$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa File: b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa (raw, json) Hash identifier: kvvACKEpPRxRRDzrzhoSWoZUovwoTna/7MM02t3eFE0= Subject key identifier: CC:D8:51:7F:47:1C:60:EB:36:32:D4:C9:90:32:1A:66:79:C8:64:FC Certificate issuer: /CN=a89dfa66-11db-4652-8710-2a69de76abaa Certificate serial: 010D0C9F4328584D0BBB21EAD959C3FCEFAA9500 Authority key identifier: 45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa Signing time: Tue 03 Mar 2026 12:52:31 +0000 ROA not before: Tue 03 Mar 2026 12:52:31 +0000 ROA not after: Mon 01 Jun 2026 11:52:31 +0000 asID: 401947 IP address blocks: 2602:f447::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:bb:21:ea:d9:59:c3:fc:ef:aa:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a89dfa66-11db-4652-8710-2a69de76abaa Validity Not Before: Mar 3 12:52:31 2026 GMT Not After : Jun 1 11:52:31 2026 GMT Subject: CN=18d79350-5843-422d-90e2-5338d35b90da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ac:bd:22:81:80:78:9d:c6:75:d3:54:e6:ed: 8b:51:b8:05:de:a3:76:d5:29:f1:08:26:e0:60:ed: fe:e3:c9:77:ab:59:f4:c3:cd:25:99:70:15:d8:b3: 53:96:5f:ce:2e:87:56:4d:bf:f8:5e:c0:a6:0a:ae: ad:9d:10:ae:d3:7c:ab:01:18:2e:44:98:73:6a:03: 8e:ea:92:d7:be:5e:b0:39:0e:a0:0f:bc:b2:0d:08: 75:c2:0b:71:ec:5e:64:fb:e9:21:cf:a2:18:c6:a0: 6f:59:0a:00:03:91:3d:8e:f7:0b:b5:c7:93:3f:c1: 21:05:95:23:04:58:d7:1f:28:ef:a4:1c:1b:1a:34: 09:68:99:c5:10:8c:40:3f:36:79:53:66:47:b3:02: 80:18:87:cf:67:5d:bc:d4:fa:91:b3:04:d7:83:8c: 2f:2b:64:8b:64:16:ed:73:06:d3:c4:fb:93:3f:c2: b1:4e:ba:f6:0d:0b:6f:a9:d6:c4:d0:f5:1b:c8:e9: b1:10:14:7c:23:08:35:9f:d7:84:76:5e:44:2b:ef: e6:72:68:ac:4a:2b:f1:d1:99:76:3e:e8:43:8d:bc: aa:ab:84:eb:21:5e:8b:7b:3d:05:f8:59:51:28:87: 94:94:94:b9:6e:60:bd:e0:27:c0:c3:2b:c4:ac:b1: f5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:51:7F:47:1C:60:EB:36:32:D4:C9:90:32:1A:66:79:C8:64:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/b3d0c767-d849-3fd0-93e5-6a900b4e0a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa/a89dfa66-11db-4652-8710-2a69de76abaa.crl X509v3 Authority Key Identifier: keyid:45:37:A0:C2:82:11:FC:22:C8:95:6B:CE:F0:C1:37:E8:4B:D2:18:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a89dfa66-11db-4652-8710-2a69de76abaa.cer sbgp-ipAddrBlock: critical IPv6: 2602:f447::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:22:61:d4:85:ea:4c:44:5f:99:9b:8d:7a:6b:c7:1b:bb:51: 9d:c3:f8:20:ca:cd:d7:a5:82:92:94:15:75:e9:26:0f:c5:95: 43:3b:25:a4:22:7e:1e:2f:6a:48:fa:7b:f4:3a:19:ff:a0:ce: 3b:a2:e1:85:e3:d8:c4:f9:d3:30:62:09:13:22:6a:c3:7d:27: e1:6f:1c:60:aa:c2:b2:34:19:8a:cf:d8:1d:93:b7:c3:5a:00: 79:85:a8:26:8b:b5:0f:cf:24:79:6a:3e:da:17:21:a5:b1:c8: fc:a4:17:a8:2d:38:f2:cb:e4:38:d2:ea:d0:bf:f6:b5:23:d8: 8b:72:7d:3e:69:3d:c7:ad:13:81:d8:a8:3d:fe:41:c0:49:36: 44:f3:59:30:c3:9c:f8:a3:ad:32:ca:ba:11:63:28:6c:87:f3: 04:86:bf:93:47:79:d8:e0:fe:8a:db:67:36:3a:25:1c:fe:30: 61:29:24:56:b2:e9:7f:c3:13:79:9e:52:da:da:35:ac:0d:e7: 04:43:b2:9f:ea:0d:41:a7:c2:b9:12:ff:05:eb:f0:88:99:88: 78:ce:3b:b7:22:e8:fd:0e:2a:0c:d3:81:bd:17:e2:7b:43:f8: 92:b9:a1:8b:e2:57:85:e3:dd:e8:4d:9f:6b:11:f8:01:1b:c2: a0:91:5d:57 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0LuyHq2VnD/O+qlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5ZGZhNjYtMTFkYi00NjUyLTg3MTAtMmE2OWRlNzZh YmFhMB4XDTI2MDMwMzEyNTIzMVoXDTI2MDYwMTExNTIzMVowLzEtMCsGA1UEAxMk MThkNzkzNTAtNTg0My00MjJkLTkwZTItNTMzOGQzNWI5MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKy9IoGAeJ3GddNU5u2LUbgF3qN21SnxCCbg YO3+48l3q1n0w80lmXAV2LNTll/OLodWTb/4XsCmCq6tnRCu03yrARguRJhzagOO 6pLXvl6wOQ6gD7yyDQh1wgtx7F5k++khz6IYxqBvWQoAA5E9jvcLtceTP8EhBZUj BFjXHyjvpBwbGjQJaJnFEIxAPzZ5U2ZHswKAGIfPZ1281PqRswTXg4wvK2SLZBbt cwbTxPuTP8KxTrr2DQtvqdbE0PUbyOmxEBR8Iwg1n9eEdl5EK+/mcmisSivx0Zl2 PuhDjbyqq4TrIV6Lez0F+FlRKIeUlJS5bmC94CfAwyvErLH1iQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMzYUX9HHGDrNjLUyZAyGmZ5yGT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlk ZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5ZGU3NmFiYWEvYjNkMGM3NjctZDg0OS0z ZmQwLTkzZTUtNmE5MDBiNGUwYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg5ZGZhNjYtMTFkYi00NjUyLTg3 MTAtMmE2OWRlNzZhYmFhL2E4OWRmYTY2LTExZGItNDY1Mi04NzEwLTJhNjlkZTc2 YWJhYS5jcmwwHwYDVR0jBBgwFoAURTegwoIR/CLIlWvO8ME36EvSGLYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODlkZmE2Ni0xMWRiLTQ2NTItODcxMC0yYTY5 ZGU3NmFiYWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0RwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkyJh1IXqTERfmZuNemvHG7tRncP4IMrN16WCkpQVdekmD8WVQzsl pCJ+Hi9qSPp79DoZ/6DOO6LhhePYxPnTMGIJEyJqw30n4W8cYKrCsjQZis/YHZO3 w1oAeYWoJou1D88keWo+2hchpbHI/KQXqC048svkONLq0L/2tSPYi3J9Pmk9x60T gdioPf5BwEk2RPNZMMOc+KOtMsq6EWMobIfzBIa/k0d52OD+ittnNjolHP4wYSkk VrLpf8MTeZ5S2to1rA3nBEOyn+oNQafCuRL/BevwiJmIeM47tyLo/Q4qDNOBvRfi e0P4krmhi+JXhePd6E2faxH4ARvCoJFdVw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:19:17 2026 by rpki-client