$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa File: 54268940-4af9-39c9-bd94-1f4f53099856.roa (raw, json) Hash identifier: csjZHsX+vaxYPKCkODub2bYlo1oE/dGvW8UPaWZbSWs= Subject key identifier: E2:A2:06:B7:9E:06:D0:EC:90:E6:31:68:9C:E0:F7:45:84:7F:E9:16 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584D7B6A90ECEDECCA0503FAB680 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 5006 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:90:ec:ed:ec:ca:05:03:fa:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=e3955c1b-841d-4110-8d39-ec4b7ce44ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:f1:7d:db:71:8f:5e:bc:4d:a6:51:da:fe: 0c:c9:cd:c1:78:16:73:9d:f4:a2:91:13:ce:05:27: 0d:29:ec:d5:04:bb:a3:b1:3d:05:58:03:05:25:3a: 20:08:f5:c5:83:33:cf:44:6e:92:04:1c:a4:e8:30: 34:98:11:6a:75:62:38:ea:18:e8:00:92:38:47:72: fc:67:80:b0:20:3c:ed:39:b7:63:2e:47:85:a3:56: 46:ce:ce:e1:ec:77:e8:a0:fd:5f:ca:e7:cd:ff:b5: 22:f8:1b:fe:08:ad:94:03:83:b6:fb:e3:ec:24:c3: 80:4a:61:a1:d3:fd:d5:25:c9:df:0a:13:aa:f9:52: a1:e9:9f:a4:05:23:91:f3:56:de:93:10:c8:59:df: c1:37:d3:b5:cd:22:62:9c:3b:30:74:38:fd:95:e1: 25:c4:7e:cc:1a:a7:43:e7:a2:e7:d1:64:7b:2a:8a: 1a:7d:04:c3:63:4a:e4:0d:10:77:b7:db:9c:70:83: 35:f3:2d:3d:c3:71:7e:b7:8f:a2:b6:7e:74:73:78: 08:28:4a:35:96:56:66:7f:4e:4f:f8:ee:a1:b9:6a: 03:b2:35:2d:06:e3:32:90:f1:4c:ff:08:ef:91:6e: 4c:42:12:52:9e:3d:b2:00:87:6e:77:1e:f0:52:11: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A2:06:B7:9E:06:D0:EC:90:E6:31:68:9C:E0:F7:45:84:7F:E9:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/54268940-4af9-39c9-bd94-1f4f53099856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:54:3c:08:07:c3:88:5d:71:7d:0d:0a:ed:45:ae:f6:ff:0d: 94:2e:e7:05:57:e6:f8:0c:44:cc:12:e6:89:92:56:f8:75:ec: b9:ad:58:d1:92:61:f1:06:91:b0:52:d5:f3:83:db:06:7f:e0: 91:9c:be:58:97:70:21:e2:11:18:e9:69:fe:03:c1:7d:a9:fe: 88:72:b1:95:88:e5:61:55:90:58:93:60:0d:c7:20:5c:f8:99: 58:64:a6:3c:83:bf:37:8a:c8:87:1c:4f:a8:48:89:b2:37:73: 08:bd:fc:d9:83:0f:6b:25:26:32:a5:45:ac:71:49:e7:39:89: 7d:ec:89:d9:58:0a:57:2e:20:b6:f1:bc:f4:ee:69:cc:e4:5f: 0f:43:eb:4e:4d:97:10:f1:22:34:5c:84:6e:ae:50:fe:5b:de: 66:3a:ab:1b:64:4e:3c:0a:a1:6f:6d:4a:21:ed:01:4b:d2:fb: 1b:ba:23:4a:6d:e3:7b:78:4d:dc:d6:21:54:2f:0c:0d:7f:63: 20:cf:99:c3:12:93:77:9d:8d:6a:d8:79:f8:93:b9:9b:2f:ec: 75:de:f8:7f:c2:34:1d:c7:eb:ed:ac:be:ec:99:88:c8:60:53: d1:b8:5e:46:6d:bd:28:f5:bc:70:d7:aa:72:02:b9:7d:86:89: 90:de:6c:bf -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE17apDs7ezKBQP6toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTM5NTVjMWItODQxZC00MTEwLThkMzktZWM0YjdjZTQ0ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Pxfdtxj168TaZR2v4Myc3BeBZznfSikRPO BScNKezVBLujsT0FWAMFJTogCPXFgzPPRG6SBByk6DA0mBFqdWI46hjoAJI4R3L8 Z4CwIDztObdjLkeFo1ZGzs7h7HfooP1fyufN/7Ui+Bv+CK2UA4O2++PsJMOASmGh 0/3VJcnfChOq+VKh6Z+kBSOR81bekxDIWd/BN9O1zSJinDswdDj9leElxH7MGqdD 56Ln0WR7KooafQTDY0rkDRB3t9uccIM18y09w3F+t4+itn50c3gIKEo1llZmf05P +O6huWoDsjUtBuMykPFM/wjvkW5MQhJSnj2yAIdudx7wUhEbSwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOKiBreeBtDskOYxaJzg90WEf+kWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNTQyNjg5NDAtNGFmOS0z OWM5LWJkOTQtMWY0ZjUzMDk5ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEJUPAgHw4hdcX0NCu1Frvb/DZQu5wVX5vgM RMwS5omSVvh17LmtWNGSYfEGkbBS1fOD2wZ/4JGcvliXcCHiERjpaf4DwX2p/ohy sZWI5WFVkFiTYA3HIFz4mVhkpjyDvzeKyIccT6hIibI3cwi9/NmDD2slJjKlRaxx Sec5iX3sidlYClcuILbxvPTuaczkXw9D605NlxDxIjRchG6uUP5b3mY6qxtkTjwK oW9tSiHtAUvS+xu6I0pt43t4TdzWIVQvDA1/YyDPmcMSk3edjWrYefiTuZsv7HXe +H/CNB3H6+2svuyZiMhgU9G4XkZtvSj1vHDXqnICuX2GiZDebL8= -----END CERTIFICATE-----Generated at Sat Apr 18 02:33:18 2026 by rpki-client