$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa File: 25dbca42-1fd0-38ab-852a-2e2b01909293.roa (raw, json) Hash identifier: XY0Neks44rS1rM0A+i29/rhaczJW9kvEj2o2kW/V5w4= Subject key identifier: 81:A5:21:ED:36:DB:5F:39:09:BC:E0:79:9D:68:EA:CC:75:83:BC:E5 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F4328584D5E1A5780D490AC5FE1745000 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 64289 IP address blocks: 2602:2ea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:57:80:d4:90:ac:5f:e1:74:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=31970720-3d44-4b4f-a586-f6e7080bb1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:73:19:5c:36:82:8d:e2:b7:5c:74:f1:35: a5:6c:53:10:a3:89:92:c3:f7:a0:d5:8e:9b:8a:da: 50:3d:4c:17:95:2a:ff:b5:34:9e:a2:bf:28:c5:8b: bc:00:0e:bd:81:d1:5f:d2:76:d7:21:4e:e5:c5:39: 08:8c:8c:93:ec:9a:c1:31:2b:f7:46:2f:03:94:fc: a5:24:47:cc:10:5e:02:32:22:2e:4b:16:8a:9d:f0: 63:2c:87:f8:23:7e:3e:22:0e:14:34:db:69:c5:cb: 59:1d:ea:12:76:cb:35:8c:b7:14:e8:33:18:01:f1: 4f:3b:29:90:57:5f:2c:47:8f:30:10:90:a2:9e:00: 86:29:ad:8a:45:b8:aa:ca:0f:bb:e7:71:6b:fe:58: a2:8b:14:8a:22:34:e9:a5:ca:0c:10:a3:d3:78:05: 77:b4:f8:ae:1b:d4:3a:c6:f7:4e:69:bc:18:ce:50: 6b:89:d1:3f:7f:e9:c0:1f:d1:0a:f7:be:a5:7b:d0: 3c:53:5a:25:66:6b:94:ac:41:4e:31:ec:6d:b1:72: 4a:ee:bb:06:cd:fe:80:aa:89:ad:41:2b:59:23:93: 90:f1:03:05:4a:d5:a5:92:79:ad:a8:4c:c6:ba:be: f5:23:4d:3e:3c:38:13:1e:d6:5b:ef:67:f6:0f:ae: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A5:21:ED:36:DB:5F:39:09:BC:E0:79:9D:68:EA:CC:75:83:BC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/25dbca42-1fd0-38ab-852a-2e2b01909293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv6: 2602:2ea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b8:31:7b:8b:b6:7b:9d:3b:5b:1a:75:2f:01:08:79:12:70: cd:e1:76:35:59:a1:4d:e6:80:35:42:bd:b9:39:14:05:1e:b7: 3a:f6:35:6b:38:cf:33:1f:54:ac:9e:13:73:5d:64:41:5c:85: 12:c6:c7:02:49:47:28:e3:f8:e7:73:11:fb:07:45:f4:80:19: 6a:aa:e9:5b:d3:ed:60:35:f5:e3:81:e3:ee:01:aa:69:d9:19: 7a:9f:cc:6b:9f:3a:df:5f:77:d8:bf:cf:81:91:51:fd:92:93: 85:09:6d:91:21:8b:95:8f:c0:97:69:73:22:f9:80:43:ed:3d: c9:50:c8:e1:23:1d:38:d2:c8:29:7b:eb:1e:41:c2:2b:17:23: 80:b3:b5:e4:5b:ce:9c:05:e2:a2:2c:92:73:b4:e8:11:d8:48: 12:55:ac:76:56:ae:12:b4:28:0f:fb:5b:09:ba:0e:53:1f:fd: 92:b6:5d:c1:71:6f:b1:a0:8f:19:2a:4a:60:7f:1b:35:73:5e: 7a:5d:53:ea:71:8c:31:c3:34:ac:fa:65:f3:23:70:cd:83:bd: d0:17:6e:81:7f:8e:6b:11:d9:a2:c9:06:d2:ef:ca:a4:a3:31: 51:b7:6c:54:11:bc:8e:33:b9:d4:85:81:86:99:d5:f7:1f:27: 56:3b:3f:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1eGleA1JCsX+F0UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzE5NzA3MjAtM2Q0NC00YjRmLWE1ODYtZjZlNzA4MGJiMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFzGVw2go3it1x08TWlbFMQo4mSw/eg1Y6b itpQPUwXlSr/tTSeor8oxYu8AA69gdFf0nbXIU7lxTkIjIyT7JrBMSv3Ri8DlPyl JEfMEF4CMiIuSxaKnfBjLIf4I34+Ig4UNNtpxctZHeoSdss1jLcU6DMYAfFPOymQ V18sR48wEJCingCGKa2KRbiqyg+753Fr/liiixSKIjTppcoMEKPTeAV3tPiuG9Q6 xvdOabwYzlBridE/f+nAH9EK976le9A8U1olZmuUrEFOMextsXJK7rsGzf6Aqomt QStZI5OQ8QMFStWlknmtqEzGur71I00+PDgTHtZb72f2D67tLwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIGlIe022185CbzgeZ1o6sx1g7zlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMjVkYmNhNDItMWZkMC0z OGFiLTg1MmEtMmUyYjAxOTA5MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC6gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaLgxe4u2e507Wxp1LwEIeRJwzeF2NVmhTeaANUK9uTkUBR63OvY1 azjPMx9UrJ4Tc11kQVyFEsbHAklHKOP453MR+wdF9IAZaqrpW9PtYDX144Hj7gGq adkZep/Ma58631932L/PgZFR/ZKThQltkSGLlY/Al2lzIvmAQ+09yVDI4SMdONLI KXvrHkHCKxcjgLO15FvOnAXioiySc7ToEdhIElWsdlauErQoD/tbCboOUx/9krZd wXFvsaCPGSpKYH8bNXNeel1T6nGMMcM0rPpl8yNwzYO90BdugX+OaxHZoskG0u/K pKMxUbdsVBG8jjO51IWBhpnV9x8nVjs/TA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:35 2026 by rpki-client