$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa File: c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa (raw, json) Hash identifier: 4AvTzxiWr2B3SytL3ceO2j7u2ArhUsx6XSs+QGESetA= Subject key identifier: CA:CF:25:AC:5D:B3:A3:41:D3:07:1D:57:60:7E:06:7C:12:A0:76:20 Certificate issuer: /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Certificate serial: 010D0C9F4328584D3B34E29B9211BA27A2397740 Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 53727 IP address blocks: 2602:f982:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e2:9b:92:11:ba:27:a2:39:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=d5f5170d-e49d-40d0-a897-afff39871270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:d9:03:7e:41:9e:0d:df:be:6b:b8:c3:86: 7b:81:b0:b4:1f:bc:ff:de:da:f0:77:ef:17:1d:85: 24:8a:a2:2c:07:d6:e6:92:43:66:18:78:f0:ff:1b: d5:57:89:4d:64:a1:1f:f5:27:ff:68:5e:5a:0c:6d: 7e:ef:e6:e4:d5:ba:04:b5:9e:9a:f0:e8:6c:3a:e0: 12:2e:38:27:f0:98:89:a2:a5:41:d1:bc:ee:a7:cd: ef:c5:f3:82:96:a2:05:f6:c1:95:8c:4c:b6:2b:d3: 96:6c:7a:6e:e4:17:37:31:f5:a6:95:41:80:3c:d9: e5:14:3b:63:84:19:ad:19:c1:9f:6b:c4:3d:84:88: af:cb:35:49:61:63:09:b4:93:c0:54:65:17:f2:ef: df:8b:68:48:39:f6:5a:3c:fd:82:e3:9b:17:49:d8: 80:a8:d8:55:ef:74:dc:dc:b6:9c:ed:51:68:96:9e: 3a:db:e0:ba:a2:2e:d9:98:cc:da:f7:8d:8d:23:5a: af:23:67:86:78:8a:92:ff:62:63:cf:9f:bb:4b:4f: 2d:e3:74:0f:be:92:8f:ae:9f:c7:bf:6f:5d:b5:d9: dd:b8:d0:1f:2f:81:77:73:37:10:35:6d:e8:98:b4: f0:47:3f:f3:c4:a5:ca:73:b1:86:31:7e:c6:cf:0b: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CF:25:AC:5D:B3:A3:41:D3:07:1D:57:60:7E:06:7C:12:A0:76:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/c43dc423-d5f3-364e-a1c3-aabfe95c6689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl X509v3 Authority Key Identifier: keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f982:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6e:ff:3a:8a:c2:bf:ae:9f:69:a3:ad:2a:0a:86:12:0f:20: 38:c3:c1:2c:3a:d7:3e:6b:62:13:64:36:d7:3e:2d:f4:54:6e: 24:53:19:34:b4:ef:cc:e5:23:d8:d3:5a:a8:21:e2:06:f2:e5: 29:b3:be:d9:0d:94:f3:4a:cb:13:20:5b:15:bc:b5:b8:7e:93: fe:c7:18:d3:0d:77:67:74:36:e9:c7:03:02:65:2f:0b:41:d2: 70:b9:81:62:b7:9a:8e:d9:38:d4:72:a7:ce:93:1c:14:65:b6: 2d:0e:c5:47:49:9e:c0:6b:12:1b:f7:a1:91:67:97:87:3d:5e: 8b:69:15:80:68:ad:9f:68:77:97:b7:20:c9:80:7b:56:0c:06: 7b:27:4f:9f:e8:51:b1:d8:fe:10:2d:2b:46:f6:7b:cc:ec:f8: 61:95:4b:d8:45:66:7d:ce:9c:0a:54:b6:97:51:b1:7f:51:2c: 53:74:c7:16:9c:96:c9:b6:38:67:0a:e7:33:6f:0c:78:a6:44: e6:7d:9d:de:80:70:02:5d:e5:b4:57:fc:04:bf:2c:30:d6:1c: 5b:74:04:d4:25:33:cb:69:64:16:5d:c9:5f:e2:05:60:17:8f: 50:7d:0f:7b:a0:6f:cf:82:51:30:d9:d2:c7:84:c0:04:bb:0f: 35:f1:28:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07NOKbkhG6J6I5d0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyY2Q3OGQtYzNmMS00NzFhLTkzMWEtMjZlYWY1YTg3 MmYzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ZDVmNTE3MGQtZTQ5ZC00MGQwLWE4OTctYWZmZjM5ODcxMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLLZA35Bng3fvmu4w4Z7gbC0H7z/3trwd+8X HYUkiqIsB9bmkkNmGHjw/xvVV4lNZKEf9Sf/aF5aDG1+7+bk1boEtZ6a8OhsOuAS Ljgn8JiJoqVB0bzup83vxfOClqIF9sGVjEy2K9OWbHpu5Bc3MfWmlUGAPNnlFDtj hBmtGcGfa8Q9hIivyzVJYWMJtJPAVGUX8u/fi2hIOfZaPP2C45sXSdiAqNhV73Tc 3Lac7VFolp462+C6oi7ZmMza942NI1qvI2eGeIqS/2Jjz5+7S08t43QPvpKPrp/H v29dtdnduNAfL4F3czcQNW3omLTwRz/zxKXKc7GGMX7Gzwu7QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMrPJaxds6NB0wcdV2B+BnwSoHYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNDJj ZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVhZjVhODcyZjMvYzQzZGM0MjMtZDVmMy0z NjRlLWExYzMtYWFiZmU5NWM2Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjQyY2Q3OGQtYzNmMS00NzFhLTkz MWEtMjZlYWY1YTg3MmYzL2I0MmNkNzhkLWMzZjEtNDcxYS05MzFhLTI2ZWFmNWE4 NzJmMy5jcmwwHwYDVR0jBBgwFoAUCvMe9nHLW/UmAy037mbdyIttVN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iNDJjZDc4ZC1jM2YxLTQ3MWEtOTMxYS0yNmVh ZjVhODcyZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5ggEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBu/zqKwr+un2mjrSoKhhIPIDjDwSw61z5rYhNkNtc+LfRUbiRT GTS078zlI9jTWqgh4gby5SmzvtkNlPNKyxMgWxW8tbh+k/7HGNMNd2d0NunHAwJl LwtB0nC5gWK3mo7ZONRyp86THBRlti0OxUdJnsBrEhv3oZFnl4c9XotpFYBorZ9o d5e3IMmAe1YMBnsnT5/oUbHY/hAtK0b2e8zs+GGVS9hFZn3OnApUtpdRsX9RLFN0 xxaclsm2OGcK5zNvDHimROZ9nd6AcAJd5bRX/AS/LDDWHFt0BNQlM8tpZBZdyV/i BWAXj1B9D3ugb8+CUTDZ0seEwAS7DzXxKCo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:50 2026 by rpki-client