$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa File: 35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa (raw, json) Hash identifier: kcAA0VNQWTj62ukkn/Pco5HBAj01OTm+1avGt6KHraA= Subject key identifier: 87:A4:A5:81:27:EA:5E:58:B0:E7:BF:B4:98:3E:6D:65:10:12:9F:24 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584CF5776B1DC159DAD51A0DB600 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa Signing time: Mon 23 Feb 2026 13:28:18 +0000 ROA not before: Mon 23 Feb 2026 13:28:18 +0000 ROA not after: Sun 24 May 2026 12:28:18 +0000 asID: 63023 IP address blocks: 2602:fec3:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:77:6b:1d:c1:59:da:d5:1a:0d:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Feb 23 13:28:18 2026 GMT Not After : May 24 12:28:18 2026 GMT Subject: CN=930ce7f6-e915-423a-9ba6-80883f6e0469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:72:f6:e4:86:af:89:12:71:ef:cf:3b:78: ab:28:77:77:06:7d:ce:9a:21:9a:04:f8:0d:1f:9f: 47:61:58:cc:55:d8:11:99:e5:97:0e:1f:e9:fc:55: cb:19:00:d6:37:ce:4c:b7:1f:78:cf:ed:61:ca:2b: 84:f0:62:04:bb:0c:99:d7:fe:82:f2:d8:53:0a:a6: fa:dc:6f:15:d6:00:cd:72:fe:73:fa:72:f0:b9:c9: d2:07:d6:ca:9a:72:ae:67:ce:dd:82:28:ab:10:3b: b6:dd:34:85:ec:21:44:51:a8:5d:6a:f6:ef:10:88: 98:ea:1a:83:50:cf:d5:b1:19:2b:15:76:c3:85:21: 47:1d:84:e5:de:8a:12:5e:74:e3:e1:19:04:eb:49: 8c:03:df:12:30:1a:ff:61:75:5f:0c:ed:19:ca:b6: 1a:ec:ad:c5:f9:f2:82:1a:48:15:50:eb:d4:5b:fd: d8:bd:55:1b:12:6e:61:e8:75:30:34:00:f4:00:97: 09:58:fe:9b:bf:06:c6:fd:19:43:c1:69:7b:1a:eb: 3f:25:16:df:c1:22:3d:f6:53:e9:5e:72:60:ed:0f: 31:42:b2:80:03:45:77:aa:3e:db:f7:fd:0b:94:6a: 41:15:45:09:64:96:79:68:30:40:f2:ae:47:51:97: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A4:A5:81:27:EA:5E:58:B0:E7:BF:B4:98:3E:6D:65:10:12:9F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec3:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1d:13:c7:02:fd:f5:03:e5:73:6b:49:63:36:37:0e:b6:59: 2e:92:6e:8a:bd:f3:fa:b0:de:47:9d:81:2e:ba:b4:41:95:a1: 8b:4c:01:62:37:b2:d3:4e:1f:94:39:21:c5:c9:29:b7:3a:80: 51:21:53:18:23:18:17:76:ee:69:a0:39:90:fe:5a:35:c5:0a: 61:74:22:9f:8c:87:51:c9:a0:49:40:41:49:54:4a:f9:42:b6: 7b:92:9b:4f:74:35:cf:ee:1d:67:46:50:2f:86:f8:be:5f:e8: 8e:3e:bd:55:54:f8:73:4b:e0:b3:b3:ff:19:bc:2b:b0:9f:bd: 90:23:0c:fd:be:6f:8c:4a:1f:2a:e5:a2:5a:cf:d5:8a:50:a3: 4d:c7:6d:89:06:5b:ee:04:92:0d:66:6e:df:55:a3:3b:1a:5b: 98:1f:d9:42:ae:85:e3:0d:24:de:1a:d2:5e:b4:b0:2c:42:0f: 1d:48:e7:25:1b:e2:9b:c2:ab:9b:d6:e3:d1:16:17:46:4b:88: 33:f6:bd:5b:cc:3a:db:f8:ad:bb:98:e8:1d:ae:53:6e:96:f3: 03:35:f6:ab:4b:d1:27:fb:24:1f:af:97:b6:c1:5e:cc:05:a3: a5:c6:c2:3b:32:3e:f4:3e:5d:ef:41:55:b5:3f:d7:6a:88:0e: 2a:b9:15:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz1d2sdwVna1RoNtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDIyMzEzMjgxOFoXDTI2MDUyNDEyMjgxOFowLzEtMCsGA1UEAxMk OTMwY2U3ZjYtZTkxNS00MjNhLTliYTYtODA4ODNmNmUwNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh89y9uSGr4kSce/PO3irKHd3Bn3OmiGaBPgN H59HYVjMVdgRmeWXDh/p/FXLGQDWN85Mtx94z+1hyiuE8GIEuwyZ1/6C8thTCqb6 3G8V1gDNcv5z+nLwucnSB9bKmnKuZ87dgiirEDu23TSF7CFEUahdavbvEIiY6hqD UM/VsRkrFXbDhSFHHYTl3ooSXnTj4RkE60mMA98SMBr/YXVfDO0ZyrYa7K3F+fKC GkgVUOvUW/3YvVUbEm5h6HUwNAD0AJcJWP6bvwbG/RlDwWl7Gus/JRbfwSI99lPp XnJg7Q8xQrKAA0V3qj7b9/0LlGpBFUUJZJZ5aDBA8q5HUZfWTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIekpYEn6l5YsOe/tJg+bWUQEp8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMzVhYTlhN2MtZWY0NC0z YjllLWJjYzktMTVjNmYxZWI5YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+ww8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHodE8cC/fUD5XNrSWM2Nw62WS6Sboq98/qw3kedgS66tEGVoYtM AWI3stNOH5Q5IcXJKbc6gFEhUxgjGBd27mmgOZD+WjXFCmF0Ip+Mh1HJoElAQUlU SvlCtnuSm090Nc/uHWdGUC+G+L5f6I4+vVVU+HNL4LOz/xm8K7CfvZAjDP2+b4xK HyrlolrP1YpQo03HbYkGW+4Ekg1mbt9VozsaW5gf2UKuheMNJN4a0l60sCxCDx1I 5yUb4pvCq5vW49EWF0ZLiDP2vVvMOtv4rbuY6B2uU26W8wM19qtL0Sf7JB+vl7bB XswFo6XGwjsyPvQ+Xe9BVbU/12qIDiq5FY0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:14:14 2026 by rpki-client