$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa File: 2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json) Hash identifier: gfPe29F2ya3WKv4qSyecMG0kJKhvMgdARTDH0dqEvKU= Subject key identifier: B5:B5:A8:7D:5B:E0:C7:6C:90:15:CF:71:B7:04:ED:4B:38:F6:F2:70 Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584D2A74ED1965E574C7BD788680 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 61112 IP address blocks: 2602:fa4f:300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ed:19:65:e5:74:c7:bd:78:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=8932bb20-198a-4095-b4ae-f5e2e35ab968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:44:4f:b2:7b:45:2f:40:5c:83:2f:0e:e8:f9: 63:1e:ef:f2:c7:c1:b8:97:75:f9:3e:4d:88:db:b6: 80:c1:2d:27:91:cb:eb:d5:17:6f:4d:be:38:8e:e9: ab:0d:eb:c3:60:01:0a:4f:2d:41:f0:41:a8:aa:75: 6b:dc:92:7d:8b:17:80:74:54:4e:b1:3b:4c:a6:56: 6e:3f:73:a6:bb:52:e0:25:6a:68:fc:9e:04:3e:6c: 9f:e9:2a:ab:33:f2:dd:28:9f:38:f2:c0:62:62:24: 54:7e:8c:bf:1c:d6:e9:41:22:17:da:7b:5b:35:69: 07:4a:a1:9f:8c:02:49:53:2d:31:e9:c4:dd:98:41: 92:a7:8a:b4:ed:44:ce:59:ec:e7:4f:29:5a:c3:7e: 4e:d3:07:81:5c:37:d5:c4:d2:99:d1:ca:19:dd:5a: 2c:6e:57:2f:a7:e2:ac:09:a8:e0:d0:a3:30:ee:31: 5c:48:04:7b:27:90:45:b8:12:28:9f:d6:cb:4a:47: 85:7a:bd:2f:77:59:f3:4f:7a:57:7f:64:bc:73:3b: c3:1d:02:0f:0f:15:81:68:95:6f:71:6c:92:7b:5b: d2:93:5f:54:79:97:f9:37:03:54:20:1a:ed:8c:b0: 56:bc:b0:97:06:98:da:93:6c:c6:14:08:89:99:63: 76:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:A8:7D:5B:E0:C7:6C:90:15:CF:71:B7:04:ED:4B:38:F6:F2:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa4f:300::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e9:84:b8:b0:e8:df:b9:fe:69:66:31:a0:da:84:06:ba:72: 1c:e6:89:86:64:1f:b3:5e:64:72:0e:90:5d:ec:f2:c9:18:cb: 2c:90:a0:56:e6:61:90:ee:89:4b:5f:3d:8a:32:94:7f:24:0b: 30:21:5d:18:3a:63:39:d9:db:a0:3e:c7:47:79:39:ab:4b:52: 5a:dc:3e:d8:1c:7d:6a:85:64:b0:6d:5a:80:65:54:f4:2f:02: a6:af:6e:c2:81:e7:75:08:82:45:32:06:14:13:f1:db:49:6f: f5:72:cf:5f:e2:7a:05:7e:6b:14:b4:34:b6:98:79:15:20:71: 61:a4:8f:70:f5:82:b3:27:b4:98:97:8c:f7:e2:a2:bd:00:4e: 31:bf:e8:ac:9c:2c:d1:d1:c0:06:4b:42:b7:e4:d7:1e:10:2d: 2f:47:1d:76:02:9b:97:49:b0:d6:07:7c:0f:8b:91:4e:2d:d8: 49:ad:f4:01:a5:8e:69:65:59:2c:c5:f7:ba:26:73:5d:84:67: bb:10:2a:b8:55:31:f6:31:21:91:5e:42:d4:bb:66:47:af:8e: ef:34:af:a1:a6:1c:19:eb:cd:41:d4:47:b5:f3:de:c5:54:1c: 0b:f2:9f:34:10:c7:92:a7:10:97:ec:b2:b9:21:b5:d5:64:aa: 12:94:f7:88 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0qdO0ZZeV0x714hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODkzMmJiMjAtMTk4YS00MDk1LWI0YWUtZjVlMmUzNWFiOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kRPsntFL0Bcgy8O6PljHu/yx8G4l3X5Pk2I 27aAwS0nkcvr1RdvTb44jumrDevDYAEKTy1B8EGoqnVr3JJ9ixeAdFROsTtMplZu P3Omu1LgJWpo/J4EPmyf6SqrM/LdKJ848sBiYiRUfoy/HNbpQSIX2ntbNWkHSqGf jAJJUy0x6cTdmEGSp4q07UTOWeznTylaw35O0weBXDfVxNKZ0coZ3Vosblcvp+Ks Cajg0KMw7jFcSAR7J5BFuBIon9bLSkeFer0vd1nzT3pXf2S8czvDHQIPDxWBaJVv cWySe1vSk19UeZf5NwNUIBrtjLBWvLCXBpjak2zGFAiJmWN2WQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLW1qH1b4MdskBXPcbcE7Us49vJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMmJhYmIwYTEtOWExYS0z YmQ0LTlmMTQtZWJmNmRkMzA5Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwMw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAi+mEuLDo37n+aWYxoNqEBrpyHOaJhmQfs15kcg6QXezyyRjLLJCg VuZhkO6JS189ijKUfyQLMCFdGDpjOdnboD7HR3k5q0tSWtw+2Bx9aoVksG1agGVU 9C8Cpq9uwoHndQiCRTIGFBPx20lv9XLPX+J6BX5rFLQ0tph5FSBxYaSPcPWCsye0 mJeM9+KivQBOMb/orJws0dHABktCt+TXHhAtL0cddgKbl0mw1gd8D4uRTi3YSa30 AaWOaWVZLMX3uiZzXYRnuxAquFUx9jEhkV5C1LtmR6+O7zSvoaYcGevNQdRHtfPe xVQcC/KfNBDHkqcQl+yyuSG11WSqEpT3iA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:38 2026 by rpki-client