$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/cdfef0ae-7c31-3ff8-ad10-d32348ee7915.roa File: cdfef0ae-7c31-3ff8-ad10-d32348ee7915.roa (raw, json) Hash identifier: 4H5UvPzkwDv08YfVLgY8Jd6VS7n32ufKkCEFclkx/do= Subject key identifier: C0:E4:C5:66:78:A1:0F:C1:94:DB:C0:25:BC:43:46:96:00:5F:17:34 Certificate issuer: /CN=ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb Certificate serial: 010D0C9F4328584D571F99B8526BF4D20DFF6700 Authority key identifier: 64:4F:BA:EE:40:FE:B8:48:4A:BC:6E:97:CA:DE:BC:DA:F4:09:9F:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/cdfef0ae-7c31-3ff8-ad10-d32348ee7915.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 26911 IP address blocks: 2602:faff::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:99:b8:52:6b:f4:d2:0d:ff:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=be1b7346-8bce-4cb9-bb0e-1eff109e46d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:04:a5:3c:b6:34:c9:d4:19:f8:80:78:10: 56:a8:87:9d:69:e6:8b:d6:e8:31:71:7a:7c:54:20: bf:ec:07:ba:cb:aa:7b:65:4d:a1:a4:40:96:df:83: 69:90:e0:4c:91:ff:f7:08:bb:2b:8b:13:f0:5a:6f: 99:2f:58:02:86:31:35:b1:a0:5b:49:69:fd:77:69: f2:d6:39:d1:80:76:38:45:ff:80:58:eb:c2:7f:81: 41:f8:3e:a3:c2:6c:0a:b6:4d:58:64:c0:34:7e:5f: f0:21:16:15:3b:63:21:ae:c3:2c:b4:43:44:5a:70: ba:42:f3:c9:14:88:c3:01:b0:bf:01:c1:9d:e6:5b: 4f:ee:8a:ee:d1:82:21:b9:25:6f:30:47:3b:c1:2f: a2:e2:94:db:9b:af:d0:1e:3f:11:0d:08:45:12:f9: 76:e9:b9:a5:a6:a8:a9:24:0c:9a:5f:a4:7b:11:f6: 14:c5:10:c6:77:dc:ed:c5:30:db:1d:7c:40:84:4a: 6c:5a:c9:f5:1e:7e:fc:86:76:2a:c7:14:84:6f:7d: 2c:5a:9e:29:cf:79:0e:8a:30:3e:7f:21:3f:11:4e: 88:e5:81:17:1d:10:52:c8:ee:fb:94:10:86:b0:6f: 6e:0f:9a:ef:58:a6:0e:0c:4c:7a:e2:91:e4:af:90: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E4:C5:66:78:A1:0F:C1:94:DB:C0:25:BC:43:46:96:00:5F:17:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/cdfef0ae-7c31-3ff8-ad10-d32348ee7915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.crl X509v3 Authority Key Identifier: keyid:64:4F:BA:EE:40:FE:B8:48:4A:BC:6E:97:CA:DE:BC:DA:F4:09:9F:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ea35e0b8-151f-4c33-9eb2-f1c25fd4c4eb.cer sbgp-ipAddrBlock: critical IPv6: 2602:faff::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:23:2e:d5:b7:e6:a6:50:89:49:ed:7a:eb:e2:40:4c:7f:76: 57:0d:55:74:29:20:2f:3a:b1:18:13:8f:87:ca:4c:b4:37:8f: c4:7d:5f:8a:ca:a1:09:89:13:de:bd:e7:00:38:5f:c7:7b:23: 4d:22:ea:50:48:47:7d:c6:07:13:04:55:48:d8:4d:1c:9f:ea: 8f:f8:f8:1c:ec:97:ca:d9:75:4a:b2:d3:d5:53:c1:ad:7c:91: 22:08:dd:88:fe:d0:f7:17:6d:fb:56:47:de:61:58:68:c9:75: 4b:a5:91:75:0b:3a:b6:f4:34:dc:17:be:cf:fc:d7:c3:fe:28: 58:58:6d:0c:fe:7e:45:69:3e:e7:45:99:73:e7:a6:10:c9:cc: ae:dc:26:aa:ef:c6:71:a5:d2:15:8f:5b:34:ba:38:55:5a:62: 14:9e:6f:06:65:c1:ed:79:5c:9a:a0:32:ec:a6:67:23:c5:3c: 0c:48:e5:35:bb:95:60:55:ed:9e:fc:74:54:fe:34:b2:81:5e: 20:5c:cd:4e:c6:e1:c0:3f:0a:64:74:66:74:a5:da:00:44:fc: bd:4e:22:a0:93:92:9b:e8:4b:a0:ce:1f:4e:af:f8:f1:10:74: bc:c5:eb:cd:43:de:30:e1:49:be:60:66:70:87:eb:95:5a:02: 8f:41:2c:ff -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1XH5m4Umv00g3/ZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWEzNWUwYjgtMTUxZi00YzMzLTllYjItZjFjMjVmZDRj NGViMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YmUxYjczNDYtOGJjZS00Y2I5LWJiMGUtMWVmZjEwOWU0NmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8EEpTy2NMnUGfiAeBBWqIedaeaL1ugxcXp8 VCC/7Ae6y6p7ZU2hpECW34NpkOBMkf/3CLsrixPwWm+ZL1gChjE1saBbSWn9d2ny 1jnRgHY4Rf+AWOvCf4FB+D6jwmwKtk1YZMA0fl/wIRYVO2MhrsMstENEWnC6QvPJ FIjDAbC/AcGd5ltP7oru0YIhuSVvMEc7wS+i4pTbm6/QHj8RDQhFEvl26bmlpqip JAyaX6R7EfYUxRDGd9ztxTDbHXxAhEpsWsn1Hn78hnYqxxSEb30sWp4pz3kOijA+ fyE/EU6I5YEXHRBSyO77lBCGsG9uD5rvWKYODEx64pHkr5CxjQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMDkxWZ4oQ/BlNvAJbxDRpYAXxc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lYTM1 ZTBiOC0xNTFmLTRjMzMtOWViMi1mMWMyNWZkNGM0ZWIvY2RmZWYwYWUtN2MzMS0z ZmY4LWFkMTAtZDMyMzQ4ZWU3OTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZWEzNWUwYjgtMTUxZi00YzMzLTll YjItZjFjMjVmZDRjNGViL2VhMzVlMGI4LTE1MWYtNGMzMy05ZWIyLWYxYzI1ZmQ0 YzRlYi5jcmwwHwYDVR0jBBgwFoAUZE+67kD+uEhKvG6Xyt682vQJn28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lYTM1ZTBiOC0xNTFmLTRjMzMtOWViMi1mMWMy NWZkNGM0ZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6/wAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAuyMu1bfmplCJSe166+JATH92Vw1VdCkgLzqxGBOPh8pMtDePxH1f isqhCYkT3r3nADhfx3sjTSLqUEhHfcYHEwRVSNhNHJ/qj/j4HOyXytl1SrLT1VPB rXyRIgjdiP7Q9xdt+1ZH3mFYaMl1S6WRdQs6tvQ03Be+z/zXw/4oWFhtDP5+RWk+ 50WZc+emEMnMrtwmqu/GcaXSFY9bNLo4VVpiFJ5vBmXB7XlcmqAy7KZnI8U8DEjl NbuVYFXtnvx0VP40soFeIFzNTsbhwD8KZHRmdKXaAET8vU4ioJOSm+hLoM4fTq/4 8RB0vMXrzUPeMOFJvmBmcIfrlVoCj0Es/w== -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:57 2026 by rpki-client