$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa File: 87f6d04d-4567-3af7-b282-55a08bf36a7b.roa (raw, json) Hash identifier: 4RPMso5JVxybTKLMClX6uqe9z0cKfq/8sXyKY56rSVc= Subject key identifier: 8A:49:B5:02:24:D0:D0:99:8A:69:2F:7F:D9:AE:BF:03:BB:BB:01:D2 Certificate issuer: /CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Certificate serial: 010D0C9F4328584D60E4F0CF0BA7DC60AD473900 Authority key identifier: EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 63025 IP address blocks: 2602:f8ea:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f0:cf:0b:a7:dc:60:ad:47:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa21e72-a241-4e13-a3ca-6e78d83d3df4 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=f73511b0-572c-4c20-8a00-982947a2ba34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:3d:d1:54:67:79:6f:c7:d7:42:c1:37:81: fe:1b:ed:ff:ce:2b:c9:7e:d2:87:0c:40:07:19:18: a4:e3:f7:04:37:3e:a9:da:b0:33:e3:24:63:c8:03: dc:eb:b2:84:70:de:74:41:de:21:d4:ad:dd:de:1b: 94:c2:a6:0e:80:6f:b0:03:75:d8:30:41:cf:35:dc: fd:f1:ee:ec:30:21:52:5d:ac:8b:f8:71:69:15:aa: 66:2d:e2:d7:53:7c:d4:40:32:81:b7:d2:1a:42:5c: cd:fb:d0:cf:08:2e:0a:7b:cb:2d:bf:38:8b:ff:04: a5:2f:dd:24:c2:ad:fc:c1:0c:22:88:09:bb:f9:d6: 73:29:30:3a:34:e9:e5:d9:0e:06:99:f3:b3:4f:7a: fb:a7:5b:a8:67:50:13:1b:47:3e:3a:2b:76:40:b3: 1e:56:47:3a:8c:bf:d5:96:4f:e5:24:79:9f:b3:df: d0:aa:a9:2c:99:76:2c:85:9b:e4:4d:80:c4:65:a0: 12:10:6c:69:ae:9b:8c:2f:39:9f:65:a2:7c:35:8a: cd:0f:35:93:9e:a0:86:e1:d8:c9:60:a7:e7:b7:31: 9a:8e:ad:59:2a:63:ae:d3:5f:70:90:7f:d6:28:f2: c8:1a:33:ba:4a:12:d5:b6:80:93:15:3b:6c:d2:44: c9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:B5:02:24:D0:D0:99:8A:69:2F:7F:D9:AE:BF:03:BB:BB:01:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/87f6d04d-4567-3af7-b282-55a08bf36a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.crl X509v3 Authority Key Identifier: keyid:EB:1D:3D:6F:D2:E8:E6:B7:A7:5B:50:49:BB:43:D9:17:71:AA:2C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5aa21e72-a241-4e13-a3ca-6e78d83d3df4.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8ea:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:57:07:99:14:aa:5a:25:3c:51:c3:52:02:fb:1b:3f:81:72: f8:80:2a:b6:af:c0:fe:c4:44:e6:92:24:b5:b1:2c:88:05:94: a1:99:ea:d4:64:08:16:09:6e:82:92:6a:4c:26:61:a9:66:29: f1:5c:59:d7:b4:30:7e:b2:62:ea:93:fb:55:8d:db:2d:57:1c: d2:eb:21:3a:95:07:b2:1f:01:5f:0f:66:19:83:90:dd:a3:1b: 39:c3:ba:a6:c8:7c:74:54:7c:08:3d:2b:ab:fd:be:d4:5a:81: a0:58:01:7e:ec:5a:76:5e:3b:ac:10:f2:75:3c:93:6b:1c:93: 9c:8f:ad:74:5b:04:50:64:e0:e4:4c:57:cf:64:44:95:34:1f: ce:67:75:b0:91:b4:d0:54:3e:1a:c6:36:f4:e2:46:9d:a9:83: 86:07:56:f3:63:a2:86:bf:42:52:9e:75:e1:b8:73:9f:2b:90: 4c:8e:8d:d5:2b:99:32:70:5e:42:8a:98:9c:89:b9:92:fa:e1: 00:ca:50:b9:95:38:a4:a5:8d:5e:46:41:f9:52:a1:8c:fb:c1: d4:55:d8:c7:66:16:5f:c0:60:e7:a7:be:6d:eb:4c:0a:f6:9a: b8:04:8e:0b:19:be:2f:84:30:2f:86:17:42:da:ef:98:db:3f: f6:e4:31:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5PDPC6fcYK1HOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFhMjFlNzItYTI0MS00ZTEzLWEzY2EtNmU3OGQ4M2Qz ZGY0MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjczNTExYjAtNTcyYy00YzIwLThhMDAtOTgyOTQ3YTJiYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQg90VRneW/H10LBN4H+G+3/zivJftKHDEAH GRik4/cENz6p2rAz4yRjyAPc67KEcN50Qd4h1K3d3huUwqYOgG+wA3XYMEHPNdz9 8e7sMCFSXayL+HFpFapmLeLXU3zUQDKBt9IaQlzN+9DPCC4Ke8stvziL/wSlL90k wq38wQwiiAm7+dZzKTA6NOnl2Q4GmfOzT3r7p1uoZ1ATG0c+Oit2QLMeVkc6jL/V lk/lJHmfs9/QqqksmXYshZvkTYDEZaASEGxprpuMLzmfZaJ8NYrNDzWTnqCG4djJ YKfntzGajq1ZKmOu019wkH/WKPLIGjO6ShLVtoCTFTts0kTJRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIpJtQIk0NCZimkvf9muvwO7uwHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YWEy MWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4ZDgzZDNkZjQvODdmNmQwNGQtNDU2Ny0z YWY3LWIyODItNTVhMDhiZjM2YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWFhMjFlNzItYTI0MS00ZTEzLWEz Y2EtNmU3OGQ4M2QzZGY0LzVhYTIxZTcyLWEyNDEtNGUxMy1hM2NhLTZlNzhkODNk M2RmNC5jcmwwHwYDVR0jBBgwFoAU6x09b9Lo5renW1BJu0PZF3GqLDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YWEyMWU3Mi1hMjQxLTRlMTMtYTNjYS02ZTc4 ZDgzZDNkZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL46gAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpXB5kUqlolPFHDUgL7Gz+BcviAKravwP7EROaSJLWxLIgFlKGZ 6tRkCBYJboKSakwmYalmKfFcWde0MH6yYuqT+1WN2y1XHNLrITqVB7IfAV8PZhmD kN2jGznDuqbIfHRUfAg9K6v9vtRagaBYAX7sWnZeO6wQ8nU8k2sck5yPrXRbBFBk 4ORMV89kRJU0H85ndbCRtNBUPhrGNvTiRp2pg4YHVvNjooa/QlKedeG4c58rkEyO jdUrmTJwXkKKmJyJuZL64QDKULmVOKSljV5GQflSoYz7wdRV2MdmFl/AYOenvm3r TAr2mrgEjgsZvi+EMC+GF0La75jbP/bkMf8= -----END CERTIFICATE-----Generated at Fri Apr 17 09:50:52 2026 by rpki-client