$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa File: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (raw, json) Hash identifier: Un/wsca/kduwZfT/iTJDSNv7G3Ne4B87o4ZocVmFH24= Subject key identifier: 7C:34:B8:CB:28:8B:CE:89:B1:E7:D8:CB:C8:F1:2D:42:92:ED:74:2E Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584D07ACEE3216F2C881B3F4AB00 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 400245 IP address blocks: 2602:fb7d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ee:32:16:f2:c8:81:b3:f4:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=4f3cd8d1-c4ef-47ad-af1c-3d05a2528916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ea:9c:42:74:9f:2c:59:6b:11:24:31:b7:40: 92:53:f6:f8:1d:2e:0a:51:9d:5e:f7:eb:73:4a:d5: 76:fa:51:b2:99:da:37:71:6a:41:ab:da:74:10:91: 45:ae:74:af:d5:bf:2e:0c:bb:0e:ef:70:34:54:3e: 09:34:74:f4:5b:34:9d:ff:ca:e1:e2:7a:01:56:56: c8:bc:1f:fe:44:98:33:62:b4:d5:05:23:fc:b5:8c: 47:17:c0:9c:fb:d8:57:69:c3:9b:72:ec:51:4f:33: 05:c4:f6:e1:07:41:bf:66:9d:95:67:72:a9:83:39: 1a:6d:b7:43:59:d4:5e:f0:ec:fd:b7:c1:fe:08:07: c7:fb:d5:c3:33:61:45:20:08:90:bd:3f:18:cf:9c: e4:0b:9d:80:93:2a:a4:75:e4:af:97:1e:6d:ec:a9: 63:e4:05:9e:2f:28:58:56:94:40:17:54:4b:19:8c: ca:ba:92:ed:9a:5e:66:b8:22:22:b0:c0:3a:01:66: 06:9a:72:20:69:33:bf:6e:f8:ed:cf:81:16:f8:e2: bd:27:e0:d0:88:a3:4d:39:15:06:88:4a:ef:d7:a9: 62:f3:c6:1f:2d:29:77:0f:08:bd:bb:51:9a:8f:fa: 01:33:1d:2f:32:1c:0a:c9:f5:13:dd:2d:54:a3:2e: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:34:B8:CB:28:8B:CE:89:B1:E7:D8:CB:C8:F1:2D:42:92:ED:74:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/cd3cb7de-2625-3893-a323-d1bec7d259a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb7d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:59:c3:76:08:0c:9c:73:a1:e6:c3:30:28:f3:cd:ce:a4:d4: 82:d0:27:1f:1b:13:62:0a:10:15:27:6b:0f:a5:72:3c:a8:e5: 06:d7:54:de:12:57:86:7d:6a:18:40:6b:4f:63:4a:fc:99:c3: 2d:44:fa:16:b1:d6:06:f1:59:b3:49:9d:ea:00:58:ff:0a:95: 44:1c:2f:ec:13:e6:fd:0b:7a:99:9d:ac:90:18:ce:44:dd:95: 97:ea:98:5c:c7:c2:43:2d:8e:ab:0b:c2:c0:c2:19:b3:f9:f4: 6a:2e:e3:49:78:47:0d:34:7c:99:24:b4:b6:56:87:35:cd:56: 5d:23:a5:94:98:0c:8b:bd:74:9b:35:97:75:b6:02:16:75:87: 42:3c:b5:1d:14:36:63:7f:d2:ee:02:6e:5d:a4:f7:00:20:d9: 5c:7d:3a:52:04:9f:87:82:27:d5:27:a6:99:b6:a2:ed:97:34: 17:96:1b:b4:5e:34:24:b3:b6:75:17:e4:c8:9c:c1:2b:6f:fd: 8d:80:b2:9b:21:19:cc:d4:8c:e2:cf:5a:f6:5d:36:93:f2:88: 50:ae:dd:f6:a1:58:45:21:5e:a4:33:26:a4:13:59:c1:2d:33: 24:d6:3c:d1:d2:0d:cf:d6:16:e2:7b:2b:66:b5:ff:6a:62:54: 47:cb:cb:2c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0HrO4yFvLIgbP0qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NGYzY2Q4ZDEtYzRlZi00N2FkLWFmMWMtM2QwNWEyNTI4OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeqcQnSfLFlrESQxt0CSU/b4HS4KUZ1e9+tz StV2+lGymdo3cWpBq9p0EJFFrnSv1b8uDLsO73A0VD4JNHT0WzSd/8rh4noBVlbI vB/+RJgzYrTVBSP8tYxHF8Cc+9hXacObcuxRTzMFxPbhB0G/Zp2VZ3KpgzkabbdD WdRe8Oz9t8H+CAfH+9XDM2FFIAiQvT8Yz5zkC52AkyqkdeSvlx5t7Klj5AWeLyhY VpRAF1RLGYzKupLtml5muCIisMA6AWYGmnIgaTO/bvjtz4EW+OK9J+DQiKNNORUG iErv16li88YfLSl3Dwi9u1Gaj/oBMx0vMhwKyfUT3S1Uoy5kmwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHw0uMsoi86JsefYy8jxLUKS7XQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvY2QzY2I3ZGUtMjYyNS0z ODkzLWEzMjMtZDFiZWM3ZDI1OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL7fQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnVnDdggMnHOh5sMwKPPNzqTUgtAnHxsTYgoQFSdrD6VyPKjlBtdU 3hJXhn1qGEBrT2NK/JnDLUT6FrHWBvFZs0md6gBY/wqVRBwv7BPm/Qt6mZ2skBjO RN2Vl+qYXMfCQy2OqwvCwMIZs/n0ai7jSXhHDTR8mSS0tlaHNc1WXSOllJgMi710 mzWXdbYCFnWHQjy1HRQ2Y3/S7gJuXaT3ACDZXH06UgSfh4In1Semmbai7Zc0F5Yb tF40JLO2dRfkyJzBK2/9jYCymyEZzNSM4s9a9l02k/KIUK7d9qFYRSFepDMmpBNZ wS0zJNY80dINz9YW4nsrZrX/amJUR8vLLA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:25:19 2026 by rpki-client