$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/287b4600-26a1-35c9-86b1-73652edb1b2d.roa File: 287b4600-26a1-35c9-86b1-73652edb1b2d.roa (raw, json) Hash identifier: MSOCchP7y17OMixamVNomiPzofuz3o1ocBcW/MSSzcw= Subject key identifier: 89:AD:88:E6:D8:0C:C3:12:2A:7F:7F:1E:2B:C0:F5:99:37:89:0B:BC Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584D44FA626462AF7F36F4F88AC0 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/287b4600-26a1-35c9-86b1-73652edb1b2d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16740 IP address blocks: 2602:f5c1:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:62:64:62:af:7f:36:f4:f8:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=2997ebb8-a71d-42e0-a0b4-a8e2cb526397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:0c:0a:1b:12:19:aa:9f:19:e4:52:e9:ce: 48:5b:11:25:81:03:58:8d:68:ab:4a:c2:72:06:38: d4:6d:ac:1a:a4:b5:80:ef:ed:8c:e3:c9:84:b1:e6: 0d:4b:b8:bf:05:7e:c3:21:7a:15:c9:b9:1a:88:e3: c1:97:f9:d7:2a:92:95:6e:63:95:00:4c:f1:57:ec: 44:57:82:9a:26:9d:04:75:5b:62:e6:e8:44:a8:61: 28:56:87:28:87:ef:82:1a:16:ad:77:c7:26:74:7a: 1c:73:8f:ee:8b:ad:d3:8c:d6:80:08:d0:9b:0c:4f: 2c:66:bb:03:64:60:e4:ab:0d:3a:a4:2a:cd:00:b2: 3a:3b:9d:b8:fa:c2:64:94:bd:6e:8f:61:22:dc:01: 26:a3:ef:a7:3d:23:f5:dc:a2:23:cf:b1:df:1e:35: 8e:14:6e:f8:ba:e6:c6:38:ec:50:ed:a6:f0:80:9b: b2:9b:fe:94:d8:7d:31:9d:ec:8a:21:68:ee:15:db: 60:02:01:56:3d:56:91:e1:5a:83:af:0c:87:61:df: c0:11:1f:82:03:4b:33:18:1e:83:c4:48:38:a8:f1: ec:2c:44:72:1c:bd:90:43:3f:36:5f:da:01:4f:c1: 5c:53:67:11:7c:46:b3:94:6d:93:c8:3c:44:6a:ef: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AD:88:E6:D8:0C:C3:12:2A:7F:7F:1E:2B:C0:F5:99:37:89:0B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/287b4600-26a1-35c9-86b1-73652edb1b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:bf:e3:a3:25:e6:0d:98:3e:b9:ad:74:14:5e:3f:24:73:44: 1e:b7:77:77:47:89:0d:40:0c:0c:08:0e:79:39:d3:e3:cf:43: 6b:55:14:84:5d:e5:24:dc:a6:47:5b:09:39:30:98:e0:97:81: bc:33:f2:69:2c:66:19:43:82:97:04:92:bd:24:62:16:a4:b8: 13:58:e5:a4:b5:aa:7e:f3:22:84:43:91:64:97:47:29:9f:b5: 8e:98:e3:72:03:a6:55:db:f3:9c:66:59:90:be:95:ce:bc:4c: 21:27:7e:07:59:32:11:da:f5:78:0f:af:7a:22:5e:2a:54:d1: 62:b2:71:84:bf:44:93:b5:03:a9:04:13:77:95:9c:77:32:e7: 00:1d:22:51:17:40:d0:f7:7a:61:23:0b:77:37:7d:05:88:0a: 96:bb:91:20:72:3b:c1:15:a1:04:1e:e1:46:7f:b5:51:d3:2c: 02:c8:4a:7e:c3:50:e3:a9:1d:c2:c8:17:7a:ce:36:70:99:e0: eb:15:db:eb:6f:e6:95:80:de:9a:0b:1a:54:4e:e5:93:ba:69: 8f:f3:39:1d:05:04:f2:2d:67:03:83:17:9c:7d:1c:a1:a0:a8: c6:55:42:39:eb:a1:7f:c4:5b:24:65:b9:8f:0c:e8:88:0a:57: f3:fc:c4:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1E+mJkYq9/NvT4isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Mjk5N2ViYjgtYTcxZC00MmUwLWEwYjQtYThlMmNiNTI2Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9EMChsSGaqfGeRS6c5IWxElgQNYjWirSsJy BjjUbawapLWA7+2M48mEseYNS7i/BX7DIXoVybkaiOPBl/nXKpKVbmOVAEzxV+xE V4KaJp0EdVti5uhEqGEoVocoh++CGhatd8cmdHocc4/ui63TjNaACNCbDE8sZrsD ZGDkqw06pCrNALI6O524+sJklL1uj2Ei3AEmo++nPSP13KIjz7HfHjWOFG74uubG OOxQ7abwgJuym/6U2H0xneyKIWjuFdtgAgFWPVaR4VqDrwyHYd/AER+CA0szGB6D xEg4qPHsLERyHL2QQz82X9oBT8FcU2cRfEazlG2TyDxEau9KewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFImtiObYDMMSKn9/HivA9Zk3iQu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvMjg3YjQ2MDAtMjZhMS0z NWM5LTg2YjEtNzM2NTJlZGIxYjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+/46Ml5g2YPrmtdBRePyRzRB63d3dHiQ1ADAwIDnk50+PPQ2tV FIRd5STcpkdbCTkwmOCXgbwz8mksZhlDgpcEkr0kYhakuBNY5aS1qn7zIoRDkWSX RymftY6Y43IDplXb85xmWZC+lc68TCEnfgdZMhHa9XgPr3oiXipU0WKycYS/RJO1 A6kEE3eVnHcy5wAdIlEXQND3emEjC3c3fQWICpa7kSByO8EVoQQe4UZ/tVHTLALI Sn7DUOOpHcLIF3rONnCZ4OsV2+tv5pWA3poLGlRO5ZO6aY/zOR0FBPItZwODF5x9 HKGgqMZVQjnroX/EWyRluY8M6IgKV/P8xDk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:33 2026 by rpki-client