$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa File: 829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa (raw, json) Hash identifier: iI1C3KekLjANaskF7+whAWYR+cGH8gm6v6Wchg8vEOg= Subject key identifier: 45:09:A9:E6:98:FE:73:96:2A:66:A6:9C:9C:BB:4A:71:3D:7C:43:5A Certificate issuer: /CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Certificate serial: 010D0C9F4328584D359FAD0C8C207D45D29C9680 Authority key identifier: 68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 398697 IP address blocks: 2602:fcdd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ad:0c:8c:20:7d:45:d2:9c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9027e9-0517-4775-a6c4-35522e65e4ad Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b728995e-7ba0-4b24-9465-fc3739adfcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c4:38:6d:12:7c:fd:66:a5:96:1d:7c:30:53: 23:35:e7:0d:a0:1d:44:bc:d7:76:84:c2:0c:87:2a: b9:88:aa:dc:15:e5:ea:3e:02:5e:26:2f:18:84:6a: 8b:10:81:3a:97:11:ef:9f:9d:cd:b4:fa:f0:83:87: 5f:16:bc:28:33:d9:4f:f9:f9:5f:4c:e9:f8:25:fd: c8:4e:ad:7d:ab:bd:95:aa:9f:b2:19:7f:39:e8:6b: 53:9b:1c:5c:91:e0:37:52:90:90:9f:92:09:9c:ea: 60:fb:93:d7:ca:83:c9:6b:68:73:78:a1:59:93:4e: e9:03:2d:2c:21:3d:77:bc:30:29:01:e7:77:9f:67: 69:4e:f2:5b:45:95:20:ae:bd:fc:11:b5:e7:51:f7: b0:63:9c:8e:60:e7:1a:a6:1f:24:82:83:07:38:21: 18:86:21:48:58:fa:0c:9a:96:d4:4f:a1:ca:d2:3a: 20:ca:55:df:77:64:08:45:12:cd:bb:31:2f:e2:ea: 88:6f:63:5d:97:f2:91:f0:70:0c:91:0b:f2:03:12: ae:43:75:71:3e:d0:3d:41:74:46:ca:f6:5e:3e:36: 8a:b8:40:fe:e3:54:5b:61:e3:68:82:37:7e:8f:18: 97:0b:9a:2d:6a:70:38:de:03:35:24:81:60:ff:3d: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:09:A9:E6:98:FE:73:96:2A:66:A6:9C:9C:BB:4A:71:3D:7C:43:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/829bb3ba-29bc-3ddc-8e0d-829e23cb565e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad/4b9027e9-0517-4775-a6c4-35522e65e4ad.crl X509v3 Authority Key Identifier: keyid:68:06:97:CC:C1:0B:6F:31:4E:DB:31:35:FA:2D:07:F3:30:69:4F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4b9027e9-0517-4775-a6c4-35522e65e4ad.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcdd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:81:47:af:15:04:b3:1d:5c:c2:0f:44:d1:33:83:32:5f: 17:22:ee:d5:b3:43:36:df:ec:52:23:8a:6a:15:74:48:9e:6a: 3f:5e:be:e7:d8:8e:88:19:14:70:06:41:6f:80:a3:7f:ea:8c: e9:36:81:8e:2d:66:db:0e:cc:f7:38:bd:df:e0:35:ae:db:7b: c6:50:4e:24:00:f2:b7:a8:d8:d7:c5:33:ae:f9:75:d5:04:87: d5:fa:20:ec:d5:fd:52:9d:49:53:b7:f5:3f:46:2d:c1:aa:23: 16:5c:d4:fd:ba:a6:32:8e:70:05:a5:91:7c:d4:cf:c5:5b:d8: 37:ed:ab:fd:9b:b6:63:44:25:8d:07:58:08:a8:eb:df:41:40: 23:76:b8:a7:8a:2b:f6:aa:cb:c3:7d:8d:81:a1:87:fb:79:33: 64:a8:54:6f:87:b5:f1:f6:d6:27:b4:21:f0:33:3d:e7:51:dd: 81:b0:21:ca:54:70:77:ec:45:80:15:6f:c7:92:b9:0f:9f:ad: 12:c6:27:09:64:cf:a0:fb:44:f3:67:2a:68:f2:8d:d8:b6:a1: 3d:3c:31:22:bf:f6:3e:d9:3a:82:bf:08:91:2a:03:06:fa:c3: e0:29:72:15:75:b1:cf:d0:bc:f4:ca:87:38:e6:89:89:3e:71: 1b:09:a9:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE01n60MjCB9RdKcloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MDI3ZTktMDUxNy00Nzc1LWE2YzQtMzU1MjJlNjVl NGFkMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YjcyODk5NWUtN2JhMC00YjI0LTk0NjUtZmMzNzM5YWRmY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcQ4bRJ8/Wallh18MFMjNecNoB1EvNd2hMIM hyq5iKrcFeXqPgJeJi8YhGqLEIE6lxHvn53NtPrwg4dfFrwoM9lP+flfTOn4Jf3I Tq19q72Vqp+yGX856GtTmxxckeA3UpCQn5IJnOpg+5PXyoPJa2hzeKFZk07pAy0s IT13vDApAed3n2dpTvJbRZUgrr38EbXnUfewY5yOYOcaph8kgoMHOCEYhiFIWPoM mpbUT6HK0jogylXfd2QIRRLNuzEv4uqIb2Ndl/KR8HAMkQvyAxKuQ3VxPtA9QXRG yvZePjaKuED+41RbYeNogjd+jxiXC5otanA43gM1JIFg/z3hPwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEUJqeaY/nOWKmamnJy7SnE9fENaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Yjkw MjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUyMmU2NWU0YWQvODI5YmIzYmEtMjliYy0z ZGRjLThlMGQtODI5ZTIzY2I1NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGI5MDI3ZTktMDUxNy00Nzc1LWE2 YzQtMzU1MjJlNjVlNGFkLzRiOTAyN2U5LTA1MTctNDc3NS1hNmM0LTM1NTIyZTY1 ZTRhZC5jcmwwHwYDVR0jBBgwFoAUaAaXzMELbzFO2zE1+i0H8zBpTwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YjkwMjdlOS0wNTE3LTQ3NzUtYTZjNC0zNTUy MmU2NWU0YWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL83QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaUSBR68VBLMdXMIPRNEzgzJfFyLu1bNDNt/sUiOKahV0SJ5qP16+ 59iOiBkUcAZBb4Cjf+qM6TaBji1m2w7M9zi93+A1rtt7xlBOJADyt6jY18Uzrvl1 1QSH1fog7NX9Up1JU7f1P0YtwaojFlzU/bqmMo5wBaWRfNTPxVvYN+2r/Zu2Y0Ql jQdYCKjr30FAI3a4p4or9qrLw32NgaGH+3kzZKhUb4e18fbWJ7Qh8DM951HdgbAh ylRwd+xFgBVvx5K5D5+tEsYnCWTPoPtE82cqaPKN2LahPTwxIr/2Ptk6gr8IkSoD BvrD4ClyFXWxz9C89MqHOOaJiT5xGwmp5A== -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:04 2026 by rpki-client