$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/9c9780e3-8108-3648-ab4e-9568a7dbbea3.roa File: 9c9780e3-8108-3648-ab4e-9568a7dbbea3.roa (raw, json) Hash identifier: NpSMqdBVi/VUlKWBBAWaZzK/eJZIVLUCMWBw37NpgKI= Subject key identifier: 9D:12:6A:7F:39:D0:47:E8:8D:FA:88:85:6A:8E:C8:65:87:4E:9A:E9 Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584D55BCBB7928E9A3A3CAC219E0 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/9c9780e3-8108-3648-ab4e-9568a7dbbea3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 14054 IP address blocks: 2602:f476:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bb:79:28:e9:a3:a3:ca:c2:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=872579f4-c467-478e-bd9e-dab4c7dc80cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:61:5d:76:b6:59:99:eb:ec:7d:0b:54:a2: 66:0e:3f:d7:cb:ac:44:a8:73:fb:fd:1c:6a:bb:96: 1d:c9:ed:fb:ea:92:3d:94:cc:2a:72:0c:1e:8d:27: 6d:31:55:e6:e3:56:e9:bc:83:f7:9e:fb:1e:05:e9: f8:73:cf:73:5d:87:bc:d1:d2:e0:36:26:52:cc:3f: 65:83:dd:3c:7b:ef:98:ee:53:bf:5c:5f:0a:25:bc: 7b:2c:e4:a2:7f:54:8b:d2:62:60:22:f7:c4:d4:39: ae:8e:18:88:95:4a:80:8d:a1:c6:4d:66:b4:f6:8c: dc:55:a5:79:b3:e9:12:7f:c6:24:2d:97:b1:c5:7b: b3:6b:13:7a:b5:1b:9b:69:0e:e5:e1:b4:c5:17:a2: 7a:30:09:0e:ed:37:a4:77:17:20:c2:b8:4e:f0:62: d2:a3:46:d0:96:1a:23:c8:ca:94:19:a1:66:0a:9e: 4c:5b:5f:b4:a7:bc:20:3e:75:35:19:06:9c:3a:93: 17:4f:c7:a0:d5:ff:e0:bb:d5:30:f5:8f:c3:e6:8e: da:77:33:03:d6:de:ce:f3:1a:0d:06:6d:74:56:95: c4:9a:dd:92:d7:27:bc:2b:6e:df:ab:24:dd:2b:c7: 70:07:d4:23:bd:b9:80:7c:f7:b8:f5:99:7f:3a:e9: d3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:6A:7F:39:D0:47:E8:8D:FA:88:85:6A:8E:C8:65:87:4E:9A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/9c9780e3-8108-3648-ab4e-9568a7dbbea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv6: 2602:f476:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0e:4f:7e:ea:bc:a8:10:07:1d:9d:3e:c8:aa:b8:43:57:8d: ae:3f:26:93:94:a6:b9:f3:ac:72:07:2f:c0:d4:fb:0e:0f:69: 1a:d1:d2:00:26:7c:1b:58:e0:53:d0:d6:31:8c:f0:fd:4f:ac: 31:1d:05:e3:26:82:14:37:e6:17:c0:9c:66:2a:01:77:09:c1: b6:fb:d9:a6:19:7d:f2:0a:c0:87:c3:93:a0:39:44:aa:66:91: d9:20:15:a6:8f:c4:55:38:d3:8c:e8:97:62:c0:7e:7c:e8:9c: c5:59:a0:bb:c7:2e:85:16:02:e4:f9:1f:b9:40:68:4b:0e:1d: 20:fb:e6:f2:a3:68:9e:88:56:40:74:85:50:2c:75:78:ce:0a: ec:2e:ba:af:6c:c8:a0:05:ba:0e:fe:5e:87:96:dd:68:61:06: 9f:d4:c0:74:3d:78:b7:1d:85:7b:31:f1:6d:ba:58:7c:d1:1c: 57:67:16:1f:ed:f2:34:36:2e:ff:ef:70:a9:49:a8:b8:87:7f: 9d:b4:a3:2f:8e:3f:76:d1:e7:02:dd:cb:13:33:b7:10:08:fc: 6e:23:5c:3f:d0:c3:01:b3:48:2d:80:ce:d9:7a:69:db:e5:27: eb:25:d3:6b:cb:2b:35:29:ff:02:17:39:09:12:e4:8c:11:ce: 40:16:63:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1VvLt5KOmjo8rCGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODcyNTc5ZjQtYzQ2Ny00NzhlLWJkOWUtZGFiNGM3ZGM4MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRRhXXa2WZnr7H0LVKJmDj/Xy6xEqHP7/Rxq u5Ydye376pI9lMwqcgwejSdtMVXm41bpvIP3nvseBen4c89zXYe80dLgNiZSzD9l g908e++Y7lO/XF8KJbx7LOSif1SL0mJgIvfE1DmujhiIlUqAjaHGTWa09ozcVaV5 s+kSf8YkLZexxXuzaxN6tRubaQ7l4bTFF6J6MAkO7TekdxcgwrhO8GLSo0bQlhoj yMqUGaFmCp5MW1+0p7wgPnU1GQacOpMXT8eg1f/gu9Uw9Y/D5o7adzMD1t7O8xoN Bm10VpXEmt2S1ye8K27fqyTdK8dwB9QjvbmAfPe49Zl/OunTGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0San850EfojfqIhWqOyGWHTprpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvOWM5NzgwZTMtODEwOC0z NjQ4LWFiNGUtOTU2OGE3ZGJiZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0dgCi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoOT37qvKgQBx2dPsiquENXja4/JpOUprnzrHIHL8DU+w4PaRrR 0gAmfBtY4FPQ1jGM8P1PrDEdBeMmghQ35hfAnGYqAXcJwbb72aYZffIKwIfDk6A5 RKpmkdkgFaaPxFU404zol2LAfnzonMVZoLvHLoUWAuT5H7lAaEsOHSD75vKjaJ6I VkB0hVAsdXjOCuwuuq9syKAFug7+XoeW3WhhBp/UwHQ9eLcdhXsx8W26WHzRHFdn Fh/t8jQ2Lv/vcKlJqLiHf520oy+OP3bR5wLdyxMztxAI/G4jXD/QwwGzSC2Aztl6 advlJ+sl02vLKzUp/wIXOQkS5IwRzkAWY1o= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:10 2026 by rpki-client