$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa File: e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa (raw, json) Hash identifier: A1y5CFpWoAVlnZgz0+qSqy8Ggqp2xCvLG1T9D8co7Wk= Subject key identifier: 9B:CD:F7:96:FC:E4:03:92:43:11:E8:7E:AE:1F:76:45:A5:52:4B:04 Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F4328584DD8F06E31C92C4258BB9DDEC0 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 20417 IP address blocks: 2602:f7d1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:6e:31:c9:2c:42:58:bb:9d:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=39e3689a-9463-47c8-85f4-517b983d4171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a1:92:8e:ce:cc:4a:3a:9f:0b:17:a6:fd:18: a5:0c:de:bd:33:f1:17:ca:e8:8e:be:6e:71:21:2b: 38:f0:cd:e6:4d:7d:fa:3e:a3:5b:11:6b:1c:ad:a7: b1:ba:22:c8:4c:5b:95:d2:f3:57:44:51:b6:c5:0e: be:4b:71:2b:70:cf:a2:a5:a4:aa:95:c7:12:84:f9: ec:63:da:4d:7d:aa:99:65:cd:ba:49:a5:a3:61:1e: e6:d2:7e:c4:10:59:72:bf:4c:f6:18:33:79:4c:4c: ba:3a:74:98:12:75:3b:5b:1a:bf:ef:bc:4b:26:bc: 11:f8:12:1d:d5:e3:bf:34:b9:d6:1d:18:b7:87:a5: d5:70:50:3e:4a:51:cb:d7:2e:8c:7d:ef:e7:5c:ea: 8c:90:18:8d:0b:0c:70:a3:33:2e:3f:1f:97:75:f5: 8b:01:fa:9d:64:a4:94:53:7a:be:3b:23:f2:ea:76: bf:35:db:b9:32:f3:56:ad:2b:00:a2:9f:31:c0:2a: 55:5e:9c:89:47:ea:6e:3c:29:c9:30:17:a7:4c:0b: 64:26:fa:76:c9:e4:d8:f0:f6:96:93:db:50:0d:ba: a8:d3:8d:b0:4c:98:7d:5f:e9:23:e4:4b:8d:5b:51: 72:37:49:e8:c2:21:a8:de:ce:a6:3f:d7:a7:40:7d: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:F7:96:FC:E4:03:92:43:11:E8:7E:AE:1F:76:45:A5:52:4B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9d:5c:e4:4e:94:4f:ac:fc:d3:5b:5f:01:b6:bf:1b:bd:b9: ea:d6:7f:48:3b:43:69:9f:6e:72:49:96:e9:8d:42:30:9f:b4: a6:61:95:25:6f:77:af:2a:3d:e0:17:41:17:65:5b:3c:bb:c7: 4b:48:5d:9a:05:53:33:0d:4d:4a:83:c4:d9:8b:3f:3b:8c:f7: 0f:ed:c3:43:a5:c9:d9:e1:f0:2a:0e:21:a3:77:89:6b:71:d8: c3:6c:b2:4d:8b:fb:ec:9c:29:36:a0:41:fa:2d:de:e2:a2:7b: 12:7c:33:19:38:2d:83:da:e2:f1:1b:ec:ec:eb:91:a0:db:0e: bf:f5:1d:7f:b1:ad:67:58:92:90:6f:ca:f0:88:8c:1c:40:85: 24:7e:79:49:62:6a:ee:80:cd:47:56:93:e9:3a:7f:8a:66:67: 91:fa:86:86:e8:82:be:3d:e3:a7:86:cd:b6:ff:eb:3f:79:44: 7d:a6:57:ff:0d:7e:6e:40:ef:ec:63:ea:9a:eb:f8:55:a0:8e: f9:81:89:c9:50:a3:07:73:d6:e1:dd:37:ca:22:c2:b9:a6:12: 13:ff:a8:34:bc:11:92:bd:eb:07:03:74:72:23:91:01:4d:07: ce:17:fd:59:81:09:4f:fb:ac:4b:0c:71:62:69:47:58:c0:c9: e3:60:67:47 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3Y8G4xySxCWLud3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk MzllMzY4OWEtOTQ2My00N2M4LTg1ZjQtNTE3Yjk4M2Q0MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqGSjs7MSjqfCxem/RilDN69M/EXyuiOvm5x ISs48M3mTX36PqNbEWscraexuiLITFuV0vNXRFG2xQ6+S3ErcM+ipaSqlccShPns Y9pNfaqZZc26SaWjYR7m0n7EEFlyv0z2GDN5TEy6OnSYEnU7Wxq/77xLJrwR+BId 1eO/NLnWHRi3h6XVcFA+SlHL1y6Mfe/nXOqMkBiNCwxwozMuPx+XdfWLAfqdZKSU U3q+OyPy6na/Ndu5MvNWrSsAop8xwCpVXpyJR+puPCnJMBenTAtkJvp2yeTY8PaW k9tQDbqo042wTJh9X+kj5EuNW1FyN0nowiGo3s6mP9enQH3p/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJvN95b85AOSQxHofq4fdkWlUksEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvZTg4OGM5ZTEtY2EzMS0z NzY5LTg5ZmEtNGU4MDk3OWYzZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL30QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd51c5E6UT6z801tfAba/G7256tZ/SDtDaZ9uckmW6Y1CMJ+0pmGV JW93ryo94BdBF2VbPLvHS0hdmgVTMw1NSoPE2Ys/O4z3D+3DQ6XJ2eHwKg4ho3eJ a3HYw2yyTYv77JwpNqBB+i3e4qJ7EnwzGTgtg9ri8Rvs7OuRoNsOv/Udf7GtZ1iS kG/K8IiMHECFJH55SWJq7oDNR1aT6Tp/imZnkfqGhuiCvj3jp4bNtv/rP3lEfaZX /w1+bkDv7GPqmuv4VaCO+YGJyVCjB3PW4d03yiLCuaYSE/+oNLwRkr3rBwN0ciOR AU0Hzhf9WYEJT/usSwxxYmlHWMDJ42BnRw== -----END CERTIFICATE-----Generated at Sun May 24 06:43:05 2026 by rpki-client