$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa File: 32108e9a-77ed-35f0-95d7-1039047af86b.roa (raw, json) Hash identifier: f5I53mzHUdIBQ7WBzOqfNY5hESbWyMzGOA8ZDqZNLts= Subject key identifier: 14:39:88:65:F3:95:FD:23:B6:6A:79:3B:7C:C7:AD:95:73:79:34:DB Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157 Certificate serial: 010D0C9F4328584CA491AA613C4310AA5C3B31FF Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 400919 IP address blocks: 2602:817:2008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:aa:61:3c:43:10:aa:5c:3b:31:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157 Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=1fc50d43-0b4c-44fb-8b93-55957f517c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:7f:c4:f0:98:35:c0:34:69:9e:9e:8a:60: 70:7d:60:53:65:c2:5d:dc:1a:d5:f1:c2:74:71:3f: f6:3f:b7:0f:bb:c3:19:a2:57:b8:7c:f8:60:63:41: f7:57:5c:3b:10:5f:3c:ff:6b:2c:47:79:eb:9f:38: ec:5c:37:18:95:3c:2c:e8:37:d6:59:f6:31:cd:2f: c1:0a:06:7e:2d:1e:64:a0:cb:47:90:7a:11:99:66: 03:7f:4d:e4:d7:e2:2f:ef:45:61:a6:da:36:d0:1d: 59:31:8e:c8:d4:53:76:95:cb:93:1b:64:78:da:89: ed:bf:50:81:1b:14:d2:98:3a:e5:dd:fc:c6:a0:e7: d6:1a:90:76:1d:bd:6f:4c:00:9c:6c:da:97:66:1f: 7d:f4:0c:2d:8c:21:eb:0e:48:b5:65:77:f8:53:5c: af:6c:74:f7:36:82:18:2d:b2:76:47:27:5f:c5:d0: f6:e0:f8:96:fb:b2:2b:f1:83:2a:49:7a:e0:df:8d: d3:54:f3:14:3f:f6:cf:3c:19:b0:fe:2a:8d:3d:ea: 72:74:68:42:11:07:83:0d:d9:3d:51:60:84:46:8c: 68:b4:fa:63:ec:3d:65:a4:13:bb:4d:e1:66:0c:19: 02:03:7e:38:49:42:a0:c7:10:61:09:1a:40:89:46: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:88:65:F3:95:FD:23:B6:6A:79:3B:7C:C7:AD:95:73:79:34:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl X509v3 Authority Key Identifier: keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer sbgp-ipAddrBlock: critical IPv6: 2602:817:2008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fa:41:ed:b8:6a:20:9d:16:3f:9b:1b:00:a4:95:be:fd:32: a4:2a:59:d6:6d:f6:12:22:ce:59:bd:b5:f0:1d:36:01:54:b0: 9b:2b:bf:95:c6:2a:08:50:0f:d6:22:f8:e4:13:e8:4e:61:8d: 3c:34:fb:25:0c:8a:42:50:ec:25:77:2d:1f:bc:ab:b0:6b:9b: 17:b1:a1:fa:3e:49:35:eb:ce:24:bd:77:fb:59:93:f6:0b:fb: fb:0f:95:24:2a:db:8b:9d:0e:bd:67:8b:14:17:02:6b:1c:f6: 9d:69:77:e7:73:ba:19:b6:61:d5:d8:b8:d2:3e:95:f3:63:4a: b8:f4:b6:30:10:a9:5e:57:46:95:74:f5:0b:b4:b2:85:a5:67: 6d:75:27:a1:9f:dc:11:32:f0:a0:11:76:7d:87:e0:65:fe:9a: b2:88:70:1c:bb:3b:ab:24:ac:81:e2:ce:b9:7f:1d:8a:1f:71: 69:45:83:ee:45:90:4e:90:ea:65:c4:46:4d:9c:4b:c7:bd:5e: 25:ea:bf:d0:24:52:84:79:fa:5a:9c:21:85:dc:05:11:7e:0f: 03:6d:65:24:d2:d9:05:0f:39:46:b2:55:f5:f3:c3:e3:ce:1b: d4:b0:86:49:c8:f6:18:9d:34:63:f4:9e:71:0d:93:23:a2:a8: 87:2c:46:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEykkaphPEMQqlw7Mf8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy MTU3MB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk MWZjNTBkNDMtMGI0Yy00NGZiLThiOTMtNTU5NTdmNTE3YzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgJ/xPCYNcA0aZ6eimBwfWBTZcJd3BrV8cJ0 cT/2P7cPu8MZole4fPhgY0H3V1w7EF88/2ssR3nrnzjsXDcYlTws6DfWWfYxzS/B CgZ+LR5koMtHkHoRmWYDf03k1+Iv70Vhpto20B1ZMY7I1FN2lcuTG2R42ontv1CB GxTSmDrl3fzGoOfWGpB2Hb1vTACcbNqXZh999AwtjCHrDki1ZXf4U1yvbHT3NoIY LbJ2RydfxdD24PiW+7Ir8YMqSXrg343TVPMUP/bPPBmw/iqNPepydGhCEQeDDdk9 UWCERoxotPpj7D1lpBO7TeFmDBkCA344SUKgxxBhCRpAiUYKKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBQ5iGXzlf0jtmp5O3zHrZVzeTTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2 N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvMzIxMDhlOWEtNzdlZC0z NWYwLTk1ZDctMTAzOTA0N2FmODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABH6Qe24aiCdFj+bGwCklb79MqQqWdZt9hIizlm9tfAdNgFUsJsr v5XGKghQD9Yi+OQT6E5hjTw0+yUMikJQ7CV3LR+8q7Brmxexofo+STXrziS9d/tZ k/YL+/sPlSQq24udDr1nixQXAmsc9p1pd+dzuhm2YdXYuNI+lfNjSrj0tjAQqV5X RpV09Qu0soWlZ211J6Gf3BEy8KARdn2H4GX+mrKIcBy7O6skrIHizrl/HYofcWlF g+5FkE6Q6mXERk2cS8e9XiXqv9AkUoR5+lqcIYXcBRF+DwNtZSTS2QUPOUayVfXz w+POG9SwhknI9hidNGP0nnENkyOiqIcsRmg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:16 2026 by rpki-client