$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa File: 2d561adb-c9c4-3c99-91d9-d8a426c46475.roa (raw, json) Hash identifier: l/DA/yZrv/j45sh7hU71UEtTBLTYJbdcZr7TBj2LPQI= Subject key identifier: 2F:D7:75:69:04:1D:1F:9B:98:1A:8B:61:36:89:72:06:6C:29:02:D1 Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F4328584D1707D9F9BCD42A08E373E680 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 401466 IP address blocks: 2602:f874:be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:d9:f9:bc:d4:2a:08:e3:73:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=ceb51d4f-a632-42ed-8a4d-5998fc025657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:7b:2d:fc:24:67:d6:6e:62:cb:de:16:c9: 47:54:6a:b5:cd:09:98:fd:7d:de:1d:67:37:a2:5f: 88:2e:2f:84:8f:b2:06:94:ea:eb:00:3a:56:97:f7: d2:1a:29:d0:ac:44:c9:2f:bb:c6:b1:39:52:e5:8f: ac:62:20:10:7c:c9:8a:68:d4:3f:d6:b4:72:dd:d7: 74:fd:b4:8e:8f:0c:b3:3b:a1:6c:24:b6:82:a5:a5: f6:92:a7:91:f2:c2:66:2a:44:31:74:7f:02:b2:a2: 24:71:52:95:2f:27:cf:db:dc:6f:c5:e1:5e:a1:74: 07:79:ef:a6:98:26:5c:56:5a:cf:c6:39:d5:d4:ca: a3:1d:44:61:02:6d:5d:07:04:14:f1:b4:bc:2a:b4: 6b:61:fb:a8:57:4f:20:c6:64:ab:88:57:25:0a:1d: 84:6e:b0:a2:44:af:c5:3c:a9:db:cc:a5:43:fa:8a: 18:9c:74:ab:9c:13:c4:ea:b4:f4:5f:0a:23:28:31: 0a:20:a6:1b:80:d4:4d:19:3a:4a:e0:c1:36:0d:c2: 4a:92:69:7e:93:a5:f6:3b:87:f1:dd:15:b9:1c:cf: bb:53:8e:19:00:2e:ed:6f:30:46:23:5b:5b:cf:80: b2:74:06:b6:3c:aa:e0:49:19:31:4d:ed:fc:ab:46: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D7:75:69:04:1D:1F:9B:98:1A:8B:61:36:89:72:06:6C:29:02:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/2d561adb-c9c4-3c99-91d9-d8a426c46475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv6: 2602:f874:be::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0b:13:7a:6f:3b:d6:86:c8:b3:aa:0d:26:e8:9f:05:3e:4e: 28:9d:97:69:a5:64:95:ab:2b:6c:ba:85:01:04:3d:e9:15:31: c2:4a:7e:5c:16:02:42:92:87:8a:eb:1b:96:38:7c:78:3b:e6: f0:d5:d7:e9:36:9d:b9:7a:7a:e4:ee:4e:2d:8b:2d:28:e1:53: c0:de:8b:23:6a:53:67:8e:07:f7:38:e6:c9:7e:cf:bc:50:b8: e3:ea:df:d4:f4:d1:80:38:dc:1c:a0:4f:16:c9:60:fe:1e:b6: 76:12:44:4d:82:0b:7b:64:18:fa:37:07:d6:f2:f5:7a:d7:36: c7:b1:6c:62:e2:0a:c1:81:7e:00:ab:3f:2f:29:34:6f:77:8c: ce:72:d8:84:c8:36:0f:1c:f8:ed:de:89:72:1a:ea:8b:2d:5c: 63:ba:38:58:44:67:ac:23:17:ec:31:36:61:bf:ef:9f:de:83: ef:94:80:aa:0c:f1:df:10:52:2c:9c:d7:4b:23:7c:48:1a:16: 6e:bf:3d:31:65:50:86:cf:86:29:a3:c3:b1:e6:ad:3b:e1:d7: ac:eb:06:49:42:12:ec:8f:f5:30:5f:a4:3d:9e:41:80:80:b8: cc:61:d8:75:2a:05:e2:3a:07:dc:0f:a3:bf:a1:d7:ef:75:99: f6:04:a4:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0XB9n5vNQqCONz5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk Y2ViNTFkNGYtYTYzMi00MmVkLThhNGQtNTk5OGZjMDI1NjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq57LfwkZ9ZuYsveFslHVGq1zQmY/X3eHWc3 ol+ILi+Ej7IGlOrrADpWl/fSGinQrETJL7vGsTlS5Y+sYiAQfMmKaNQ/1rRy3dd0 /bSOjwyzO6FsJLaCpaX2kqeR8sJmKkQxdH8CsqIkcVKVLyfP29xvxeFeoXQHee+m mCZcVlrPxjnV1MqjHURhAm1dBwQU8bS8KrRrYfuoV08gxmSriFclCh2EbrCiRK/F PKnbzKVD+ooYnHSrnBPE6rT0XwojKDEKIKYbgNRNGTpK4ME2DcJKkml+k6X2O4fx 3RW5HM+7U44ZAC7tbzBGI1tbz4CydAa2PKrgSRkxTe38q0af/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/XdWkEHR+bmBqLYTaJcgZsKQLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvMmQ1NjFhZGItYzljNC0z Yzk5LTkxZDktZDhhNDI2YzQ2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4dAC+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMLE3pvO9aGyLOqDSbonwU+Tiidl2mlZJWrK2y6hQEEPekVMcJK flwWAkKSh4rrG5Y4fHg75vDV1+k2nbl6euTuTi2LLSjhU8DeiyNqU2eOB/c45sl+ z7xQuOPq39T00YA43BygTxbJYP4etnYSRE2CC3tkGPo3B9by9XrXNsexbGLiCsGB fgCrPy8pNG93jM5y2ITINg8c+O3eiXIa6ostXGO6OFhEZ6wjF+wxNmG/75/eg++U gKoM8d8QUiyc10sjfEgaFm6/PTFlUIbPhimjw7HmrTvh16zrBklCEuyP9TBfpD2e QYCAuMxh2HUqBeI6B9wPo7+h1+91mfYEpLk= -----END CERTIFICATE-----Generated at Thu Mar 26 05:49:29 2026 by rpki-client