyg5ZdJfCeOYg/4ZZVVVLcjPp 0uPoefb9wm/gfQijAccATHBD+5g5SAsBtqlGMMch4YPRE3qiQpRqrgjkdvAujOp8 tuu+BTS0NbRdN7zwWVN2wVMQyuf0ir+hTf8o5hTQPJaUn6K/kGOVgfSDeumpxF3F QwCIfZaiGAmMQxtswaWrFiDK6XVs6xc7FA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:28 2026 by rpki-client