$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/7968d7e3-c122-328f-abdd-9d7d452a1bd4.roa File: 7968d7e3-c122-328f-abdd-9d7d452a1bd4.roa (raw, json) Hash identifier: FLd1wDQRucQqw+cSwcHkdFJhQQ6yh6Gr6d5+Hap72JY= Subject key identifier: AA:18:9C:51:2F:16:4E:8C:9C:DE:82:24:62:4F:36:B3:BC:E8:8B:8F Certificate issuer: /CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Certificate serial: 010D0C9F4328584D250DB2922705950172C2F310 Authority key identifier: 36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/7968d7e3-c122-328f-abdd-9d7d452a1bd4.roa Signing time: Thu 12 Mar 2026 14:34:05 +0000 ROA not before: Thu 12 Mar 2026 14:34:05 +0000 ROA not after: Wed 10 Jun 2026 14:34:05 +0000 asID: 401721 IP address blocks: 2602:f655:80::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0d:b2:92:27:05:95:01:72:c2:f3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d252b-9a0e-4493-be93-e6a8e2fffee3 Validity Not Before: Mar 12 14:34:05 2026 GMT Not After : Jun 10 14:34:05 2026 GMT Subject: CN=217393c6-8432-4401-a978-fdf8960fb9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:76:85:eb:c5:3d:f3:cd:dc:f5:6e:cc:75:17: 1f:97:ec:f3:2a:b1:7e:f4:c5:42:8f:45:f7:57:be: b7:f6:5a:fe:72:79:23:5c:41:17:fd:fa:87:8e:f8: c3:f3:3b:a6:6f:eb:b0:fd:1c:a5:a8:f5:8e:51:a0: f6:90:61:ea:52:28:7b:4b:a5:2b:d3:dd:99:4d:69: 56:05:31:53:be:17:c1:81:ab:30:3f:a0:3f:ce:9c: 2d:77:0a:87:73:6a:98:11:c2:5f:5e:f3:22:69:48: 1b:1f:88:a4:5a:cb:74:7e:ec:9a:1f:23:4a:84:54: 4a:51:c4:c2:26:64:98:36:8e:ac:74:1f:34:68:f5: fa:29:ca:56:cc:40:3d:ee:f9:48:45:81:81:91:fb: bd:5f:d1:13:3e:80:90:a3:ab:57:92:2e:60:da:3e: 17:70:b0:74:67:47:93:28:92:0f:7f:83:34:55:62: a5:82:dd:6f:9b:44:2d:7b:7a:82:8d:ab:fe:8d:55: 81:a9:c7:a0:ca:61:6f:bd:e8:c1:8c:db:da:87:0f: a1:65:3f:b8:e3:e5:62:84:d6:96:9a:27:ee:33:b3: 60:2d:98:d1:ff:75:42:96:40:a0:36:62:24:4d:c2: 30:db:60:75:8e:68:fc:27:28:c0:87:ab:71:e0:83: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:18:9C:51:2F:16:4E:8C:9C:DE:82:24:62:4F:36:B3:BC:E8:8B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/7968d7e3-c122-328f-abdd-9d7d452a1bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.crl X509v3 Authority Key Identifier: keyid:36:1E:A9:0E:31:23:78:88:E3:EB:5D:FD:79:2F:5E:3C:06:BD:89:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f71d252b-9a0e-4493-be93-e6a8e2fffee3.cer sbgp-ipAddrBlock: critical IPv6: 2602:f655:80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7f:91:58:17:95:8b:51:f6:0c:06:2d:1d:69:d5:ff:0a:8a: 80:0a:cd:14:31:fa:59:9c:98:22:91:76:60:5b:69:3c:de:6a: 84:09:8e:a4:ae:54:72:6d:b1:07:db:92:63:f6:05:f8:c5:63: de:f8:64:ed:b2:3e:8f:99:01:47:3c:0d:cb:79:4e:3f:fc:82: 3a:3c:6a:23:3e:ab:17:f8:06:3c:92:d8:ab:71:ad:15:26:dc: c8:f2:b6:70:93:fb:71:21:3a:43:a0:bb:5b:8b:76:68:41:d5: bd:6e:90:b0:9a:1d:60:94:18:17:8e:13:1e:8b:3a:93:60:23: 72:35:2b:a9:e3:a4:b3:0f:fc:b3:7b:ff:29:52:68:7f:c9:3d: 17:1e:c1:ab:47:14:30:b4:1a:25:fe:48:8d:46:c4:c0:a1:8c: f5:51:0d:4a:3f:92:e1:9a:f3:63:8c:a6:38:58:0e:08:11:c9: fb:fa:c9:f0:b7:b9:50:f5:83:0f:6d:4b:a4:6b:3c:07:f8:29: 99:7b:24:e8:58:cd:5a:c9:37:b8:f3:c1:a4:38:c6:55:c8:d5: 53:5a:37:57:fa:24:dc:dd:96:18:f7:82:27:3c:03:40:20:21: 22:36:86:54:31:ad:e8:b2:4c:33:08:0c:2e:e0:df:b3:8e:53: fb:f7:4d:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDbKSJwWVAXLC8xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjcxZDI1MmItOWEwZS00NDkzLWJlOTMtZTZhOGUyZmZm ZWUzMB4XDTI2MDMxMjE0MzQwNVoXDTI2MDYxMDE0MzQwNVowLzEtMCsGA1UEAxMk MjE3MzkzYzYtODQzMi00NDAxLWE5NzgtZmRmODk2MGZiOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnaF68U9883c9W7MdRcfl+zzKrF+9MVCj0X3 V7639lr+cnkjXEEX/fqHjvjD8zumb+uw/RylqPWOUaD2kGHqUih7S6Ur092ZTWlW BTFTvhfBgaswP6A/zpwtdwqHc2qYEcJfXvMiaUgbH4ikWst0fuyaHyNKhFRKUcTC JmSYNo6sdB80aPX6KcpWzEA97vlIRYGBkfu9X9ETPoCQo6tXki5g2j4XcLB0Z0eT KJIPf4M0VWKlgt1vm0Qte3qCjav+jVWBqcegymFvvejBjNvahw+hZT+44+VihNaW mifuM7NgLZjR/3VClkCgNmIkTcIw22B1jmj8JyjAh6tx4IM4SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKoYnFEvFk6MnN6CJGJPNrO86IuPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFk MjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4ZTJmZmZlZTMvNzk2OGQ3ZTMtYzEyMi0z MjhmLWFiZGQtOWQ3ZDQ1MmExYmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjcxZDI1MmItOWEwZS00NDkzLWJl OTMtZTZhOGUyZmZmZWUzL2Y3MWQyNTJiLTlhMGUtNDQ5My1iZTkzLWU2YThlMmZm ZmVlMy5jcmwwHwYDVR0jBBgwFoAUNh6pDjEjeIjj6139eS9ePAa9iWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNzFkMjUyYi05YTBlLTQ0OTMtYmU5My1lNmE4 ZTJmZmZlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL2VQCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5/kVgXlYtR9gwGLR1p1f8KioAKzRQx+lmcmCKRdmBbaTzeaoQJ jqSuVHJtsQfbkmP2BfjFY974ZO2yPo+ZAUc8Dct5Tj/8gjo8aiM+qxf4BjyS2Ktx rRUm3MjytnCT+3EhOkOgu1uLdmhB1b1ukLCaHWCUGBeOEx6LOpNgI3I1K6njpLMP /LN7/ylSaH/JPRcewatHFDC0GiX+SI1GxMChjPVRDUo/kuGa82OMpjhYDggRyfv6 yfC3uVD1gw9tS6RrPAf4KZl7JOhYzVrJN7jzwaQ4xlXI1VNaN1f6JNzdlhj3gic8 A0AgISI2hlQxreiyTDMIDC7g37OOU/v3TUs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:36 2026 by rpki-client