$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa File: 36906e46-bec5-3393-be66-d1b8539c5d00.roa (raw, json) Hash identifier: W3pIauJBgdGHjkPWufGZ9IMf2RS39izijVCW7qn3x34= Subject key identifier: 20:E3:C2:0E:48:84:07:14:85:9F:D9:20:13:30:55:A0:63:D8:D8:12 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584D343A19BE3F1615550EF23580 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 400226 IP address blocks: 2602:fc05::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:19:be:3f:16:15:55:0e:f2:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=73e4a4c0-845c-4044-a885-f9e42666cf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:7e:43:31:5d:a8:10:2b:2d:88:28:4d:c4: 37:26:90:22:51:68:ba:26:40:10:41:60:30:a6:eb: ab:7d:b9:5a:3e:27:ef:ac:c8:ce:38:df:78:3e:9f: f2:fa:98:9e:0e:77:f7:02:4e:e5:01:2c:3b:b7:41: c6:ae:47:58:5b:1e:51:32:90:2a:34:08:44:89:b8: 15:72:3c:0f:43:0a:0a:4f:6b:f3:34:62:7b:a7:27: 50:f9:9d:e2:bb:18:53:ab:56:46:95:76:9b:50:49: b6:4c:81:fb:18:33:9a:dc:28:ff:a4:37:fd:03:f8: ac:ef:71:92:25:d6:09:97:34:d3:da:3d:11:3f:69: 1b:b6:e9:1d:0d:d2:78:35:70:17:62:bd:ef:7f:56: 39:a9:d1:2e:8e:bf:f1:3a:4b:ad:fa:29:bf:ed:1a: fe:60:d6:35:d0:56:16:c9:ef:d8:0f:c0:1e:c8:42: d4:37:17:e6:23:65:de:12:b7:d3:99:b6:da:ef:3f: 2f:af:34:d2:49:05:80:6e:49:27:ae:bc:53:68:2c: 24:26:e6:d5:95:73:4b:2d:5f:8c:97:45:9e:03:ef: 88:c1:b1:b3:24:21:7c:8b:a2:e1:de:0a:f2:53:2d: 32:8a:fe:d2:cf:e5:72:f0:dc:f7:5c:de:89:3f:2b: 05:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E3:C2:0E:48:84:07:14:85:9F:D9:20:13:30:55:A0:63:D8:D8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/36906e46-bec5-3393-be66-d1b8539c5d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc05::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8c:0b:1d:3b:80:ca:10:c2:b8:8e:4d:53:15:52:8b:b5:ef: 63:cc:81:95:39:c7:0b:47:cf:51:d6:81:b1:20:21:74:fa:cc: e8:bf:e7:71:c2:19:8c:76:bd:dd:36:2a:81:ba:99:62:f4:fd: 82:db:71:56:f4:61:6f:5b:2e:4a:f2:c6:db:5a:6d:ba:4e:02: ba:a1:76:ae:ee:61:74:80:24:e6:06:07:15:5c:c7:b5:1a:a1: 0b:84:cd:06:b0:38:9e:ef:9b:d9:28:d4:ef:2b:4d:21:d5:f6: 8b:9e:4a:73:20:80:c1:e9:7e:97:e8:43:3c:51:b5:cb:57:20: d9:fc:bf:aa:69:3e:4e:b0:49:e1:d8:a1:00:93:f0:b4:f2:26: 55:25:fa:7d:9d:01:f8:14:35:db:5a:3a:d7:67:01:3f:f0:9f: bc:aa:85:9d:2c:ca:a1:7a:ed:fa:c1:df:94:78:35:38:da:ac: 82:06:be:12:ff:e6:c9:ea:6d:f1:f2:37:75:d7:38:42:e7:ba: 92:1b:cf:a0:06:d0:1f:cc:07:cc:3a:16:26:98:98:9e:98:34: 31:99:00:6e:28:f5:fb:bf:00:79:c6:04:a7:0c:c4:82:64:05: a6:36:fb:61:eb:a6:e7:6c:66:83:19:22:63:48:0e:24:3a:ff: 0b:fb:b6:e5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE00Ohm+PxYVVQ7yNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NzNlNGE0YzAtODQ1Yy00MDQ0LWE4ODUtZjllNDI2NjZjZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVx+QzFdqBArLYgoTcQ3JpAiUWi6JkAQQWAw puurfblaPifvrMjOON94Pp/y+pieDnf3Ak7lASw7t0HGrkdYWx5RMpAqNAhEibgV cjwPQwoKT2vzNGJ7pydQ+Z3iuxhTq1ZGlXabUEm2TIH7GDOa3Cj/pDf9A/is73GS JdYJlzTT2j0RP2kbtukdDdJ4NXAXYr3vf1Y5qdEujr/xOkut+im/7Rr+YNY10FYW ye/YD8AeyELUNxfmI2XeErfTmbba7z8vrzTSSQWAbkknrrxTaCwkJubVlXNLLV+M l0WeA++IwbGzJCF8i6Lh3gryUy0yiv7Sz+Vy8Nz3XN6JPysF4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCDjwg5IhAcUhZ/ZIBMwVaBj2NgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMzY5MDZlNDYtYmVjNS0z MzkzLWJlNjYtZDFiODUzOWM1ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8BQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAg4wLHTuAyhDCuI5NUxVSi7XvY8yBlTnHC0fPUdaBsSAhdPrM6L/n ccIZjHa93TYqgbqZYvT9gttxVvRhb1suSvLG21ptuk4CuqF2ru5hdIAk5gYHFVzH tRqhC4TNBrA4nu+b2SjU7ytNIdX2i55KcyCAwel+l+hDPFG1y1cg2fy/qmk+TrBJ 4dihAJPwtPImVSX6fZ0B+BQ121o612cBP/CfvKqFnSzKoXrt+sHflHg1ONqsgga+ Ev/myept8fI3ddc4Que6khvPoAbQH8wHzDoWJpiYnpg0MZkAbij1+78AecYEpwzE gmQFpjb7Yeum52xmgxkiY0gOJDr/C/u25Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:37 2026 by rpki-client