$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa File: 4e0ffa67-e7db-3331-95d2-44e9847c6668.roa (raw, json) Hash identifier: zxa4XpqiJFKPzY5XY18mQbW5mAf+dBSlWNfMw7V2yX4= Subject key identifier: FA:CE:41:E4:76:0F:52:99:94:86:37:B0:8F:D1:49:C7:AB:ED:44:17 Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F4328584D1F4A0E2CE560F2806038CFE0 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 11721 IP address blocks: 2602:fa8a:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:0e:2c:e5:60:f2:80:60:38:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a4d15bdf-a1db-4517-b839-54eaca3c2fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:cd:6b:b5:af:dc:75:96:ce:1a:f9:c2:f8: bf:cd:4e:75:af:a4:7c:70:b7:3d:ac:96:51:75:ef: 1f:ec:1e:af:e0:c0:f8:b8:e4:ba:d3:5f:02:c4:36: 21:11:44:6b:48:74:89:af:09:8f:c4:86:00:b4:6b: 60:d0:e8:c7:87:a5:77:59:c2:46:c0:51:97:f4:25: eb:cf:cc:be:cd:7c:ae:db:64:4e:3d:a2:76:c9:2a: 29:e7:64:cb:ab:0e:0b:66:34:cd:52:84:bc:f4:e0: 46:90:04:bc:8a:36:80:54:44:37:a1:2f:27:4b:27: 43:4b:74:d8:b4:89:e7:a7:42:d4:eb:6d:7a:a2:ef: 5b:50:b3:5e:a7:24:85:dd:34:68:c4:a6:61:13:24: e8:bc:2b:a0:2d:f1:a3:81:d5:bb:39:e4:b7:6a:53: 59:e5:29:b5:43:5d:92:b2:c7:6f:00:b2:39:28:94: 95:89:67:a0:b8:66:2c:96:1a:d0:41:eb:fd:32:d7: 27:d0:99:74:ae:9e:c1:a4:cd:5a:2a:6e:f5:5b:31: 43:0d:8e:ef:b7:f4:b8:26:ec:57:33:33:17:41:da: b9:12:9d:f4:ea:8d:c1:16:28:0e:56:de:c3:63:9b: 0d:f8:7f:56:f3:1f:cf:b5:8e:63:72:73:31:ca:78: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CE:41:E4:76:0F:52:99:94:86:37:B0:8F:D1:49:C7:AB:ED:44:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa8a:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cb:a0:a5:ed:2b:f6:d4:f9:98:f4:53:fc:0f:83:68:f8:80: 9f:52:e1:86:aa:47:9b:56:8b:76:c3:e3:4c:40:ef:4f:e2:64: 21:b7:33:f8:db:63:3e:fc:ab:57:e5:ae:c7:80:a5:f9:64:ba: a1:bd:3a:83:71:4a:07:34:4a:0a:7d:51:51:33:0f:9f:78:46: ef:58:21:02:2e:37:10:1f:a1:77:9f:51:60:be:58:03:17:e7: 3d:5f:d7:6a:9d:06:b6:c0:d1:17:ca:ed:fa:80:d0:8f:0f:37: cb:0e:49:d1:37:ff:a7:39:a2:8f:a7:1f:35:c2:f3:a1:f0:68: c2:16:72:6c:ba:ab:96:9c:a9:d0:e9:3a:5b:b2:6a:e1:63:91: 1a:bd:cf:cb:44:28:f0:81:8b:d4:ca:5f:5f:a3:76:1b:f0:27: d1:c4:3c:37:d7:ca:2c:6e:2b:b6:5f:c7:e4:8e:5b:9e:b6:47: c8:c6:af:88:4b:8e:10:da:12:3d:98:39:f6:57:86:30:04:32: 22:1a:fe:b0:05:aa:34:b5:3e:45:8e:23:b8:a7:11:63:4f:3e: ad:1e:9d:7a:40:cd:ac:16:50:f7:e4:d8:de:06:5e:63:fa:74: bb:23:7d:cf:d9:f8:89:b6:b0:48:87:53:40:51:73:5d:91:49: c5:d0:71:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSg4s5WDygGA4z+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTRkMTViZGYtYTFkYi00NTE3LWI4MzktNTRlYWNhM2MyZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKbNa7Wv3HWWzhr5wvi/zU51r6R8cLc9rJZR de8f7B6v4MD4uOS6018CxDYhEURrSHSJrwmPxIYAtGtg0OjHh6V3WcJGwFGX9CXr z8y+zXyu22ROPaJ2ySop52TLqw4LZjTNUoS89OBGkAS8ijaAVEQ3oS8nSydDS3TY tInnp0LU6216ou9bULNepySF3TRoxKZhEyTovCugLfGjgdW7OeS3alNZ5Sm1Q12S ssdvALI5KJSViWeguGYslhrQQev9Mtcn0Jl0rp7BpM1aKm71WzFDDY7vt/S4JuxX MzMXQdq5Ep306o3BFigOVt7DY5sN+H9W8x/PtY5jcnMxyng94QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPrOQeR2D1KZlIY3sI/RScer7UQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvNGUwZmZhNjctZTdkYi0z MzMxLTk1ZDItNDRlOTg0N2M2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6igAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7LoKXtK/bU+Zj0U/wPg2j4gJ9S4YaqR5tWi3bD40xA70/iZCG3 M/jbYz78q1flrseApflkuqG9OoNxSgc0Sgp9UVEzD594Ru9YIQIuNxAfoXefUWC+ WAMX5z1f12qdBrbA0RfK7fqA0I8PN8sOSdE3/6c5oo+nHzXC86HwaMIWcmy6q5ac qdDpOluyauFjkRq9z8tEKPCBi9TKX1+jdhvwJ9HEPDfXyixuK7Zfx+SOW562R8jG r4hLjhDaEj2YOfZXhjAEMiIa/rAFqjS1PkWOI7inEWNPPq0enXpAzawWUPfk2N4G XmP6dLsjfc/Z+Im2sEiHU0BRc12RScXQcVI= -----END CERTIFICATE-----Generated at Wed Mar 25 21:28:08 2026 by rpki-client