$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/91b41f30-5c46-323f-8dc9-b6c239317d24.roa File: 91b41f30-5c46-323f-8dc9-b6c239317d24.roa (raw, json) Hash identifier: 6n47C4r7UFBCcdSp6sdTWgMriWLInGf1PAdHlDBOnRg= Subject key identifier: 25:AF:06:75:95:7C:58:F9:AE:49:05:B9:1E:96:31:9F:CE:FF:6A:38 Certificate issuer: /CN=7bd8660e-2f6d-40f4-af2c-cef28b455887 Certificate serial: 010D0C9F4328584D1DE48F3E283D031367D89E80 Authority key identifier: CE:A4:03:E2:D7:44:47:9F:70:E8:EC:C0:6A:AB:2E:D1:47:9D:2A:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/91b41f30-5c46-323f-8dc9-b6c239317d24.roa Signing time: Tue 10 Mar 2026 01:00:31 +0000 ROA not before: Tue 10 Mar 2026 01:00:31 +0000 ROA not after: Mon 08 Jun 2026 01:00:31 +0000 asID: 401555 IP address blocks: 2602:f74d:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/7bd8660e-2f6d-40f4-af2c-cef28b455887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/7bd8660e-2f6d-40f4-af2c-cef28b455887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:e4:8f:3e:28:3d:03:13:67:d8:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd8660e-2f6d-40f4-af2c-cef28b455887 Validity Not Before: Mar 10 01:00:31 2026 GMT Not After : Jun 8 01:00:31 2026 GMT Subject: CN=39ce5d71-927e-415b-bcde-87b1330a4961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:97:8b:d3:2e:ce:e6:57:87:57:47:a0:09: 7e:d6:62:e8:22:21:9e:76:87:26:55:09:e8:b2:b4: 84:10:ee:d0:e6:c0:87:17:2e:27:c1:15:1a:44:d7: 74:44:ab:3a:99:ff:9d:98:30:da:da:8e:d8:10:bb: 50:10:bd:96:b6:c5:f6:19:4d:35:4d:0b:75:50:11: a7:41:20:af:1d:b3:f4:8a:83:86:44:c2:b4:9e:3d: 57:bf:5f:5f:fa:a7:34:67:75:24:88:50:f9:ef:3d: 8b:18:b0:e5:43:84:c4:c1:c6:78:ce:92:51:9f:56: c4:f6:42:c9:4f:60:e0:cc:84:63:b9:5f:b2:49:9d: 83:68:e6:e5:4a:90:95:ad:05:2f:79:d2:85:a0:83: c4:30:e6:b0:5c:75:99:10:47:14:9a:e8:db:24:95: b9:ef:38:8b:bc:98:d3:d7:c4:4b:46:d2:03:41:fa: 1f:a4:f5:de:52:9e:6c:84:ce:a1:0f:5d:40:7e:36: 63:79:61:60:c9:ec:1a:a3:06:a6:c4:df:65:71:02: 14:3c:6b:96:8f:8d:bd:1a:e2:c2:45:da:84:12:d9: 07:d6:86:62:db:64:65:af:a5:69:76:98:fd:e8:1d: c6:ac:e4:7f:91:ad:70:ff:da:80:e3:d8:86:d7:db: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AF:06:75:95:7C:58:F9:AE:49:05:B9:1E:96:31:9F:CE:FF:6A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/91b41f30-5c46-323f-8dc9-b6c239317d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887/7bd8660e-2f6d-40f4-af2c-cef28b455887.crl X509v3 Authority Key Identifier: keyid:CE:A4:03:E2:D7:44:47:9F:70:E8:EC:C0:6A:AB:2E:D1:47:9D:2A:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7bd8660e-2f6d-40f4-af2c-cef28b455887.cer sbgp-ipAddrBlock: critical IPv6: 2602:f74d:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:62:68:b1:64:f6:eb:b2:0c:71:f6:e7:8b:bd:69:e2:13:cf: 62:7a:b2:62:6d:c1:53:5f:4d:18:2b:d6:b0:ee:c3:41:52:16: d3:57:74:02:92:bc:c5:06:b9:4d:e2:2c:ab:c4:99:0a:22:fd: 4e:d0:e5:08:3d:8a:5d:59:49:a1:8c:fd:37:2f:07:e6:6e:75: cc:03:21:4c:41:8b:2c:af:58:43:64:0f:2a:76:e0:70:90:eb: c1:ae:1d:e0:d5:3e:36:bf:52:49:a1:3f:58:e9:f3:ab:e6:00: 24:40:55:08:09:ad:75:cc:3d:1c:a3:bc:ee:0d:99:1f:12:6d: c9:77:a6:62:21:e6:d6:38:4e:e0:45:9f:7f:c1:ce:9e:b8:07: 31:97:da:72:fd:21:e1:61:51:52:40:42:8c:49:7a:c8:bf:b6: 8b:b9:8a:69:6b:b7:7e:30:1e:87:97:54:8a:8b:06:86:aa:61: 33:bd:8e:f0:03:13:08:32:85:02:a6:8b:1c:9c:02:32:56:bf: 90:80:18:8b:e9:be:fc:31:08:bf:70:0c:5d:55:68:bc:a3:6e: 6c:41:e6:63:af:f2:dc:74:f0:17:96:8f:b0:ae:2a:10:79:90: 22:67:4d:8d:31:ce:0d:6b:da:0f:3e:f0:b5:9e:c2:ba:fd:5d: 86:6b:6c:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0d5I8+KD0DE2fYnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JkODY2MGUtMmY2ZC00MGY0LWFmMmMtY2VmMjhiNDU1 ODg3MB4XDTI2MDMxMDAxMDAzMVoXDTI2MDYwODAxMDAzMVowLzEtMCsGA1UEAxMk MzljZTVkNzEtOTI3ZS00MTViLWJjZGUtODdiMTMzMGE0OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEuXi9MuzuZXh1dHoAl+1mLoIiGedocmVQno srSEEO7Q5sCHFy4nwRUaRNd0RKs6mf+dmDDa2o7YELtQEL2WtsX2GU01TQt1UBGn QSCvHbP0ioOGRMK0nj1Xv19f+qc0Z3UkiFD57z2LGLDlQ4TEwcZ4zpJRn1bE9kLJ T2DgzIRjuV+ySZ2DaOblSpCVrQUvedKFoIPEMOawXHWZEEcUmujbJJW57ziLvJjT 18RLRtIDQfofpPXeUp5shM6hD11AfjZjeWFgyewaowamxN9lcQIUPGuWj429GuLC RdqEEtkH1oZi22Rlr6Vpdpj96B3GrOR/ka1w/9qA49iG19udZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWvBnWVfFj5rkkFuR6WMZ/O/2o4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmQ4 NjYwZS0yZjZkLTQwZjQtYWYyYy1jZWYyOGI0NTU4ODcvOTFiNDFmMzAtNWM0Ni0z MjNmLThkYzktYjZjMjM5MzE3ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvN2JkODY2MGUtMmY2ZC00MGY0LWFm MmMtY2VmMjhiNDU1ODg3LzdiZDg2NjBlLTJmNmQtNDBmNC1hZjJjLWNlZjI4YjQ1 NTg4Ny5jcmwwHwYDVR0jBBgwFoAUzqQD4tdER59w6OzAaqsu0UedKt8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi83YmQ4NjYwZS0yZjZkLTQwZjQtYWYyYy1jZWYy OGI0NTU4ODcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3TQAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJiaLFk9uuyDHH254u9aeITz2J6smJtwVNfTRgr1rDuw0FSFtNX dAKSvMUGuU3iLKvEmQoi/U7Q5Qg9il1ZSaGM/TcvB+ZudcwDIUxBiyyvWENkDyp2 4HCQ68GuHeDVPja/UkmhP1jp86vmACRAVQgJrXXMPRyjvO4NmR8Sbcl3pmIh5tY4 TuBFn3/Bzp64BzGX2nL9IeFhUVJAQoxJesi/tou5imlrt34wHoeXVIqLBoaqYTO9 jvADEwgyhQKmixycAjJWv5CAGIvpvvwxCL9wDF1VaLyjbmxB5mOv8tx08BeWj7Cu KhB5kCJnTY0xzg1r2g8+8LWewrr9XYZrbF0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:59 2026 by rpki-client