$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa File: bb3587db-b3b8-301c-8510-60cc3989e09f.roa (raw, json) Hash identifier: NY6PY23CmWP43s6TjD+WGKkuzA67KhfZEVUUwQsTRgw= Subject key identifier: 84:1E:BA:31:24:1F:16:A1:50:F1:36:50:5E:2C:0E:3F:5B:E3:98:01 Certificate issuer: /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Certificate serial: 010D0C9F4328584D7AEE57D828A03D2CD381AA40 Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa Signing time: Sun 12 Apr 2026 08:50:26 +0000 ROA not before: Sun 12 Apr 2026 08:50:26 +0000 ROA not after: Sat 11 Jul 2026 08:50:26 +0000 asID: 395909 IP address blocks: 2602:f93b::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:ee:57:d8:28:a0:3d:2c:d3:81:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8 Validity Not Before: Apr 12 08:50:26 2026 GMT Not After : Jul 11 08:50:26 2026 GMT Subject: CN=73f1164f-a512-4587-afa4-eca353e41967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:1d:a3:c3:23:3c:e8:15:6d:1c:71:f1:bf: e2:40:82:e1:74:86:5a:55:43:58:ae:63:e0:d0:18: 85:4f:62:c1:65:26:50:32:68:39:1a:ca:47:2e:86: 20:80:f4:21:2b:21:fb:e9:b7:2a:e1:18:aa:57:90: 43:01:04:03:d9:33:ed:d3:04:0e:cd:3a:6f:6d:25: b7:22:35:02:db:4b:0e:ee:a6:42:7b:b9:71:10:ed: ac:fd:c6:25:a5:16:6e:63:3f:7b:ac:a7:21:86:82: cd:04:23:f9:45:5c:af:84:49:14:0c:79:a2:e1:f6: d8:fe:58:90:63:ff:c7:ca:b8:1d:54:b2:d2:ca:d7: 93:da:30:c3:cb:ba:43:6b:2a:e0:d0:ad:ef:b4:db: 3d:e4:a1:fa:59:26:6c:63:8c:87:d6:55:f2:d8:06: 1e:cf:6c:83:63:30:9e:82:96:1a:a2:90:0e:87:df: 42:e3:56:68:e7:3d:f2:03:ac:80:e0:42:cc:96:1f: 07:9d:1e:75:a2:19:43:91:f4:82:dd:e2:56:41:ef: 7d:92:9d:b6:4e:0c:40:33:3a:4a:fe:2d:d1:90:a7: 09:bd:63:18:50:ec:05:7b:e8:85:67:68:8f:2f:d0: f2:2c:44:d4:f9:7f:a1:82:15:0d:08:b6:56:37:61: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:BA:31:24:1F:16:A1:50:F1:36:50:5E:2C:0E:3F:5B:E3:98:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bb3587db-b3b8-301c-8510-60cc3989e09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl X509v3 Authority Key Identifier: keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f93b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:20:84:53:bc:66:8b:c4:8e:9e:66:e7:84:f6:73:37:b3:d8: 95:5f:e5:32:cc:d2:5c:b3:6f:b1:59:55:35:0b:cf:22:e2:d8: 4c:a3:94:00:53:cb:7e:48:e9:64:eb:ed:b5:be:a4:fe:bb:ab: 4e:3f:d8:cf:46:15:d4:14:84:c1:c3:e6:5e:c9:d0:31:79:6a: e3:08:fa:5d:91:d7:20:ad:75:57:f8:ee:2a:ba:3d:58:77:23: e0:df:32:bf:f4:eb:62:71:34:48:83:19:1d:0f:d2:07:63:d5: 77:35:25:d9:03:fd:8b:c2:33:35:0e:a4:02:f1:c3:73:0e:f9: ba:6e:69:86:76:b6:4f:ca:ee:8f:68:45:65:87:35:d9:8a:c4: 73:1b:3f:3d:64:47:36:b7:e5:6c:51:06:52:17:89:87:92:1d: ff:0a:4b:46:a9:a6:37:a2:d3:b9:17:3f:b8:bd:0e:86:d0:7d: ac:1e:12:cd:84:8e:e0:4b:53:e6:c0:1a:6c:e7:90:d2:e9:25: 76:8f:f8:e3:03:3f:32:46:be:44:e3:65:a1:18:bd:fe:f3:09: 4c:a2:fa:85:7a:2e:d2:0d:20:72:fb:8f:cd:5f:55:c5:2e:7e: 6a:79:c0:a8:1f:6f:52:d9:d4:f0:5f:ea:35:e1:0e:a1:75:04: 1b:b3:e9:74 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE167lfYKKA9LNOBqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdlYzJkYTUtNTRmZS00ZDdhLThiMDYtMTU4ODc0Nzdj MmU4MB4XDTI2MDQxMjA4NTAyNloXDTI2MDcxMTA4NTAyNlowLzEtMCsGA1UEAxMk NzNmMTE2NGYtYTUxMi00NTg3LWFmYTQtZWNhMzUzZTQxOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucYdo8MjPOgVbRxx8b/iQILhdIZaVUNYrmPg 0BiFT2LBZSZQMmg5GspHLoYggPQhKyH76bcq4RiqV5BDAQQD2TPt0wQOzTpvbSW3 IjUC20sO7qZCe7lxEO2s/cYlpRZuYz97rKchhoLNBCP5RVyvhEkUDHmi4fbY/liQ Y//HyrgdVLLSyteT2jDDy7pDayrg0K3vtNs95KH6WSZsY4yH1lXy2AYez2yDYzCe gpYaopAOh99C41Zo5z3yA6yA4ELMlh8HnR51ohlDkfSC3eJWQe99kp22TgxAMzpK /i3RkKcJvWMYUOwFe+iFZ2iPL9DyLETU+X+hghUNCLZWN2FTJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIQeujEkHxahUPE2UF4sDj9b45gBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xN2Vj MmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4NzQ3N2MyZTgvYmIzNTg3ZGItYjNiOC0z MDFjLTg1MTAtNjBjYzM5ODllMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTdlYzJkYTUtNTRmZS00ZDdhLThi MDYtMTU4ODc0NzdjMmU4LzE3ZWMyZGE1LTU0ZmUtNGQ3YS04YjA2LTE1ODg3NDc3 YzJlOC5jcmwwHwYDVR0jBBgwFoAUyPPC9itSfvJd8ScSn/7szOwOiEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xN2VjMmRhNS01NGZlLTRkN2EtOGIwNi0xNTg4 NzQ3N2MyZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL5OzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBCIIRTvGaLxI6eZueE9nM3s9iVX+UyzNJcs2+xWVU1C88i4thMo5QA U8t+SOlk6+21vqT+u6tOP9jPRhXUFITBw+ZeydAxeWrjCPpdkdcgrXVX+O4quj1Y dyPg3zK/9OticTRIgxkdD9IHY9V3NSXZA/2LwjM1DqQC8cNzDvm6bmmGdrZPyu6P aEVlhzXZisRzGz89ZEc2t+VsUQZSF4mHkh3/CktGqaY3otO5Fz+4vQ6G0H2sHhLN hI7gS1PmwBps55DS6SV2j/jjAz8yRr5E42WhGL3+8wlMovqFei7SDSBy+4/NX1XF Ln5qecCoH29S2dTwX+o14Q6hdQQbs+l0 -----END CERTIFICATE-----Generated at Sun Apr 19 10:19:32 2026 by rpki-client