$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/7421d1a5-77dc-305a-8a12-61feda8d1c91.roa File: 7421d1a5-77dc-305a-8a12-61feda8d1c91.roa (raw, json) Hash identifier: yHXzDDsUy6FWQSEKG/cUiFiwRodutdkt3rYxpCszyT8= Subject key identifier: C0:F5:EC:B9:4E:79:AD:38:70:7F:34:D3:22:D6:CF:FB:2A:50:E5:A0 Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584D44FA61A95E77F751392D2E40 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/7421d1a5-77dc-305a-8a12-61feda8d1c91.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 140666 IP address blocks: 2602:fa80:3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:61:a9:5e:77:f7:51:39:2d:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f28906f1-6b02-4ff4-bfde-e4e3e4d4acb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:06:b7:c8:58:a0:b0:0a:f3:59:38:55:a7: 51:03:b1:67:20:a5:a5:9c:15:fb:93:b8:1e:bc:73: dc:b2:24:92:7a:57:25:1e:ed:15:a1:b1:02:2a:94: 94:80:0e:1c:46:fb:64:fe:52:26:22:f6:95:44:40: cc:37:a6:ed:aa:ad:8e:b9:ca:47:2e:44:1d:b3:a1: fd:21:3b:98:e0:f7:89:f8:ad:2f:2e:45:a7:33:89: 77:27:4b:c9:65:52:05:37:b6:f7:d5:e5:93:ff:c6: e9:d5:82:7b:c3:cc:fb:17:9b:d0:6b:d3:65:4c:db: 7d:1e:8d:ec:81:83:41:aa:3a:bd:8e:21:24:17:cd: c9:4b:43:d7:6f:e9:ea:cd:60:92:78:e8:54:86:f9: 3d:df:c1:c2:53:ab:3b:cf:b4:69:4e:8f:ae:02:b0: 5e:cf:a7:4b:96:d7:75:f8:44:b7:33:f3:c7:ce:a6: c0:32:2c:18:39:db:74:4e:ab:de:ff:91:32:34:47: ec:06:95:71:68:ab:cf:8e:57:c3:d2:b3:10:f7:87: e1:a4:89:f9:87:89:87:00:74:f4:60:a8:50:7b:d9: b3:68:21:43:83:dc:61:8d:10:c8:5d:97:1c:62:d4: 13:13:e7:9d:a3:b7:f5:d1:3e:32:bf:d2:9a:06:59: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:EC:B9:4E:79:AD:38:70:7F:34:D3:22:D6:CF:FB:2A:50:E5:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/7421d1a5-77dc-305a-8a12-61feda8d1c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dd:5c:72:7c:7a:67:1a:56:d3:06:0a:41:c6:a8:a5:ad:ec: ad:0c:be:be:0a:63:fe:5d:1d:bd:e7:f4:67:10:5b:7a:73:74: 96:b2:86:af:c5:ab:a7:5a:01:00:f1:e4:ed:f3:d4:cb:70:78: 2f:47:73:58:ac:e6:1f:d3:06:41:4b:69:4a:58:3e:98:20:ce: 6f:25:b9:10:c5:99:93:92:22:4a:17:26:c0:0b:d1:23:71:fd: 4f:1e:5c:a7:45:7e:c5:86:c8:0c:58:53:5c:48:a2:84:a5:c5: 40:03:ce:2e:ac:91:86:b7:80:13:2f:61:37:4e:cc:90:f7:50: 5c:b8:13:ba:26:9a:bc:db:79:37:3a:77:ea:bb:97:ec:70:ed: 01:fd:70:73:de:5b:51:e3:64:8a:2e:e5:ba:ce:9c:f8:5b:a9: 08:8d:10:a6:32:62:d0:a1:fb:70:ec:84:3b:ed:52:d8:a5:ab: a8:a7:3b:44:8b:10:47:5d:ba:fa:ca:1e:cd:06:c6:c3:2f:ef: 06:4b:04:6a:d7:73:ef:b8:fc:4d:65:85:65:97:11:bb:61:7e: 5e:8f:30:94:92:33:66:f8:a4:3e:e5:20:be:c5:b9:fa:1c:6a: 78:4c:cf:70:9a:57:05:d3:f0:00:bb:e2:ce:35:f8:30:c1:78: ba:6a:1e:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+mGpXnf3UTktLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjI4OTA2ZjEtNmIwMi00ZmY0LWJmZGUtZTRlM2U0ZDRhY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuasGt8hYoLAK81k4VadRA7FnIKWlnBX7k7ge vHPcsiSSelclHu0VobECKpSUgA4cRvtk/lImIvaVREDMN6btqq2OucpHLkQds6H9 ITuY4PeJ+K0vLkWnM4l3J0vJZVIFN7b31eWT/8bp1YJ7w8z7F5vQa9NlTNt9Ho3s gYNBqjq9jiEkF83JS0PXb+nqzWCSeOhUhvk938HCU6s7z7RpTo+uArBez6dLltd1 +ES3M/PHzqbAMiwYOdt0Tqve/5EyNEfsBpVxaKvPjlfD0rMQ94fhpIn5h4mHAHT0 YKhQe9mzaCFDg9xhjRDIXZccYtQTE+edo7f10T4yv9KaBlmJmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMD17LlOea04cH800yLWz/sqUOWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvNzQyMWQxYTUtNzdkYy0z MDVhLThhMTItNjFmZWRhOGQxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gAA+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHdXHJ8emcaVtMGCkHGqKWt7K0Mvr4KY/5dHb3n9GcQW3pzdJay hq/Fq6daAQDx5O3z1MtweC9Hc1is5h/TBkFLaUpYPpggzm8luRDFmZOSIkoXJsAL 0SNx/U8eXKdFfsWGyAxYU1xIooSlxUADzi6skYa3gBMvYTdOzJD3UFy4E7ommrzb eTc6d+q7l+xw7QH9cHPeW1HjZIou5brOnPhbqQiNEKYyYtCh+3DshDvtUtilq6in O0SLEEdduvrKHs0GxsMv7wZLBGrXc++4/E1lhWWXEbthfl6PMJSSM2b4pD7lIL7F ufocanhMz3CaVwXT8AC74s41+DDBeLpqHiI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:23 2026 by rpki-client