$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa File: dc648177-57c4-3f82-a708-ca071a8277f4.roa (raw, json) Hash identifier: S5bhMT6wlMo+C42ZPcmwBoHDf8CWTD+onsPuKdJNeFo= Subject key identifier: 9E:C6:1F:00:FF:4A:EB:4C:B2:7C:7E:D8:64:0F:49:34:FB:8D:E6:A9 Certificate issuer: /CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382 Certificate serial: 010D0C9F4328584D5F7FB3CC726913D1762EEB00 Authority key identifier: 5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 2602:f54e:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b3:cc:72:69:13:d1:76:2e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4267f20f-20d1-4b5e-9bc0-40ee1ed26382 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=4021257d-da8d-4e40-8e26-6840c249d906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:e2:4a:c9:51:ac:9f:3b:10:78:a9:bb:78: aa:e0:80:49:9e:4c:2a:e6:4a:14:c1:62:1e:c2:21: 7d:81:40:65:d6:97:a2:99:87:43:d4:19:86:00:7f: 29:d7:f4:6a:0d:91:44:da:4a:e1:ad:4b:b4:2f:a3: 75:02:3a:76:7b:1b:cd:f7:7d:3b:22:6b:b4:9c:54: d2:72:3b:66:32:65:5c:62:64:df:de:f6:c0:6e:25: 49:e0:aa:5b:71:8e:55:19:0b:69:86:ed:57:ba:46: 82:2b:fe:ae:0d:04:5c:ab:d2:0d:eb:6c:75:6c:58: d1:b6:df:8e:52:29:3b:be:0b:2f:b3:4a:43:39:7e: 9f:59:32:ba:47:04:ab:4c:22:2f:b5:a1:98:77:93: 54:20:0a:fc:02:59:a8:6f:21:88:e9:0c:02:fa:d5: 4f:df:5a:49:27:95:95:cf:3c:9c:41:66:02:f7:94: eb:05:a7:6a:92:7f:4e:2e:4b:1f:df:d0:ec:d7:68: fa:fa:d0:0f:c0:41:1a:09:90:19:93:18:b1:02:15: 13:61:87:5c:c8:dc:b0:b7:ba:fa:33:5c:b5:48:d2: 40:a9:07:e4:0b:06:ef:b7:b9:5d:e7:c8:b6:1e:46: b3:87:2e:de:a5:e5:51:e0:b0:5a:9f:46:19:98:e2: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:1F:00:FF:4A:EB:4C:B2:7C:7E:D8:64:0F:49:34:FB:8D:E6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/dc648177-57c4-3f82-a708-ca071a8277f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.crl X509v3 Authority Key Identifier: keyid:5F:6D:69:9D:C7:34:E8:E1:FA:8E:B3:C8:6F:24:1E:43:43:49:C3:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4267f20f-20d1-4b5e-9bc0-40ee1ed26382.cer sbgp-ipAddrBlock: critical IPv6: 2602:f54e:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f5:68:7c:3a:3e:25:60:fb:b7:a5:73:14:3b:99:01:1d:7e: 02:fb:f3:c4:a2:31:d6:e5:e8:e5:85:c7:d2:76:7f:7b:3e:6d: eb:b0:ee:60:8d:86:38:6f:07:f9:d1:c6:b1:68:a5:16:90:4a: c2:80:22:fa:b7:c9:c9:35:3f:49:23:91:d6:7e:e8:e9:01:07: db:da:dc:32:fb:00:3e:48:e2:23:5f:fc:c9:7e:d8:07:5b:be: a2:b4:64:13:a4:c9:d0:e4:ae:0d:79:e3:85:00:47:90:b3:91: f3:37:d2:20:51:96:f6:86:b1:b7:35:72:bc:8e:d4:20:e3:25: ae:bf:4e:cb:c9:9c:fc:43:14:c9:59:c9:5f:52:6e:09:2a:d3: 6f:7a:e0:25:43:90:69:fe:a7:6d:d4:4d:07:4e:9c:71:74:4d: 91:6f:5d:6a:d5:bc:36:f8:be:f1:26:0d:4a:11:c8:0e:d1:6b: db:53:05:7f:85:13:d3:d3:9e:59:dc:9e:c0:ec:be:9b:83:15: 82:e3:17:e8:1b:33:8b:08:ed:8d:dd:1e:28:d6:8a:85:c1:ef: c7:39:bf:4a:db:e7:e2:22:a3:35:2d:27:5d:92:61:ff:98:1e: e2:21:20:f6:a3:d1:32:a1:a9:ac:ce:e5:74:35:f9:ed:21:4c: 59:ad:af:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ff7PMcmkT0XYu6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI2N2YyMGYtMjBkMS00YjVlLTliYzAtNDBlZTFlZDI2 MzgyMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk NDAyMTI1N2QtZGE4ZC00ZTQwLThlMjYtNjg0MGMyNDlkOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX3iSslRrJ87EHipu3iq4IBJnkwq5koUwWIe wiF9gUBl1peimYdD1BmGAH8p1/RqDZFE2krhrUu0L6N1Ajp2exvN9307Imu0nFTS cjtmMmVcYmTf3vbAbiVJ4KpbcY5VGQtphu1XukaCK/6uDQRcq9IN62x1bFjRtt+O Uik7vgsvs0pDOX6fWTK6RwSrTCIvtaGYd5NUIAr8AlmobyGI6QwC+tVP31pJJ5WV zzycQWYC95TrBadqkn9OLksf39Ds12j6+tAPwEEaCZAZkxixAhUTYYdcyNywt7r6 M1y1SNJAqQfkCwbvt7ld58i2Hkazhy7epeVR4LBan0YZmOJBKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7GHwD/SutMsnx+2GQPSTT7jeapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3 ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVlMWVkMjYzODIvZGM2NDgxNzctNTdjNC0z ZjgyLWE3MDgtY2EwNzFhODI3N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDI2N2YyMGYtMjBkMS00YjVlLTli YzAtNDBlZTFlZDI2MzgyLzQyNjdmMjBmLTIwZDEtNGI1ZS05YmMwLTQwZWUxZWQy NjM4Mi5jcmwwHwYDVR0jBBgwFoAUX21pncc06OH6jrPIbyQeQ0NJw7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80MjY3ZjIwZi0yMGQxLTRiNWUtOWJjMC00MGVl MWVkMjYzODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1TgAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADj1aHw6PiVg+7elcxQ7mQEdfgL788SiMdbl6OWFx9J2f3s+beuw 7mCNhjhvB/nRxrFopRaQSsKAIvq3yck1P0kjkdZ+6OkBB9va3DL7AD5I4iNf/Ml+ 2AdbvqK0ZBOkydDkrg1544UAR5CzkfM30iBRlvaGsbc1cryO1CDjJa6/TsvJnPxD FMlZyV9Sbgkq02964CVDkGn+p23UTQdOnHF0TZFvXWrVvDb4vvEmDUoRyA7Ra9tT BX+FE9PTnlncnsDsvpuDFYLjF+gbM4sI7Y3dHijWioXB78c5v0rb5+IiozUtJ12S Yf+YHuIhIPaj0TKhqazO5XQ1+e0hTFmtr44= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:13 2026 by rpki-client