$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa File: aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa (raw, json) Hash identifier: e8xKIH0ay/K6mj7ZEJ2oBuGgxihVWqoiOsZP+JczF7g= Subject key identifier: 03:0C:9D:D0:D2:9B:A9:86:D7:63:C0:E0:82:E5:52:E7:F9:F4:56:70 Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584D55BCBB4CBB28CD44FC7EEF80 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 14054 IP address blocks: 2602:f476:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:bb:4c:bb:28:cd:44:fc:7e:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=25927438-9bf1-4c57-856c-1610ff0683c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:91:77:de:0a:d9:d8:94:57:9c:e0:a7:3f: 1e:70:56:9a:10:73:cd:c8:58:41:5b:d3:f5:20:f1: a1:4a:4f:a4:0d:65:d8:fe:a0:64:28:ea:70:26:0c: 69:e8:9d:fb:7f:ce:0c:d8:ca:cf:de:a6:d5:28:4f: 32:b0:29:48:39:43:12:98:74:29:4b:a9:a4:9b:89: b1:e3:54:e2:fe:85:54:77:4e:93:be:3b:5a:59:ef: f7:ba:db:50:b9:4d:79:bc:89:c7:06:ec:e3:b4:55: ab:a1:45:b3:af:6a:f1:c2:51:24:35:13:1b:1c:94: 9d:f6:78:e8:48:65:5d:79:c6:74:82:4c:f9:d1:b9: b0:7f:18:ff:ba:d9:76:ed:30:ae:ce:de:4c:9f:86: 0e:91:b7:04:7b:6e:b1:66:63:7b:45:64:af:3e:b9: 7c:24:d2:3c:cb:ec:e0:14:35:79:8c:1f:78:27:46: 7c:27:70:b0:be:68:d6:bc:9e:f5:01:4e:28:76:de: 1a:ea:b3:23:65:8a:e6:9c:b5:01:22:51:60:07:50: a9:92:7f:9d:bd:6e:a6:10:aa:38:72:26:d8:11:2b: a7:3f:25:63:84:a5:3d:46:1e:bd:08:ff:56:27:8e: d9:b0:07:ce:e6:56:aa:f5:6b:7c:73:d8:1a:f8:ef: 31:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0C:9D:D0:D2:9B:A9:86:D7:63:C0:E0:82:E5:52:E7:F9:F4:56:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/aaf68392-5b50-32d1-a4a3-9f0e1d40c5ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv6: 2602:f476:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:81:63:64:e9:6f:db:f5:ed:b9:fe:84:a6:31:a8:a8:fd:b9: b0:1e:a4:6d:2c:a5:9f:8d:3b:81:21:85:ab:00:34:5c:fa:d8: 0b:8f:64:2d:36:0d:76:f3:34:5e:e7:e1:aa:69:30:8c:a0:fd: a5:0c:5b:b4:e7:4b:fa:bc:05:cb:0e:f1:29:06:6e:3d:f0:79: e0:67:58:46:47:d5:4f:89:29:d0:22:cd:67:2b:dd:69:4b:21: f4:54:56:6d:50:e0:51:df:bb:c5:c0:e4:95:fc:06:b0:a0:ec: f0:b0:17:84:bb:ad:11:1e:89:04:d7:1e:14:64:f5:da:1c:44: 67:d2:05:b4:2c:b1:1a:62:f6:64:ff:13:fb:8e:f9:aa:52:90: 8e:78:f8:d1:5c:80:ed:2f:4a:a7:b4:c4:4a:cf:9c:c6:4f:1c: 24:7f:09:6e:3d:2b:5c:33:6b:3f:07:64:21:22:48:3a:4a:b5: 6e:d1:36:be:b6:23:96:35:40:6f:0d:a7:d2:fc:f4:c8:c4:e4: 4d:18:b9:48:8d:c9:2f:4b:7e:7c:5d:fe:a7:66:84:dd:ca:61: e1:b1:1f:89:44:4d:43:48:6c:b9:ed:d8:93:ea:6c:c3:f0:b5: e6:60:7f:00:07:b3:58:ff:df:87:95:bc:ff:f0:16:f3:e4:f1: af:dc:02:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1VvLtMuyjNRPx+74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjU5Mjc0MzgtOWJmMS00YzU3LTg1NmMtMTYxMGZmMDY4M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZiRd94K2diUV5zgpz8ecFaaEHPNyFhBW9P1 IPGhSk+kDWXY/qBkKOpwJgxp6J37f84M2MrP3qbVKE8ysClIOUMSmHQpS6mkm4mx 41Ti/oVUd06TvjtaWe/3uttQuU15vInHBuzjtFWroUWzr2rxwlEkNRMbHJSd9njo SGVdecZ0gkz50bmwfxj/utl27TCuzt5Mn4YOkbcEe26xZmN7RWSvPrl8JNI8y+zg FDV5jB94J0Z8J3CwvmjWvJ71AU4odt4a6rMjZYrmnLUBIlFgB1Cpkn+dvW6mEKo4 cibYESunPyVjhKU9Rh69CP9WJ47ZsAfO5laq9Wt8c9ga+O8xdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMMndDSm6mG12PA4ILlUuf59FZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvYWFmNjgzOTItNWI1MC0z MmQxLWE0YTMtOWYwZTFkNDBjNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0dgCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKBY2Tpb9v17bn+hKYxqKj9ubAepG0spZ+NO4EhhasANFz62AuP ZC02DXbzNF7n4appMIyg/aUMW7TnS/q8BcsO8SkGbj3weeBnWEZH1U+JKdAizWcr 3WlLIfRUVm1Q4FHfu8XA5JX8BrCg7PCwF4S7rREeiQTXHhRk9docRGfSBbQssRpi 9mT/E/uO+apSkI54+NFcgO0vSqe0xErPnMZPHCR/CW49K1wzaz8HZCEiSDpKtW7R Nr62I5Y1QG8Np9L89MjE5E0YuUiNyS9Lfnxd/qdmhN3KYeGxH4lETUNIbLnt2JPq bMPwteZgfwAHs1j/34eVvP/wFvPk8a/cAk4= -----END CERTIFICATE-----Generated at Mon Apr 13 12:10:08 2026 by rpki-client