$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/bcd71d45-084f-3ba4-b9d4-386cfdf4ae3c.roa File: bcd71d45-084f-3ba4-b9d4-386cfdf4ae3c.roa (raw, json) Hash identifier: mRVgubS+2LEHmz0TqEXsiXK57Bxz0whwJCsCR3SwpVE= Subject key identifier: D9:94:FE:A6:8C:17:A2:28:93:B9:14:29:FA:E3:B9:62:41:7D:C7:24 Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584D730A764F1FBA3F9108129D20 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/bcd71d45-084f-3ba4-b9d4-386cfdf4ae3c.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 14054 IP address blocks: 2602:f476:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:76:4f:1f:ba:3f:91:08:12:9d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=3cc1ff14-5dc1-4629-a4cb-185f45f2661d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0e:68:56:30:50:b0:c7:5f:04:ff:15:dd:4e: 46:ae:58:f7:59:0e:bb:24:d0:40:46:94:15:2b:b8: 78:ed:14:64:54:e2:41:f2:7d:7e:ca:0f:43:c6:c4: ea:b4:01:a1:fa:f3:5b:6e:54:ba:15:4c:12:05:39: 79:d6:17:08:7d:96:e4:07:13:d0:b7:1c:f6:95:34: 07:e0:fd:4f:bd:1f:1f:57:70:2f:6c:ee:0c:78:03: fd:3a:8a:16:82:b8:34:26:a7:a9:e7:8c:ea:54:19: 9d:1d:47:76:16:0e:bf:f7:57:e7:04:7b:70:9e:da: 5a:2a:07:00:8d:c2:c9:7b:c0:a9:ba:25:33:5e:dd: ef:4c:5f:8a:44:02:7c:64:11:56:38:35:37:d6:16: 8a:f4:82:87:d0:fb:7a:36:2c:75:5d:c3:d0:ca:b6: fe:82:3e:42:be:ce:dc:78:31:5c:a8:9d:5c:9c:86: b1:0b:d8:5d:20:f2:c2:ae:71:0c:2e:2f:e9:89:91: 2f:1a:44:aa:c1:c3:9c:11:0d:48:a8:90:34:d9:0e: 4b:94:7d:e3:dc:2f:e7:e7:50:1c:9d:2e:c3:5a:70: 20:e7:41:52:e6:0b:79:b3:8e:ec:d9:62:6b:af:06: 36:dc:e6:32:c2:0b:7a:37:8e:85:2b:3e:7f:76:a1: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:94:FE:A6:8C:17:A2:28:93:B9:14:29:FA:E3:B9:62:41:7D:C7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/bcd71d45-084f-3ba4-b9d4-386cfdf4ae3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv6: 2602:f476:a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ad:69:b5:4b:c7:2f:c2:cc:96:24:b1:c2:db:c7:31:a4:ef: 65:5e:1a:f1:1a:f4:95:8d:49:1d:f6:ff:31:0f:67:b1:9d:b3: 59:41:6f:b7:e0:b3:3e:2c:3d:3b:5b:38:91:96:28:70:30:3b: 40:46:ae:a1:99:7c:86:cf:65:5c:ab:98:ba:e0:00:73:60:89: 2e:1b:76:13:37:2c:4d:00:fc:2a:57:b6:b8:97:21:0c:90:8d: 87:05:5c:78:04:8e:b5:9e:e2:76:1d:f9:a0:27:fd:97:96:70: f0:64:69:c1:68:70:eb:44:6b:c0:3d:16:68:4b:b8:82:4b:6f: 80:d8:c7:4d:a6:c7:07:67:33:c5:16:e2:a0:43:3e:64:c5:17: 60:5b:5a:95:3b:59:a7:e5:f4:96:a3:40:1f:e6:32:94:bd:55: ff:58:fb:2c:47:2f:37:ce:ad:18:d2:c1:e9:80:37:65:8e:b3: 05:75:87:23:bd:fb:ec:04:2d:eb:c9:d2:ba:d0:25:e3:98:51: 1a:db:00:6a:e8:2b:9f:a3:e2:97:d0:c1:f7:6e:4e:8b:f0:7e: 62:29:05:86:1b:0e:45:fb:5a:a8:4c:08:0d:a7:66:7c:3a:c5: 73:6f:fb:3a:bf:6c:15:37:dc:6e:9b:22:52:40:3d:f4:05:09: d9:00:db:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zCnZPH7o/kQgSnSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk M2NjMWZmMTQtNWRjMS00NjI5LWE0Y2ItMTg1ZjQ1ZjI2NjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw5oVjBQsMdfBP8V3U5Grlj3WQ67JNBARpQV K7h47RRkVOJB8n1+yg9DxsTqtAGh+vNbblS6FUwSBTl51hcIfZbkBxPQtxz2lTQH 4P1PvR8fV3AvbO4MeAP9OooWgrg0Jqep54zqVBmdHUd2Fg6/91fnBHtwntpaKgcA jcLJe8CpuiUzXt3vTF+KRAJ8ZBFWODU31haK9IKH0Pt6Nix1XcPQyrb+gj5Cvs7c eDFcqJ1cnIaxC9hdIPLCrnEMLi/piZEvGkSqwcOcEQ1IqJA02Q5LlH3j3C/n51Ac nS7DWnAg50FS5gt5s47s2WJrrwY23OYywgt6N46FKz5/dqEUFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNmU/qaMF6Iok7kUKfrjuWJBfcckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvYmNkNzFkNDUtMDg0Zi0z YmE0LWI5ZDQtMzg2Y2ZkZjRhZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL0dgCl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAetabVLxy/CzJYkscLbxzGk72VeGvEa9JWNSR32/zEPZ7Gds1lB b7fgsz4sPTtbOJGWKHAwO0BGrqGZfIbPZVyrmLrgAHNgiS4bdhM3LE0A/CpXtriX IQyQjYcFXHgEjrWe4nYd+aAn/ZeWcPBkacFocOtEa8A9FmhLuIJLb4DYx02mxwdn M8UW4qBDPmTFF2BbWpU7Wafl9JajQB/mMpS9Vf9Y+yxHLzfOrRjSwemAN2WOswV1 hyO9++wELevJ0rrQJeOYURrbAGroK5+j4pfQwfduTovwfmIpBYYbDkX7WqhMCA2n Znw6xXNv+zq/bBU33G6bIlJAPfQFCdkA20s= -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:04 2026 by rpki-client