$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa File: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (raw, json) Hash identifier: GaWJjuRJhKB3tKTbrGA24PE5ox6GsEUaA5DZHgqmymQ= Subject key identifier: 7A:DD:19:53:D7:A5:06:A4:60:4F:D9:C9:35:97:54:B5:F6:0F:4E:51 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584C9967007FE416F4A71A41D000 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 401502 IP address blocks: 2602:f783::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:00:7f:e4:16:f4:a7:1a:41:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=482a92ef-bde6-4c93-afa8-7779db039c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:80:8c:8a:54:d0:6a:94:ac:c7:6d:bc:3c: 2f:08:63:78:ea:30:e2:23:ba:44:ef:e2:25:9e:94: 07:66:da:eb:c6:60:0d:8c:ff:df:f9:e9:c8:69:52: 95:b8:5e:96:c3:3c:ac:d7:52:6d:06:46:8c:52:b2: ed:94:93:42:5f:2c:c3:a9:68:bc:a9:ec:4d:90:00: 4d:85:db:09:89:f3:7a:5c:f1:38:8d:5f:ba:28:8b: 72:c8:38:2f:5b:1b:d7:88:9b:a3:3e:9d:9b:41:14: 87:c8:d4:bd:05:7c:b7:6e:9e:e1:70:bf:be:0b:30: cc:d9:43:a0:4d:86:55:bf:13:48:e9:7f:f0:dd:31: 4a:48:91:e7:cc:7e:8a:bd:ab:11:a7:6b:71:aa:3a: 67:42:6b:fb:d3:3e:6d:5f:3d:b2:44:0c:f5:a2:36: f9:55:dd:31:a3:8e:62:20:e7:e0:d8:c0:c9:3d:c5: b2:3f:38:2f:ae:8d:fe:93:c5:f7:76:43:66:d5:67: 44:ea:73:50:75:03:e0:0c:17:6d:45:6c:d0:97:2d: 06:f3:84:9a:e1:38:c9:7c:e6:2f:7a:fc:ac:7c:7c: 95:60:55:50:92:53:23:11:06:05:11:4b:81:22:9f: cf:c7:c7:3a:41:4d:2a:34:c5:e1:5e:b7:34:48:24: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:19:53:D7:A5:06:A4:60:4F:D9:C9:35:97:54:B5:F6:0F:4E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv6: 2602:f783::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:df:bb:ca:9e:85:9b:3b:ab:ad:1c:58:ac:89:23:43:4a:c4: 9c:e0:dd:9f:73:64:eb:66:b0:da:6c:fd:11:61:ea:e3:9a:45: 1b:78:45:0a:4b:01:e6:79:8b:ba:cd:79:a6:f4:96:0c:ee:23: c1:31:e3:e9:c7:0a:df:89:15:cf:cd:23:a7:87:6c:34:8a:90: fa:0e:55:36:8f:97:a1:32:b1:70:aa:1d:35:b4:fb:b6:e6:e2: 1a:de:d1:9e:5c:38:36:12:23:8b:cb:ce:de:4e:75:af:48:9a: 62:76:e4:e9:90:21:d8:19:d7:d0:97:b6:b7:7d:ab:94:34:17: df:6b:a9:8c:26:82:fc:89:39:f1:b2:69:57:c8:44:16:12:0f: eb:9e:b1:8c:60:19:ed:ec:ca:7e:9d:c7:9f:1e:af:cf:5e:23: a2:92:de:7c:ef:0e:04:30:98:48:4c:6c:d1:8f:66:79:7e:c9: d7:14:06:2b:34:b6:d7:eb:9a:15:41:2f:41:e2:39:b0:82:bc: ae:b7:c1:fa:37:4a:6b:a3:06:c4:04:c1:1f:3f:e4:8a:23:c4: 7a:78:72:37:ef:db:34:7b:d9:46:d2:00:6e:e6:0d:f7:3c:fa: c6:4f:20:d2:a7:1c:4b:64:4a:9b:74:f7:78:2f:23:66:ec:45: c0:8a:72:68 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyZZwB/5Bb0pxpB0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk NDgyYTkyZWYtYmRlNi00YzkzLWFmYTgtNzc3OWRiMDM5YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6uAjIpU0GqUrMdtvDwvCGN46jDiI7pE7+Il npQHZtrrxmANjP/f+enIaVKVuF6Wwzys11JtBkaMUrLtlJNCXyzDqWi8qexNkABN hdsJifN6XPE4jV+6KItyyDgvWxvXiJujPp2bQRSHyNS9BXy3bp7hcL++CzDM2UOg TYZVvxNI6X/w3TFKSJHnzH6KvasRp2txqjpnQmv70z5tXz2yRAz1ojb5Vd0xo45i IOfg2MDJPcWyPzgvro3+k8X3dkNm1WdE6nNQdQPgDBdtRWzQly0G84Sa4TjJfOYv evysfHyVYFVQklMjEQYFEUuBIp/Px8c6QU0qNMXhXrc0SCT76wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHrdGVPXpQakYE/ZyTWXVLX2D05RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvMzc0MjUwOWUtMjQxMS0z OGQwLWFiZTYtNmNkZjEzNjA1ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3gwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdt+7yp6FmzurrRxYrIkjQ0rEnODdn3Nk62aw2mz9EWHq45pFG3hF CksB5nmLus15pvSWDO4jwTHj6ccK34kVz80jp4dsNIqQ+g5VNo+XoTKxcKodNbT7 tubiGt7Rnlw4NhIji8vO3k51r0iaYnbk6ZAh2BnX0Je2t32rlDQX32upjCaC/Ik5 8bJpV8hEFhIP656xjGAZ7ezKfp3Hnx6vz14jopLefO8OBDCYSExs0Y9meX7J1xQG KzS21+uaFUEvQeI5sIK8rrfB+jdKa6MGxATBHz/kiiPEenhyN+/bNHvZRtIAbuYN 9zz6xk8g0qccS2RKm3T3eC8jZuxFwIpyaA== -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:50 2026 by rpki-client