$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa File: a0ed00a4-2dcb-32ed-a058-569efce134bb.roa (raw, json) Hash identifier: t6qBvcdGUs3dtfQNDKxkO+39n3JXQPXTNBlV8SqT5yQ= Subject key identifier: 14:62:B1:F5:24:93:93:F3:2F:F4:DD:E6:7E:81:10:FB:37:6D:5D:FA Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584DA6B01DF7EE725BB6ACB5C300 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 62900 IP address blocks: 2602:2d5:f0::/48 maxlen: 48 2602:2d5:f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1d:f7:ee:72:5b:b6:ac:b5:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=38b486e3-3423-4dd9-8c7c-ecc3af7d6898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:05:fe:ff:98:c5:d9:78:d7:be:c2:99:27:94: 75:f8:94:24:b8:18:5b:70:70:49:18:08:52:cd:32: 10:ae:1d:c6:92:e5:10:a5:d4:0d:d7:14:93:78:c5: 71:43:92:00:a5:41:a9:11:47:0f:ac:3c:85:6d:80: 20:21:d0:af:5a:bf:9e:e6:a0:80:ae:88:25:62:f4: bb:c7:06:22:33:f4:50:78:38:c1:1f:92:fe:6b:06: 00:fc:dc:81:8d:d0:95:23:69:ec:5b:6d:fe:99:de: 6d:c1:b2:63:83:39:2f:30:4d:88:2c:33:bc:05:bb: 04:fe:c1:84:9d:0f:30:b1:91:a4:6e:2f:f8:e6:4b: 99:bd:a6:5b:d4:f0:a3:8f:4a:64:49:fb:f8:a1:8b: 33:93:8c:a4:d2:3e:b0:14:34:6f:5f:5a:34:c4:65: 04:a9:a4:39:51:07:a7:bc:7d:97:6d:bf:7f:40:ac: 44:05:bd:41:d8:20:9e:47:51:ff:20:38:6c:0d:43: cc:fa:c8:e0:20:b8:5d:6d:eb:ba:2b:de:1d:66:81: 19:a9:b0:59:c5:86:ee:87:3c:8e:6e:d0:85:dd:a1: f7:1c:c5:d5:2b:aa:89:d5:02:9d:97:42:ff:8e:4c: 83:3f:22:75:70:e6:26:d0:3b:65:63:5d:0b:66:de: 9e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:62:B1:F5:24:93:93:F3:2F:F4:DD:E6:7E:81:10:FB:37:6D:5D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/a0ed00a4-2dcb-32ed-a058-569efce134bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv6: 2602:2d5:f0::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f4:66:20:91:8c:c6:7b:d8:da:38:9e:01:bc:62:1b:4c:76: f5:f7:8a:c5:d4:f8:d6:96:b1:5c:f7:31:9d:51:72:87:52:cb: dd:ff:f7:ca:79:0a:b7:bd:e6:fe:90:65:33:3b:22:78:db:26: 13:be:ef:3d:0c:f9:93:44:2e:c1:fa:4f:73:cf:1e:e9:d2:0b: 39:95:03:77:d5:5e:ff:19:07:10:8c:2b:57:ea:61:5c:0c:dd: d6:8c:05:9d:a8:d7:80:35:7c:e4:a4:92:a2:d7:16:25:5a:35: a5:4b:b2:7c:08:fe:0b:6d:1a:17:a8:4a:c7:01:05:a2:fc:c8: 90:02:ef:41:f8:1d:e0:f7:b0:02:46:e5:1e:74:0b:e5:c6:fb: d2:70:58:63:31:f7:7c:53:95:af:ed:6c:81:77:23:a5:e5:04: c8:42:0c:d6:05:b8:ff:e7:a9:8d:67:43:5d:ec:ca:9e:50:64: 92:34:ba:8b:81:a1:f3:04:7f:43:4b:e5:df:e9:37:db:43:c9: 34:a5:4a:36:e7:ae:a0:ce:93:d5:be:b9:2b:43:12:f0:91:e7: 41:17:8c:11:60:b6:67:1b:a0:3c:28:8c:c8:d2:ed:43:58:76: 40:81:cc:20:47:37:17:9e:16:38:81:e3:47:cf:b9:94:97:a1: 6c:ff:71:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msB337nJbtqy1wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MzhiNDg2ZTMtMzQyMy00ZGQ5LThjN2MtZWNjM2FmN2Q2ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQX+/5jF2XjXvsKZJ5R1+JQkuBhbcHBJGAhS zTIQrh3GkuUQpdQN1xSTeMVxQ5IApUGpEUcPrDyFbYAgIdCvWr+e5qCAroglYvS7 xwYiM/RQeDjBH5L+awYA/NyBjdCVI2nsW23+md5twbJjgzkvME2ILDO8BbsE/sGE nQ8wsZGkbi/45kuZvaZb1PCjj0pkSfv4oYszk4yk0j6wFDRvX1o0xGUEqaQ5UQen vH2Xbb9/QKxEBb1B2CCeR1H/IDhsDUPM+sjgILhdbeu6K94dZoEZqbBZxYbuhzyO btCF3aH3HMXVK6qJ1QKdl0L/jkyDPyJ1cOYm0DtlY10LZt6eZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBRisfUkk5PzL/Td5n6BEPs3bV36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvYTBlZDAwYTQtMmRjYi0z MmVkLWEwNTgtNTY5ZWZjZTEzNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgIC1QDw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACj0ZiCRjMZ72No4ngG8YhtMdvX3isXU+NaWsVz3MZ1RcodSy93/ 98p5Cre95v6QZTM7InjbJhO+7z0M+ZNELsH6T3PPHunSCzmVA3fVXv8ZBxCMK1fq YVwM3daMBZ2o14A1fOSkkqLXFiVaNaVLsnwI/gttGheoSscBBaL8yJAC70H4HeD3 sAJG5R50C+XG+9JwWGMx93xTla/tbIF3I6XlBMhCDNYFuP/nqY1nQ13syp5QZJI0 uouBofMEf0NL5d/pN9tDyTSlSjbnrqDOk9W+uStDEvCR50EXjBFgtmcboDwojMjS 7UNYdkCBzCBHNxeeFjiB40fPuZSXoWz/cRM= -----END CERTIFICATE-----Generated at Wed May 13 15:38:52 2026 by rpki-client