$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa File: 3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa (raw, json) Hash identifier: +UKuA/brvtBXy36xioQhp91nmR0Q4+FPm3lPVeR8LKE= Subject key identifier: 5F:A7:03:73:D0:CF:7E:7A:76:48:EA:57:B4:5A:80:01:44:B0:49:B8 Certificate issuer: /CN=f070d399-4921-4247-a612-64e6e53f9f2b Certificate serial: 010D0C9F4328584D100CF9BFED11F9BC2F91DE40 Authority key identifier: 61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 401274 IP address blocks: 2602:f84d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0c:f9:bf:ed:11:f9:bc:2f:91:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f070d399-4921-4247-a612-64e6e53f9f2b Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=5fd90c74-b557-47fc-b7da-7dabf1722dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:55:8f:67:0d:0f:7c:28:09:a3:ea:61:0f: 3a:9b:51:40:e2:ac:35:4d:db:30:62:a7:c7:dc:5f: d3:1c:42:c0:0d:c9:78:97:31:4f:1a:d8:91:09:ab: ce:6a:52:b0:23:74:32:ca:79:3a:c8:56:8d:26:fe: d0:55:22:85:5a:f2:b4:a9:3f:21:6a:4e:14:5b:74: 00:fb:27:61:9c:62:9a:df:cb:c0:d4:b3:0e:38:42: df:c5:7b:c4:11:34:a9:b6:06:ae:a5:5b:de:b0:87: 04:d7:45:f2:c5:69:ec:18:a2:19:fe:6f:8f:7b:20: ce:0f:4d:29:8d:a0:c9:ca:2f:91:9c:c4:83:f1:d8: 52:ca:ef:b0:58:56:23:05:73:e6:0b:02:74:13:51: 13:97:3f:fc:11:46:c6:bc:12:3a:77:ac:25:28:ab: 56:3c:fb:45:93:46:41:ff:39:1a:d8:68:a7:81:54: 0c:3c:b3:20:3c:8c:99:33:df:3f:bb:f7:14:ea:6d: e4:8a:0b:bd:03:90:ed:c7:0f:3c:a2:6d:d4:64:79: 52:b0:6a:a0:ef:2b:79:88:9d:7f:98:38:56:ca:1a: ce:5d:16:dc:ea:13:bd:8e:57:15:45:38:e6:57:61: fb:fd:df:d4:93:ee:ae:41:fb:43:02:43:a3:81:70: d3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A7:03:73:D0:CF:7E:7A:76:48:EA:57:B4:5A:80:01:44:B0:49:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/3b5fbb54-5a54-37fa-9b85-c5fa205688d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl X509v3 Authority Key Identifier: keyid:61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f84d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:02:38:f1:d7:a3:8f:43:6f:c8:a9:be:07:46:89:4f:8f:b4: 17:c3:d8:18:0c:b7:8e:59:1a:58:26:82:bb:09:e8:85:70:e8: b7:2a:c0:99:23:13:be:87:44:f6:16:8c:c7:e1:cc:c9:80:40: e8:b4:32:7f:b8:cf:e7:33:03:2e:6b:5f:1a:cf:1e:70:74:d5: 51:94:44:ce:1d:2b:1b:70:38:24:3c:33:9f:26:01:8a:44:a5: dc:dc:f6:46:46:71:9c:c7:ca:9d:43:0a:b6:bc:0d:1d:18:40: fe:bd:cd:d8:ed:b7:9e:12:9d:ab:ff:e0:3d:59:7b:8b:11:14: b3:53:a0:da:99:50:2b:f9:be:88:5f:f4:0c:ad:2d:7c:66:bf: d8:ac:87:8c:9b:b1:cc:ae:66:57:44:6d:f7:51:6a:6c:2b:cf: 9a:14:0f:11:d7:02:9d:70:e0:e1:85:bd:20:e2:09:c6:a9:ef: 7b:15:c9:a0:ed:39:a3:86:1c:ab:0a:51:69:9d:c7:8e:fd:e1: 56:bb:03:64:6c:a0:a0:82:33:22:e4:a7:60:7a:48:09:18:41: aa:72:41:67:be:82:0d:1a:8e:50:fb:0c:71:c9:4a:44:9e:78: 4f:4b:b2:da:9c:30:2d:d4:f9:79:82:8c:a3:52:37:18:ad:56: 65:04:85:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0QDPm/7RH5vC+R3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA3MGQzOTktNDkyMS00MjQ3LWE2MTItNjRlNmU1M2Y5 ZjJiMB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk NWZkOTBjNzQtYjU1Ny00N2ZjLWI3ZGEtN2RhYmYxNzIyZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJVj2cND3woCaPqYQ86m1FA4qw1TdswYqfH 3F/THELADcl4lzFPGtiRCavOalKwI3Qyynk6yFaNJv7QVSKFWvK0qT8hak4UW3QA +ydhnGKa38vA1LMOOELfxXvEETSptgaupVvesIcE10XyxWnsGKIZ/m+PeyDOD00p jaDJyi+RnMSD8dhSyu+wWFYjBXPmCwJ0E1ETlz/8EUbGvBI6d6wlKKtWPPtFk0ZB /zka2GingVQMPLMgPIyZM98/u/cU6m3kigu9A5Dtxw88om3UZHlSsGqg7yt5iJ1/ mDhWyhrOXRbc6hO9jlcVRTjmV2H7/d/Uk+6uQftDAkOjgXDTOwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF+nA3PQz356dkjqV7RagAFEsEm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcw ZDM5OS00OTIxLTQyNDctYTYxMi02NGU2ZTUzZjlmMmIvM2I1ZmJiNTQtNWE1NC0z N2ZhLTliODUtYzVmYTIwNTY4OGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjA3MGQzOTktNDkyMS00MjQ3LWE2 MTItNjRlNmU1M2Y5ZjJiL2YwNzBkMzk5LTQ5MjEtNDI0Ny1hNjEyLTY0ZTZlNTNm OWYyYi5jcmwwHwYDVR0jBBgwFoAUYXzrgyhiAV6SSXszotsTZ+AyWcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcwZDM5OS00OTIxLTQyNDctYTYxMi02NGU2 ZTUzZjlmMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4TQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdwI48dejj0NvyKm+B0aJT4+0F8PYGAy3jlkaWCaCuwnohXDotyrA mSMTvodE9haMx+HMyYBA6LQyf7jP5zMDLmtfGs8ecHTVUZREzh0rG3A4JDwznyYB ikSl3Nz2RkZxnMfKnUMKtrwNHRhA/r3N2O23nhKdq//gPVl7ixEUs1Og2plQK/m+ iF/0DK0tfGa/2KyHjJuxzK5mV0Rt91FqbCvPmhQPEdcCnXDg4YW9IOIJxqnvexXJ oO05o4YcqwpRaZ3Hjv3hVrsDZGygoIIzIuSnYHpICRhBqnJBZ76CDRqOUPsMcclK RJ54T0uy2pwwLdT5eYKMo1I3GK1WZQSFCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:28:22 2026 by rpki-client