$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/c317a98f-0e5a-3e77-a727-11006dd28223.roa File: c317a98f-0e5a-3e77-a727-11006dd28223.roa (raw, json) Hash identifier: mct5gdaBzIz8WHStVgofnbKiv55RoBlAYEQl0MIJjPI= Subject key identifier: 02:15:EC:C9:46:BC:B6:D7:3C:F8:CE:5E:63:10:B5:90:FD:DA:3C:B2 Certificate issuer: /CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Certificate serial: 010D0C9F4328584DE64DA54559BFA0D8A66C7140 Authority key identifier: 31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/c317a98f-0e5a-3e77-a727-11006dd28223.roa Signing time: Wed 20 May 2026 19:53:56 +0000 ROA not before: Wed 20 May 2026 19:53:56 +0000 ROA not after: Tue 18 Aug 2026 19:53:56 +0000 asID: 14054 IP address blocks: 2602:f476::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:4d:a5:45:59:bf:a0:d8:a6:6c:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe6dbdd-2611-4405-b156-fd403fa6b530 Validity Not Before: May 20 19:53:56 2026 GMT Not After : Aug 18 19:53:56 2026 GMT Subject: CN=525da9dc-82fb-4127-93ee-72cc33d39e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:3b:8a:87:75:74:c2:87:c9:45:87:93:de: 5c:27:2b:69:ec:c2:1a:a5:eb:42:59:42:9f:6a:15: 44:e3:dd:3c:96:16:5d:66:fc:f0:19:63:5c:90:86: a7:1c:32:46:16:43:cd:6c:a1:ea:bc:82:9f:7e:06: e0:cc:94:55:4e:cc:f3:75:98:ba:bd:9e:3e:d9:07: 28:1b:70:5a:10:d6:a4:af:2e:30:ad:f2:15:10:92: 81:da:03:92:9b:17:05:45:31:a1:cd:ea:54:b8:4b: e5:15:16:45:9d:8c:b5:6f:74:1f:26:23:26:86:12: 98:6c:04:fc:b4:1b:c9:4b:9c:2a:8a:b8:b3:09:04: fb:03:ff:67:34:84:e2:17:f9:0e:f6:bf:67:0a:9b: d2:f5:72:04:f3:22:bd:49:6a:40:0f:8b:e8:dc:50: 2a:e0:2e:0e:42:ec:1b:86:d1:c6:c4:4b:ed:cf:46: 98:35:ab:61:80:4a:ad:be:4b:bd:fa:35:65:dd:13: 33:68:be:5f:f6:ce:ce:53:23:ac:e8:3c:de:83:14: e9:9c:fa:04:25:4c:df:52:cf:62:f5:b6:ef:10:72: 32:ef:c8:f1:80:19:47:39:d5:e0:c4:12:f0:52:fa: 7a:a4:41:66:75:7e:2b:8d:8e:00:94:bd:55:43:27: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:15:EC:C9:46:BC:B6:D7:3C:F8:CE:5E:63:10:B5:90:FD:DA:3C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/c317a98f-0e5a-3e77-a727-11006dd28223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530/dfe6dbdd-2611-4405-b156-fd403fa6b530.crl X509v3 Authority Key Identifier: keyid:31:46:B5:FB:E9:64:97:85:98:29:06:BE:76:9D:22:6E:38:CF:51:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfe6dbdd-2611-4405-b156-fd403fa6b530.cer sbgp-ipAddrBlock: critical IPv6: 2602:f476::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5d:e0:3a:19:bb:62:9b:e1:20:57:87:33:04:68:82:ea:98: a8:1c:44:b8:df:cb:40:b2:52:5e:8f:d9:0f:b8:32:ea:fb:a9: dc:4c:90:f8:88:31:e3:5b:09:3a:21:53:2a:ec:3a:48:36:c4: 23:35:68:2d:ff:0c:dc:42:73:32:16:32:00:8a:15:c4:c5:78: 8c:2e:37:93:4f:1f:1b:48:23:86:2f:80:29:d5:16:ef:70:e0: 25:7f:41:a4:60:76:34:41:10:e9:ca:45:d0:4a:ce:e5:45:f7: 7e:46:95:ca:d0:eb:6f:53:1b:84:b6:13:de:bf:58:0c:1e:2b: 03:94:f7:16:09:99:80:fd:14:f0:f6:0c:78:ba:0a:7f:78:4e: 16:9e:cb:ce:f9:68:59:6c:2b:ac:27:0f:c8:2d:18:dc:68:31: 8c:64:77:e0:b9:af:bd:64:13:42:3b:3b:cf:93:25:8f:04:43: 96:4a:5e:09:4c:99:27:42:33:a2:0e:f2:39:11:96:62:e2:77: 9c:81:90:59:cb:04:a6:15:48:36:c1:ce:e3:46:c6:50:b7:71: 39:2b:36:58:38:0a:fc:98:bd:19:c8:d9:23:12:9c:bf:4d:34: b4:85:86:04:ca:01:8d:f0:3d:6d:a7:dd:78:a1:8c:c2:fb:f2: f5:b1:15:2d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE3mTaVFWb+g2KZscUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlNmRiZGQtMjYxMS00NDA1LWIxNTYtZmQ0MDNmYTZi NTMwMB4XDTI2MDUyMDE5NTM1NloXDTI2MDgxODE5NTM1NlowLzEtMCsGA1UEAxMk NTI1ZGE5ZGMtODJmYi00MTI3LTkzZWUtNzJjYzMzZDM5ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG47iod1dMKHyUWHk95cJytp7MIapetCWUKf ahVE4908lhZdZvzwGWNckIanHDJGFkPNbKHqvIKffgbgzJRVTszzdZi6vZ4+2Qco G3BaENakry4wrfIVEJKB2gOSmxcFRTGhzepUuEvlFRZFnYy1b3QfJiMmhhKYbAT8 tBvJS5wqirizCQT7A/9nNITiF/kO9r9nCpvS9XIE8yK9SWpAD4vo3FAq4C4OQuwb htHGxEvtz0aYNathgEqtvku9+jVl3RMzaL5f9s7OUyOs6DzegxTpnPoEJUzfUs9i 9bbvEHIy78jxgBlHOdXgxBLwUvp6pEFmdX4rjY4AlL1VQye/vwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAIV7MlGvLbXPPjOXmMQtZD92jyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2 ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQwM2ZhNmI1MzAvYzMxN2E5OGYtMGU1YS0z ZTc3LWE3MjctMTEwMDZkZDI4MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGZlNmRiZGQtMjYxMS00NDA1LWIx NTYtZmQ0MDNmYTZiNTMwL2RmZTZkYmRkLTI2MTEtNDQwNS1iMTU2LWZkNDAzZmE2 YjUzMC5jcmwwHwYDVR0jBBgwFoAUMUa1++lkl4WYKQa+dp0ibjjPURIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZmU2ZGJkZC0yNjExLTQ0MDUtYjE1Ni1mZDQw M2ZhNmI1MzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0dgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATV3gOhm7YpvhIFeHMwRoguqYqBxEuN/LQLJSXo/ZD7gy6vup3EyQ +Igx41sJOiFTKuw6SDbEIzVoLf8M3EJzMhYyAIoVxMV4jC43k08fG0gjhi+AKdUW 73DgJX9BpGB2NEEQ6cpF0ErO5UX3fkaVytDrb1MbhLYT3r9YDB4rA5T3FgmZgP0U 8PYMeLoKf3hOFp7LzvloWWwrrCcPyC0Y3GgxjGR34LmvvWQTQjs7z5MljwRDlkpe CUyZJ0Izog7yORGWYuJ3nIGQWcsEphVINsHO40bGULdxOSs2WDgK/Ji9GcjZIxKc v000tIWGBMoBjfA9bafdeKGMwvvy9bEVLQ== -----END CERTIFICATE-----Generated at Thu May 28 13:40:08 2026 by rpki-client