$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa File: 88d218ab-9c22-353d-a21d-a0cf2af8daff.roa (raw, json) Hash identifier: jWvh/sAKBfl0NILC2rG9+2uVZMMYXEvEO4b+dMt2TrA= Subject key identifier: 9C:71:F6:39:A7:EF:EA:71:04:A2:FF:E8:0D:B6:E6:20:8B:6D:4B:A1 Certificate issuer: /CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Certificate serial: 010D0C9F4328584D3F64EF8CF9B39AF6A89F3E00 Authority key identifier: 93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 1030 IP address blocks: 2602:f9cd::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:8c:f9:b3:9a:f6:a8:9f:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5bd3578-3c08-44d1-99e2-8087fc48ffb3 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=59fe670b-c0ae-48e7-ba45-46b28ed73ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:a7:58:41:77:54:81:d4:4b:40:7c:f3:e2: 94:cf:a6:ca:03:79:c6:33:ed:a7:9a:20:e6:a8:a8: fd:cf:28:6b:62:be:96:94:0a:af:55:92:ff:35:41: 78:a7:21:02:64:92:a0:a8:04:9f:60:bf:a5:f0:d6: dc:f4:8a:41:e0:c4:09:b1:a2:cb:8e:89:a5:81:62: ef:98:ab:cc:03:d6:d7:45:14:86:14:92:77:37:54: dd:7f:78:7d:a2:6d:a2:53:22:3a:3d:dd:91:1e:b7: 71:7a:64:5c:38:1a:ed:89:b0:49:b2:a1:d2:9c:2d: e2:91:70:3c:fd:b4:eb:fd:5b:83:2b:aa:ed:16:66: 01:31:a7:c8:19:c7:18:55:6d:35:1f:06:e2:83:8b: 66:16:75:79:3f:5c:ec:f3:2d:0e:50:32:5a:41:a4: fc:ea:da:6d:e6:d9:9e:a3:92:8d:97:c5:ed:62:e4: f0:4f:d5:6a:48:e4:02:e5:89:4a:a1:20:88:e4:0e: fb:53:c3:50:24:0d:7a:c0:e0:c7:98:13:24:ae:03: 6a:b1:6c:02:85:fa:96:d2:76:d6:5e:87:45:d3:cd: 5d:ea:02:bb:0b:fc:54:bf:ad:47:14:f9:94:3c:7a: 99:0f:df:2d:ba:1f:ab:ac:be:3a:d4:2a:2e:e0:0e: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:71:F6:39:A7:EF:EA:71:04:A2:FF:E8:0D:B6:E6:20:8B:6D:4B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/88d218ab-9c22-353d-a21d-a0cf2af8daff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.crl X509v3 Authority Key Identifier: keyid:93:46:0B:B5:74:F6:A0:9C:71:F0:B1:7D:9C:ED:7E:CD:05:DA:07:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5bd3578-3c08-44d1-99e2-8087fc48ffb3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9cd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a1:ea:7f:e8:e0:e2:78:db:49:9a:51:54:49:73:71:bf:a1: 0c:2c:61:4f:28:7d:21:23:35:ed:9f:46:f6:d9:95:65:c0:7e: 4d:03:78:37:44:dc:ca:44:1a:de:63:89:df:f2:f6:8f:86:96: 2e:3f:6d:91:ea:ac:8b:c2:68:fc:20:fc:bc:96:4a:98:f0:40: c6:4d:c5:4f:51:dd:6c:22:e8:da:71:24:93:95:5f:ec:92:ed: 1b:e3:0d:23:58:ad:29:d7:dd:01:82:ad:c8:1c:77:4e:90:c2: 1a:62:4a:bf:a6:32:99:0a:66:3d:97:bb:ca:56:b4:e3:dd:ee: 9c:76:19:43:c5:27:cd:93:2d:81:8d:5b:e9:92:7f:fd:ea:f4: e9:ed:b7:c9:bf:6a:4a:91:a2:27:29:5f:e5:8b:d8:12:30:58: 44:56:a6:b1:6c:43:00:da:a1:fb:d0:31:7d:0e:4b:9c:4f:f7: 63:ed:c9:fd:73:bb:27:8d:fd:56:e8:03:63:53:99:4f:e3:cb: 5d:c8:2c:6f:76:9d:0b:40:5b:de:55:07:a0:d9:89:7f:49:1b: 42:53:35:08:79:fd:6f:66:9d:a7:c2:6f:d4:5b:14:2d:9b:b9: e6:b3:7e:ce:fc:08:dd:1e:74:98:39:c1:ee:17:a4:11:70:44: 92:8b:a9:63 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0/ZO+M+bOa9qifPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDViZDM1NzgtM2MwOC00NGQxLTk5ZTItODA4N2ZjNDhm ZmIzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTlmZTY3MGItYzBhZS00OGU3LWJhNDUtNDZiMjhlZDczZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ynWEF3VIHUS0B88+KUz6bKA3nGM+2nmiDm qKj9zyhrYr6WlAqvVZL/NUF4pyECZJKgqASfYL+l8Nbc9IpB4MQJsaLLjomlgWLv mKvMA9bXRRSGFJJ3N1Tdf3h9om2iUyI6Pd2RHrdxemRcOBrtibBJsqHSnC3ikXA8 /bTr/VuDK6rtFmYBMafIGccYVW01Hwbig4tmFnV5P1zs8y0OUDJaQaT86tpt5tme o5KNl8XtYuTwT9VqSOQC5YlKoSCI5A77U8NQJA16wODHmBMkrgNqsWwChfqW0nbW XodF081d6gK7C/xUv61HFPmUPHqZD98tuh+rrL461Cou4A6u3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJxx9jmn7+pxBKL/6A225iCLbUuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJk MzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3ZmM0OGZmYjMvODhkMjE4YWItOWMyMi0z NTNkLWEyMWQtYTBjZjJhZjhkYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDViZDM1NzgtM2MwOC00NGQxLTk5 ZTItODA4N2ZjNDhmZmIzL2Q1YmQzNTc4LTNjMDgtNDRkMS05OWUyLTgwODdmYzQ4 ZmZiMy5jcmwwHwYDVR0jBBgwFoAUk0YLtXT2oJxx8LF9nO1+zQXaB+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kNWJkMzU3OC0zYzA4LTQ0ZDEtOTllMi04MDg3 ZmM0OGZmYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5zQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAcKHqf+jg4njbSZpRVElzcb+hDCxhTyh9ISM17Z9G9tmVZcB+TQN4 N0TcykQa3mOJ3/L2j4aWLj9tkeqsi8Jo/CD8vJZKmPBAxk3FT1HdbCLo2nEkk5Vf 7JLtG+MNI1itKdfdAYKtyBx3TpDCGmJKv6YymQpmPZe7yla0493unHYZQ8UnzZMt gY1b6ZJ//er06e23yb9qSpGiJylf5YvYEjBYRFamsWxDANqh+9AxfQ5LnE/3Y+3J /XO7J439VugDY1OZT+PLXcgsb3adC0Bb3lUHoNmJf0kbQlM1CHn9b2adp8Jv1FsU LZu55rN+zvwI3R50mDnB7hekEXBEkoupYw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:05 2026 by rpki-client