$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/956131f3-1f70-3ccf-b219-1f6bc22cd991.roa File: 956131f3-1f70-3ccf-b219-1f6bc22cd991.roa (raw, json) Hash identifier: 4J+KjY3ilxQ1VmN2H/5jPX69D/E/DKhxHU52Dj6Wt8k= Subject key identifier: EA:57:AE:B9:65:4B:71:C6:22:3C:79:75:7C:BA:9A:0B:5A:50:A3:68 Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Certificate serial: 010D0C9F4328584D7AF8BAE2571218148FF8F380 Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/956131f3-1f70-3ccf-b219-1f6bc22cd991.roa Signing time: Sun 12 Apr 2026 09:11:21 +0000 ROA not before: Sun 12 Apr 2026 09:11:21 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 27523 IP address blocks: 2602:f93b::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:f8:ba:e2:57:12:18:14:8f:f8:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Validity Not Before: Apr 12 09:11:21 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c5add251-d356-4cec-a441-8b490ee3f6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:59:02:3f:23:3d:d2:8e:e2:ff:52:8a:e7: b9:84:1c:2b:cf:31:62:d9:cb:d7:3f:10:f8:83:a8: ec:41:36:9e:f0:47:cb:c4:5c:0d:ae:3b:5c:d5:13: 66:fa:0c:c4:5d:ff:13:2d:4d:6e:c2:09:dd:70:a2: 46:ac:28:10:e3:a4:f5:84:70:cc:db:e0:43:9e:96: b2:2a:d2:ee:d9:11:f1:d1:8e:e6:84:83:6b:dc:1d: 4a:a1:ac:f0:4c:4d:38:70:40:1d:28:9a:c9:4a:4b: 39:f6:b7:d4:db:c9:41:f0:e4:a7:cf:4f:4b:0f:56: 4a:1f:d0:06:3d:05:3b:e1:56:a0:5d:d7:38:f3:d0: b3:4b:4a:bc:97:75:dd:68:8d:9a:31:14:1c:bc:44: 45:21:4f:41:01:44:d0:0d:5a:4c:83:ee:ab:7b:a1: 37:4b:6c:9c:5f:cd:e4:39:d3:7f:07:05:45:f3:f5: 69:40:5e:d0:ba:00:b2:a2:95:f6:c6:bb:8b:e2:5e: fb:5f:c2:11:3d:27:42:0d:15:82:6f:57:11:82:6d: 25:8b:d0:ab:05:0e:1b:61:85:2f:8a:7a:40:c2:e1: e9:99:d4:dd:bf:5d:34:2b:6a:7a:f0:e7:09:18:4c: d5:16:72:19:ef:81:74:df:d5:c5:16:d9:e7:d5:e7: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:57:AE:B9:65:4B:71:C6:22:3C:79:75:7C:BA:9A:0B:5A:50:A3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/956131f3-1f70-3ccf-b219-1f6bc22cd991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl X509v3 Authority Key Identifier: keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f93b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:24:d4:96:14:ae:a2:43:eb:d4:cf:6a:88:e0:46:40:27:fc: 74:c7:55:8b:a4:1b:65:b0:98:8a:90:9a:52:b8:ae:a9:ac:16: 21:62:34:bb:b6:47:ec:aa:38:e5:8a:02:79:af:cb:51:18:19: 18:d9:d5:e0:b1:5a:d6:b1:fb:90:62:ac:e9:dd:ea:74:c0:a7: 9f:31:16:e6:d6:64:0f:c9:ec:c2:a3:f0:0f:20:3c:91:55:d8: e9:08:3a:67:55:60:71:f2:59:b5:08:fd:82:05:40:02:b7:52: eb:07:59:85:87:2c:e8:f9:4b:33:49:ca:86:9b:05:a2:65:01: 7c:dc:81:10:d6:9b:dc:25:14:7d:74:e1:7e:61:13:e0:92:6d: ad:12:f9:88:0d:39:12:4a:ae:f9:2b:3d:bd:e7:80:a3:44:9d: 65:1e:a5:4a:10:22:8b:59:48:f8:17:bd:54:dc:0b:98:f2:f0: dc:02:b1:a5:1f:85:dd:36:d1:07:19:00:4c:42:04:98:11:c4: dc:4d:36:cb:89:9b:80:50:5d:1b:1c:68:e9:84:39:b6:12:53: 7b:ff:95:84:ec:2d:49:53:96:61:dc:0c:c1:63:81:65:2c:f0: 1c:a4:34:94:8e:bf:e1:ad:a5:21:a1:6a:89:6c:cc:fe:3b:34: 0a:f9:7b:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16+LriVxIYFI/484AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj MmU4MB4XDTI2MDQxMjA5MTEyMVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzVhZGQyNTEtZDM1Ni00Y2VjLWE0NDEtOGI0OTBlZTNmNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYtZAj8jPdKO4v9Siue5hBwrzzFi2cvXPxD4 g6jsQTae8EfLxFwNrjtc1RNm+gzEXf8TLU1uwgndcKJGrCgQ46T1hHDM2+BDnpay KtLu2RHx0Y7mhINr3B1KoazwTE04cEAdKJrJSks59rfU28lB8OSnz09LD1ZKH9AG PQU74VagXdc489CzS0q8l3XdaI2aMRQcvERFIU9BAUTQDVpMg+6re6E3S2ycX83k OdN/BwVF8/VpQF7QugCyopX2xruL4l77X8IRPSdCDRWCb1cRgm0li9CrBQ4bYYUv inpAwuHpmdTdv100K2p68OcJGEzVFnIZ74F039XFFtnn1ee1YQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOpXrrllS3HGIjx5dXy6mgtaUKNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvOTU2MTMxZjMtMWY3MC0z Y2NmLWIyMTktMWY2YmMyMmNkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3 YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4 NzQ3N2MyZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL5OzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8JNSWFK6iQ+vUz2qI4EZAJ/x0x1WLpBtlsJiKkJpSuK6prBYhYjS7 tkfsqjjligJ5r8tRGBkY2dXgsVrWsfuQYqzp3ep0wKefMRbm1mQPyezCo/APIDyR VdjpCDpnVWBx8lm1CP2CBUACt1LrB1mFhyzo+UszScqGmwWiZQF83IEQ1pvcJRR9 dOF+YRPgkm2tEvmIDTkSSq75Kz2954CjRJ1lHqVKECKLWUj4F71U3AuY8vDcArGl H4XdNtEHGQBMQgSYEcTcTTbLiZuAUF0bHGjphDm2ElN7/5WE7C1JU5Zh3AzBY4Fl LPAcpDSUjr/hraUhoWqJbMz+OzQK+XsI -----END CERTIFICATE-----Generated at Fri Apr 17 10:20:22 2026 by rpki-client