$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa File: 3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa (raw, json) Hash identifier: Emam00B1AWQc8KMX1cfZivqpSqX663bAeWz5rf2JU34= Subject key identifier: 99:63:56:93:66:52:C6:19:F7:57:B3:E8:0B:97:D7:07:7A:B6:7F:1C Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584D3DFFAC4278B8DBDF42F5CD10 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396952 IP address blocks: 2602:fec2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ac:42:78:b8:db:df:42:f5:cd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=62c69d9f-7c2e-4b2f-aad3-a595c382013b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:5a:9f:49:7a:c3:01:ad:72:75:84:a4:6e: 27:73:5a:a6:d4:22:ac:62:fa:37:c7:c1:59:fc:52: da:df:36:43:7a:3e:12:f9:6f:fd:68:64:b3:de:63: f7:a2:06:f8:3c:7a:ca:21:0f:72:91:fa:42:1b:a2: b3:69:5d:96:4b:f6:c6:66:3a:c8:5a:be:fb:f9:35: 1d:71:bc:06:07:ea:3d:ff:4e:31:24:10:d6:21:5b: 71:40:c9:97:18:b7:ff:5f:40:40:39:54:ea:ff:7d: 03:5c:80:35:bb:cb:08:80:0b:48:f8:3c:f8:6f:35: 5a:93:48:80:95:d1:eb:a9:80:a6:35:c5:72:0e:a5: 31:66:40:d5:e2:61:6e:fb:c8:c1:2e:01:f6:0e:b4: c4:fe:0b:e3:5f:f1:24:d4:c3:03:00:b6:6c:b5:96: 6b:3d:ae:25:a2:85:e1:0c:f2:e3:b6:74:7a:56:2c: 5b:67:66:18:3b:83:ce:bd:6c:f1:35:f4:c3:33:38: 1d:19:2b:b4:c2:ba:1b:aa:6e:47:75:b8:07:24:de: 02:67:e4:d7:c9:98:c0:e8:54:73:3d:d4:76:37:61: 28:a9:0e:4b:f9:fd:2e:20:6a:53:52:dd:8a:47:a6: 16:de:bb:44:f5:f5:8d:7a:18:c5:40:ec:4e:59:db: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:63:56:93:66:52:C6:19:F7:57:B3:E8:0B:97:D7:07:7A:B6:7F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/3d7cf9ed-a044-32ff-8cec-e0066d17c0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec2::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:71:ab:b5:17:25:4c:bb:cd:ac:50:ec:83:e7:5c:2e:13:7f: e0:8e:60:80:e8:06:52:b1:0e:11:52:53:26:85:ef:02:dd:ce: 82:85:b4:a5:a8:61:d0:01:db:61:98:9e:91:8e:3c:c0:bb:c3: ab:79:36:c2:05:88:94:d2:b4:fa:64:d6:21:ae:05:d5:08:c1: 5d:36:6a:4e:93:25:b1:40:06:22:9b:0d:af:1c:d6:76:67:fb: f3:e1:0b:73:50:f1:a8:ff:13:a3:c3:60:aa:8f:51:c1:b4:1f: 7e:8e:e7:ed:7c:40:98:06:f1:e3:2b:cb:51:e4:a1:fd:67:08: b4:7e:13:32:94:1b:c7:4e:80:4c:d4:1e:7f:9a:19:ae:f2:f5: 5b:ee:95:50:08:f7:6e:0c:64:ce:25:83:94:85:38:72:c9:92: 86:d4:e7:89:6a:8c:63:d0:8c:24:f7:b9:ab:aa:1d:d4:e0:17: e3:34:5b:77:38:dc:d3:99:c2:e6:33:61:dd:d7:cb:8d:66:0a: 2a:0b:b0:e1:39:ec:ba:30:e6:2b:11:5c:cc:c2:01:04:ca:f0: 12:45:f6:40:c9:bd:7f:60:3e:4b:81:ea:5d:6c:90:06:70:fa: f1:be:8e:58:a4:d8:fa:93:01:80:79:b7:c0:48:93:62:9e:cd: 80:97:21:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/6xCeLjb30L1zRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjJjNjlkOWYtN2MyZS00YjJmLWFhZDMtYTU5NWMzODIwMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJan0l6wwGtcnWEpG4nc1qm1CKsYvo3x8FZ /FLa3zZDej4S+W/9aGSz3mP3ogb4PHrKIQ9ykfpCG6KzaV2WS/bGZjrIWr77+TUd cbwGB+o9/04xJBDWIVtxQMmXGLf/X0BAOVTq/30DXIA1u8sIgAtI+Dz4bzVak0iA ldHrqYCmNcVyDqUxZkDV4mFu+8jBLgH2DrTE/gvjX/Ek1MMDALZstZZrPa4looXh DPLjtnR6VixbZ2YYO4POvWzxNfTDMzgdGSu0wrobqm5HdbgHJN4CZ+TXyZjA6FRz PdR2N2EoqQ5L+f0uIGpTUt2KR6YW3rtE9fWNehjFQOxOWdu9xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJljVpNmUsYZ91ez6AuX1wd6tn8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvM2Q3Y2Y5ZWQtYTA0NC0z MmZmLThjZWMtZTAwNjZkMTdjMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+wjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIcau1FyVMu82sUOyD51wuE3/gjmCA6AZSsQ4RUlMmhe8C3c6ChbSl qGHQAdthmJ6RjjzAu8OreTbCBYiU0rT6ZNYhrgXVCMFdNmpOkyWxQAYimw2vHNZ2 Z/vz4QtzUPGo/xOjw2Cqj1HBtB9+juftfECYBvHjK8tR5KH9Zwi0fhMylBvHToBM 1B5/mhmu8vVb7pVQCPduDGTOJYOUhThyyZKG1OeJaoxj0Iwk97mrqh3U4BfjNFt3 ONzTmcLmM2Hd18uNZgoqC7DhOey6MOYrEVzMwgEEyvASRfZAyb1/YD5LgepdbJAG cPrxvo5YpNj6kwGAebfASJNins2AlyFY -----END CERTIFICATE-----Generated at Thu Mar 26 07:49:33 2026 by rpki-client