$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa File: 5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa (raw, json) Hash identifier: srWrpSTAp4WH191RDlvDdETVpQ162uZDPejE+fV3P9Q= Subject key identifier: B3:12:36:41:E9:3E:13:89:AE:8C:83:B0:5C:36:2A:B2:2F:6B:79:C2 Certificate issuer: /CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Certificate serial: 010D0C9F4328584D237A67DE34CD031D51B83F60 Authority key identifier: 29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 63302 IP address blocks: 2620:88:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:67:de:34:cd:03:1d:51:b8:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf602fb3-e0a4-4315-96e3-52b1359c9d10 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=d933fd63-1182-4345-aa14-90f5cad12955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:dd:e2:96:7f:14:d7:45:7a:eb:b4:a3:de: 0b:41:12:3b:98:8a:83:78:28:9c:b5:91:a5:71:02: 17:26:4f:17:fd:1d:74:7e:ca:bf:e1:d2:5d:08:2e: d4:d4:82:1b:89:cf:3f:2f:9d:2e:e5:d6:98:1e:86: 07:cb:4c:0e:31:9c:eb:96:cf:fe:b8:72:e4:11:56: 3a:c0:1e:3d:4d:a3:dc:ae:9f:86:70:3b:07:76:4c: b1:97:e4:1b:d8:cf:a4:00:43:bd:9e:0c:a0:38:16: d5:8e:44:c9:ab:19:34:df:fb:cc:fb:0d:6d:da:d9: 48:d8:35:64:9b:7d:1f:74:50:94:1d:02:ef:64:30: 47:63:c5:dd:cb:70:28:c8:8d:0d:df:c8:ad:fb:e1: 9d:14:57:3f:92:49:2f:8d:00:5b:8f:4d:c4:d5:a9: b3:6a:3b:9d:88:20:8a:79:dd:7b:27:c5:e5:ee:92: 9a:7a:56:e2:8b:5d:9a:1a:77:25:e5:91:56:bb:15: c9:1c:96:49:15:e8:09:8c:18:a2:cc:03:ac:bb:a2: 40:4e:be:ca:c8:73:8e:af:fe:e4:ed:79:a8:17:1e: 44:04:3a:51:2a:0d:6c:b2:7f:5e:1b:38:7c:29:1e: 71:98:ce:bc:9a:44:ae:62:4d:b4:85:4c:3a:8f:7f: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:36:41:E9:3E:13:89:AE:8C:83:B0:5C:36:2A:B2:2F:6B:79:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/5f4cf2d6-3f8e-3a0d-98aa-64556b5e99a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10/cf602fb3-e0a4-4315-96e3-52b1359c9d10.crl X509v3 Authority Key Identifier: keyid:29:72:FB:6B:B1:9E:91:73:94:55:C1:A8:AE:05:66:73:D5:52:55:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf602fb3-e0a4-4315-96e3-52b1359c9d10.cer sbgp-ipAddrBlock: critical IPv6: 2620:88:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:cc:25:c7:86:33:ad:05:33:24:08:dd:ff:42:2f:ed:b7:6d: 72:36:44:1a:0d:37:fb:37:08:55:28:42:aa:60:d9:51:b7:00: 62:f9:f8:72:bd:92:c9:3e:d2:64:a8:dd:67:f5:98:39:c3:43: 7b:b9:07:3f:6e:fd:83:e9:55:90:34:4f:ec:49:fc:42:fe:b5: b4:87:b8:2a:88:3f:47:2d:03:6a:e9:20:22:07:22:7c:e1:af: 44:24:56:35:b3:8a:ba:a3:26:97:e2:28:88:b7:b3:92:c5:03: 4e:bc:48:c6:47:05:08:12:03:da:43:30:64:2f:ca:67:b9:2b: f9:60:23:87:ed:4d:28:0a:58:d6:96:16:e5:a3:41:b7:ae:7e: 58:19:7a:c7:81:4a:3b:6e:1a:b4:14:f1:31:14:a1:b9:4e:b3: 98:78:8e:bf:9f:4c:44:ce:ca:b8:2d:c8:52:af:e6:f8:0f:af: 5c:01:e3:25:be:57:ef:eb:1a:8e:e1:f6:02:ba:c0:be:f7:e4: cd:54:b1:ec:c8:0c:0d:4e:ca:a4:0d:47:70:dc:85:ce:a6:e5: aa:ca:eb:b8:60:f0:af:ce:8c:b5:66:cc:6b:d0:96:94:cf:9e: df:84:15:c0:60:ad:c9:80:d1:c0:f6:84:7b:25:0d:4a:51:a3: 8a:34:10:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jemfeNM0DHVG4P2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MDJmYjMtZTBhNC00MzE1LTk2ZTMtNTJiMTM1OWM5 ZDEwMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDkzM2ZkNjMtMTE4Mi00MzQ1LWFhMTQtOTBmNWNhZDEyOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosHd4pZ/FNdFeuu0o94LQRI7mIqDeCictZGl cQIXJk8X/R10fsq/4dJdCC7U1IIbic8/L50u5daYHoYHy0wOMZzrls/+uHLkEVY6 wB49TaPcrp+GcDsHdkyxl+Qb2M+kAEO9ngygOBbVjkTJqxk03/vM+w1t2tlI2DVk m30fdFCUHQLvZDBHY8Xdy3AoyI0N38it++GdFFc/kkkvjQBbj03E1amzajudiCCK ed17J8Xl7pKaelbii12aGncl5ZFWuxXJHJZJFegJjBiizAOsu6JATr7KyHOOr/7k 7XmoFx5EBDpRKg1ssn9eGzh8KR5xmM68mkSuYk20hUw6j382uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMSNkHpPhOJroyDsFw2KrIva3nCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYw MmZiMy1lMGE0LTQzMTUtOTZlMy01MmIxMzU5YzlkMTAvNWY0Y2YyZDYtM2Y4ZS0z YTBkLTk4YWEtNjQ1NTZiNWU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2Y2MDJmYjMtZTBhNC00MzE1LTk2 ZTMtNTJiMTM1OWM5ZDEwL2NmNjAyZmIzLWUwYTQtNDMxNS05NmUzLTUyYjEzNTlj OWQxMC5jcmwwHwYDVR0jBBgwFoAUKXL7a7GekXOUVcGorgVmc9VSVSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jZjYwMmZiMy1lMGE0LTQzMTUtOTZlMy01MmIx MzU5YzlkMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAiCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzMJceGM60FMyQI3f9CL+23bXI2RBoNN/s3CFUoQqpg2VG3AGL5 +HK9ksk+0mSo3Wf1mDnDQ3u5Bz9u/YPpVZA0T+xJ/EL+tbSHuCqIP0ctA2rpICIH Inzhr0QkVjWzirqjJpfiKIi3s5LFA068SMZHBQgSA9pDMGQvyme5K/lgI4ftTSgK WNaWFuWjQbeuflgZeseBSjtuGrQU8TEUoblOs5h4jr+fTETOyrgtyFKv5vgPr1wB 4yW+V+/rGo7h9gK6wL735M1UsezIDA1OyqQNR3Dchc6m5arK67hg8K/OjLVmzGvQ lpTPnt+EFcBgrcmA0cD2hHslDUpRo4o0EFE= -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:42 2026 by rpki-client