$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa File: 309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa (raw, json) Hash identifier: NNvIgDg2K9QYKhMsfC3R02VYKQnvNMr5UZQfOeWa0lU= Subject key identifier: C7:B8:85:2E:AC:8F:8F:A9:9A:AF:06:B6:25:6F:E2:0F:1C:E1:13:F3 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584D7B6A9106F71188B59ED2EEC0 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 1347 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:91:06:f7:11:88:b5:9e:d2:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=5fe96968-5cd2-4d37-95ad-60aa2d8cb67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:2a:10:27:24:93:c3:fa:9f:ce:21:48:98: 4d:74:1f:23:92:67:1b:c2:14:16:d8:0a:6a:88:47: bf:d3:bf:0e:fd:e4:32:a4:5a:dd:40:25:7e:5a:fd: e4:1a:ca:1f:7f:d1:74:6c:c0:5f:48:24:de:fb:a7: e6:66:37:85:b9:a9:1c:ed:aa:c1:4e:b3:82:a2:35: e3:48:f4:75:e1:05:7f:04:f3:9c:5c:db:96:cc:57: 17:30:d9:7b:ed:eb:9c:9c:c9:4f:f5:1b:d7:86:4d: a2:39:71:84:aa:8e:27:47:2c:49:69:2b:f6:e0:78: b7:2c:0c:e4:3f:7a:da:99:64:b2:3c:4a:08:9a:9e: c7:b8:0b:80:09:9a:14:d4:7c:52:43:98:2d:45:dc: 77:65:23:a7:c1:d5:11:f9:57:da:c7:5d:35:3f:d0: c8:b5:09:b7:7d:de:0c:be:94:d0:18:61:4c:f6:60: 0b:93:38:6c:e0:14:2e:2f:19:13:f6:a3:a3:8c:f3: f2:9c:09:21:e9:2d:ed:7e:3b:25:b6:47:0d:cb:54: 6b:26:54:1e:c8:1d:da:d2:c3:3d:68:d7:79:dd:eb: 09:13:67:e7:09:49:69:8c:28:27:97:95:3d:28:f4: 2e:08:ef:e6:d7:ce:b0:f1:56:e9:9b:30:96:42:7b: 9b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:85:2E:AC:8F:8F:A9:9A:AF:06:B6:25:6F:E2:0F:1C:E1:13:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/309a1a50-a5ba-37b9-8b4d-0cc4d42332cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c2:de:33:85:90:b4:cc:c6:84:fe:7b:9c:2d:e9:a6:3f:df: 01:b1:4d:03:91:ae:3e:b8:f5:3b:8f:41:b5:24:57:da:bd:d1: 8c:a5:e9:8f:c1:e6:e6:b1:4e:e3:55:e3:11:7a:ac:20:38:9d: c1:ee:60:53:10:9f:73:bd:5b:d4:30:22:62:06:25:60:44:d7: c7:ab:02:d9:22:f2:a9:b5:70:c7:4d:f4:cf:71:6c:39:8a:65: df:1a:8a:92:ce:9f:20:36:f8:dd:cf:08:45:d7:62:84:90:c5: fd:72:c3:32:7b:82:90:a4:fc:39:16:13:e3:58:2a:20:34:6f: bd:ce:d2:11:a5:2b:53:fb:a6:df:a4:8c:09:98:e0:da:19:44: dd:e9:b1:53:65:46:f0:6b:48:b9:32:5b:95:95:08:57:60:4c: 3d:e9:64:c9:ea:0c:2d:9e:f3:63:4d:89:6b:19:88:25:4f:79: 61:58:2d:4a:6d:a5:b0:e5:67:5f:80:88:9c:77:7c:18:59:27: f8:83:81:01:25:5c:d6:2e:74:05:81:4a:84:a1:57:64:58:1d: 41:ff:81:5f:51:8c:41:93:62:b2:e9:9f:1f:cc:0d:6f:aa:23: d6:a9:00:87:bb:87:53:80:ed:95:10:9b:13:49:c0:42:9f:7f: 70:c5:b7:1d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE17apEG9xGItZ7S7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NWZlOTY5NjgtNWNkMi00ZDM3LTk1YWQtNjBhYTJkOGNiNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRcqECckk8P6n84hSJhNdB8jkmcbwhQW2Apq iEe/078O/eQypFrdQCV+Wv3kGsoff9F0bMBfSCTe+6fmZjeFuakc7arBTrOCojXj SPR14QV/BPOcXNuWzFcXMNl77eucnMlP9RvXhk2iOXGEqo4nRyxJaSv24Hi3LAzk P3ramWSyPEoImp7HuAuACZoU1HxSQ5gtRdx3ZSOnwdUR+Vfax101P9DItQm3fd4M vpTQGGFM9mALkzhs4BQuLxkT9qOjjPPynAkh6S3tfjsltkcNy1RrJlQeyB3a0sM9 aNd53esJE2fnCUlpjCgnl5U9KPQuCO/m186w8VbpmzCWQnubHwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMe4hS6sj4+pmq8GtiVv4g8c4RPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvMzA5YTFhNTAtYTViYS0z N2I5LThiNGQtMGNjNGQ0MjMzMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACbC3jOFkLTMxoT+e5wt6aY/3wGxTQORrj64 9TuPQbUkV9q90Yyl6Y/B5uaxTuNV4xF6rCA4ncHuYFMQn3O9W9QwImIGJWBE18er Atki8qm1cMdN9M9xbDmKZd8aipLOnyA2+N3PCEXXYoSQxf1ywzJ7gpCk/DkWE+NY KiA0b73O0hGlK1P7pt+kjAmY4NoZRN3psVNlRvBrSLkyW5WVCFdgTD3pZMnqDC2e 82NNiWsZiCVPeWFYLUptpbDlZ1+AiJx3fBhZJ/iDgQElXNYudAWBSoShV2RYHUH/ gV9RjEGTYrLpnx/MDW+qI9apAIe7h1OA7ZUQmxNJwEKff3DFtx0= -----END CERTIFICATE-----Generated at Fri Apr 17 07:29:50 2026 by rpki-client