$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa File: 1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa (raw, json) Hash identifier: H/HzIM+yMPHmEsXLAltgFaoAKzTNQOU8YU/+YQMAE9Y= Subject key identifier: 03:92:FF:3F:83:D2:92:2F:D0:3A:29:11:8B:97:D7:B4:E1:A8:7B:07 Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F4328584D5E1A62A89B60D363DA6DDA40 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 30690 IP address blocks: 2602:f99b:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:62:a8:9b:60:d3:63:da:6d:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=c2fa3cda-da24-428a-b782-a70f6a2cf452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c0:7a:fe:d6:c8:78:6a:42:af:12:b2:87:db: 39:02:cf:99:d7:56:2c:2a:72:42:13:39:8d:7f:b7: dc:a3:b9:76:dd:24:ce:e7:c1:4b:73:d1:1b:26:27: 74:97:4b:76:2c:25:b3:57:1e:15:63:f3:7e:a8:f9: 3b:1f:26:db:e2:b4:99:71:38:2e:46:0a:17:fa:00: d5:9e:b0:5d:19:97:7e:1e:e5:6f:7b:c0:3b:18:2a: e0:ee:90:19:5f:4c:63:11:a9:42:ad:0c:59:e7:be: 10:67:47:15:f0:1f:be:1b:27:25:37:87:97:39:a6: e9:a1:cb:07:6b:0a:0e:1f:76:e1:71:c6:66:3f:83: a7:a5:a4:16:72:b1:b9:69:bb:62:12:d6:1e:55:e3: 6e:65:72:b7:5b:60:7f:a0:1b:e2:a6:27:8b:6e:8a: ac:a1:2a:5d:df:e2:12:a7:0a:54:04:24:89:de:54: 7a:cc:9c:00:22:1c:33:97:f3:5d:4c:72:b0:ec:ee: 77:e6:c4:5f:a2:8a:2e:4a:d5:5a:59:3b:d9:2a:46: 99:19:c1:72:f6:39:68:87:2d:f7:d6:ef:ae:3e:4a: 46:0e:85:f7:a3:b0:8c:dd:6a:0d:59:1a:d6:c4:29: a4:90:ab:ba:47:a8:1d:f2:3c:4d:5d:e8:bf:6a:b3: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:92:FF:3F:83:D2:92:2F:D0:3A:29:11:8B:97:D7:B4:E1:A8:7B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/1bc87842-5d25-3a72-85e2-db4dcde05f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99b:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9c:a9:07:90:97:b4:a6:04:b7:db:d8:ad:2d:09:68:d8:8e: 9d:34:ad:98:88:ad:1f:36:80:de:af:b0:1e:c4:61:e8:d9:56: 6f:6a:e7:3b:25:b4:28:9b:13:04:73:4b:de:b8:0e:77:df:bb: 34:1b:e6:e0:fe:3c:1e:07:b6:1f:32:f5:97:d6:9c:41:e1:53: 23:79:0b:e4:88:72:e5:39:25:be:34:2d:75:98:12:da:bb:27: a8:34:ef:d5:b8:7a:8c:2f:67:95:90:70:5f:68:55:10:8c:66: a5:a4:77:80:fc:89:87:88:3a:18:a4:bf:a0:7a:16:d7:41:46: 1c:1d:3f:f1:b1:5a:6a:04:c6:8d:1e:96:1d:12:a4:7d:a6:ae: 63:7f:c4:11:82:ae:72:02:7b:93:24:22:e6:1c:e5:f1:d8:60: 1f:9d:61:4c:03:24:db:73:7c:ef:cb:90:a1:fe:27:96:56:68: 23:59:48:f8:d9:c0:6d:ca:33:be:6c:71:b9:d5:e7:1a:d8:f0: 1a:3f:f1:68:fd:0c:32:f3:77:b7:70:bd:16:8d:ec:b3:6b:1f: 58:75:0f:68:34:11:a1:9a:28:80:49:47:f3:c8:09:a9:11:ee: 98:76:8c:f9:26:fe:86:f5:b9:2b:ce:91:d9:b9:61:5c:ad:9b: b7:39:dd:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGmKom2DTY9pt2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YzJmYTNjZGEtZGEyNC00MjhhLWI3ODItYTcwZjZhMmNmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicB6/tbIeGpCrxKyh9s5As+Z11YsKnJCEzmN f7fco7l23STO58FLc9EbJid0l0t2LCWzVx4VY/N+qPk7Hybb4rSZcTguRgoX+gDV nrBdGZd+HuVve8A7GCrg7pAZX0xjEalCrQxZ574QZ0cV8B++GyclN4eXOabpocsH awoOH3bhccZmP4OnpaQWcrG5abtiEtYeVeNuZXK3W2B/oBvipieLboqsoSpd3+IS pwpUBCSJ3lR6zJwAIhwzl/NdTHKw7O535sRfooouStVaWTvZKkaZGcFy9jlohy33 1u+uPkpGDoX3o7CM3WoNWRrWxCmkkKu6R6gd8jxNXei/arPpVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAOS/z+D0pIv0DopEYuX17ThqHsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvMWJjODc4NDItNWQyNS0z YTcyLTg1ZTItZGI0ZGNkZTA1ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5mwAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6cqQeQl7SmBLfb2K0tCWjYjp00rZiIrR82gN6vsB7EYejZVm9q 5zsltCibEwRzS964DnffuzQb5uD+PB4Hth8y9ZfWnEHhUyN5C+SIcuU5Jb40LXWY Etq7J6g079W4eowvZ5WQcF9oVRCMZqWkd4D8iYeIOhikv6B6FtdBRhwdP/GxWmoE xo0elh0SpH2mrmN/xBGCrnICe5MkIuYc5fHYYB+dYUwDJNtzfO/LkKH+J5ZWaCNZ SPjZwG3KM75scbnV5xrY8Bo/8Wj9DDLzd7dwvRaN7LNrH1h1D2g0EaGaKIBJR/PI CakR7ph2jPkm/ob1uSvOkdm5YVytm7c53cE= -----END CERTIFICATE-----Generated at Fri Apr 17 10:42:59 2026 by rpki-client