$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa File: a05e816d-14ac-367c-876a-ed9f65d71b90.roa (raw, json) Hash identifier: xviqPb7v0R4eOnNFvtBbDCB0CmdjUSTWD5vdYJEKvc0= Subject key identifier: C6:6A:0E:41:D1:40:57:89:27:9D:6E:C1:17:25:A4:FC:C2:49:CD:5E Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584D3DFF9A007DB07536E767B0C0 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 35008 IP address blocks: 2602:2d5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:9a:00:7d:b0:75:36:e7:67:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=50873dcd-7c8c-43e8-afaa-109d3865da52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:fa:45:f4:4a:71:ef:9d:c7:93:51:ba:18: b0:e7:ee:52:54:1b:92:ba:63:99:27:3f:40:e1:0f: 01:e2:f5:24:c9:0b:f4:56:6a:7e:0c:87:10:b7:ce: 4d:48:fc:9b:4b:47:b3:d2:08:3b:71:ea:97:a0:60: 60:8c:89:95:f5:08:a6:3d:0d:f5:cd:24:61:74:06: 20:2b:f5:ff:dc:d0:fb:51:24:a4:1b:c1:c1:11:25: 40:ce:e2:a4:eb:8d:b7:6e:a7:f8:64:d6:eb:de:c9: a0:7e:f6:7f:37:90:2a:89:8b:dc:0e:d1:66:72:49: 9c:f6:dc:f2:66:2e:76:07:8a:ae:e8:f6:2a:e6:d8: a8:70:c7:3e:90:38:2b:7b:86:07:87:e3:62:d6:6d: 32:9a:0c:93:6a:3e:0f:4c:83:b4:50:e8:da:a2:c7: 6f:d2:5b:38:f9:53:2f:59:80:43:34:7e:a9:18:18: 95:ff:5f:47:bf:63:4d:89:dd:fe:5d:64:6c:86:dc: 1d:fa:e6:64:cc:21:89:76:65:a9:f2:0f:b9:13:32: f6:b7:12:d5:30:0e:ce:c7:a4:4e:ee:f9:b4:fc:22: fa:fe:2a:77:4f:f4:78:4d:84:4f:36:0c:7d:5c:b1: 61:05:89:45:0e:88:a2:0e:98:78:80:70:f3:0b:7a: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6A:0E:41:D1:40:57:89:27:9D:6E:C1:17:25:A4:FC:C2:49:CD:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a05e816d-14ac-367c-876a-ed9f65d71b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:22:13:89:c0:a2:7f:04:ed:ac:b3:09:3f:06:65:50:f8:d8: 9f:63:03:10:ac:e4:2d:1a:a1:77:7a:96:bc:75:b9:3e:92:6f: 9b:f3:62:02:64:3a:8f:40:8e:8f:f9:32:2a:e4:fc:9f:ad:0b: 92:4b:50:e7:d6:9d:e4:bd:f3:fc:ee:87:f4:0c:cf:0b:9f:05: 8d:03:71:aa:c7:d5:60:3e:c9:f2:59:db:26:cd:21:56:99:58: 0e:48:85:52:91:89:15:18:f1:d0:24:cd:44:47:35:1f:59:39: 8d:b6:d3:2d:6a:a5:f2:fe:b2:4e:ac:c0:8a:e0:f3:6f:db:f4: 50:1c:97:92:c9:4a:d4:a2:f2:ca:8f:d7:8d:07:5b:9f:65:0e: 13:9d:85:74:88:4e:0d:a4:d2:16:2e:05:d0:37:6e:0c:5d:3c: 9b:cb:c4:b4:0d:43:da:ea:1f:fd:b9:1c:c1:13:ca:c3:6f:14: ee:1d:cf:21:ff:bb:e0:bd:0c:ed:d9:70:f5:3c:95:a5:1b:5f: 26:8d:fa:43:bb:37:d5:9c:f7:39:3b:69:32:41:c8:ba:96:d6: 8c:5a:39:dc:64:a2:c0:c0:44:37:1b:94:72:57:28:e7:6e:77: 6c:f6:9c:bf:85:99:95:4e:50:b1:72:b6:28:ad:24:13:dd:99: ec:24:df:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE09/5oAfbB1NudnsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NTA4NzNkY2QtN2M4Yy00M2U4LWFmYWEtMTA5ZDM4NjVkYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuev6RfRKce+dx5NRuhiw5+5SVBuSumOZJz9A 4Q8B4vUkyQv0Vmp+DIcQt85NSPybS0ez0gg7ceqXoGBgjImV9QimPQ31zSRhdAYg K/X/3ND7USSkG8HBESVAzuKk6423bqf4ZNbr3smgfvZ/N5AqiYvcDtFmckmc9tzy Zi52B4qu6PYq5tiocMc+kDgre4YHh+Ni1m0ymgyTaj4PTIO0UOjaosdv0ls4+VMv WYBDNH6pGBiV/19Hv2NNid3+XWRshtwd+uZkzCGJdmWp8g+5EzL2txLVMA7Ox6RO 7vm0/CL6/ip3T/R4TYRPNgx9XLFhBYlFDoiiDph4gHDzC3o3vQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMZqDkHRQFeJJ51uwRclpPzCSc1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvYTA1ZTgxNmQtMTRhYy0z NjdjLTg3NmEtZWQ5ZjY1ZDcxYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIC1QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJyITicCifwTtrLMJPwZlUPjYn2MDEKzkLRqhd3qWvHW5PpJvm/Ni AmQ6j0COj/kyKuT8n60LkktQ59ad5L3z/O6H9AzPC58FjQNxqsfVYD7J8lnbJs0h VplYDkiFUpGJFRjx0CTNREc1H1k5jbbTLWql8v6yTqzAiuDzb9v0UByXkslK1KLy yo/XjQdbn2UOE52FdIhODaTSFi4F0DduDF08m8vEtA1D2uof/bkcwRPKw28U7h3P If+74L0M7dlw9TyVpRtfJo36Q7s31Zz3OTtpMkHIupbWjFo53GSiwMBENxuUclco 5253bPacv4WZlU5QsXK2KK0kE92Z7CTf7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:31 2026 by rpki-client