$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa File: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (raw, json) Hash identifier: MKVZVbTEH7hWHIbZHlHBFbhrg7L7tekHTpYvnbjxIvg= Subject key identifier: DF:0C:57:4F:D3:91:03:09:D9:A2:FE:85:CE:64:DC:45:9D:C1:DB:44 Certificate issuer: /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Certificate serial: 010D0C9F4328584D80FFF26839A1B09CD080C820 Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 400702 IP address blocks: 2604:6580::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f2:68:39:a1:b0:9c:d0:80:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=abf35f39-5b55-478c-8490-14432051cc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:3b:61:c9:63:ea:48:22:a3:1c:3f:32:2c: 15:cf:f8:41:0b:6e:64:d0:6c:6e:ad:dd:41:95:d1: f1:3b:05:05:d3:5d:bb:a9:af:4e:21:f2:c3:7d:19: 83:37:fe:b5:ac:d0:fd:28:90:d9:56:15:ba:7e:b3: a1:9f:b6:ce:58:fa:c1:c7:54:0e:41:81:7a:ce:d1: f8:13:cb:11:aa:aa:3b:10:04:91:d8:cd:95:8f:c7: bb:b1:21:da:e0:05:e4:40:8c:53:d4:46:c6:b8:1e: f0:3a:4b:41:18:58:d9:bc:6f:1b:99:d8:28:0c:ac: c2:77:0d:eb:82:6b:4c:52:de:62:b0:8a:6b:f9:d8: 4f:30:c8:bd:4b:16:12:06:24:26:c8:f2:6f:91:ab: 59:39:0d:a8:e5:5b:ee:87:6f:31:2a:4a:4c:b8:7a: 84:48:5d:28:a6:6b:d7:a0:21:2d:cf:cb:d1:b4:18: eb:f4:c5:dc:48:2a:42:fb:b5:2a:b3:fc:bd:2c:fc: f8:a0:58:54:40:18:0f:9e:ea:02:e0:53:5e:cb:1a: 06:ec:34:ac:54:48:62:f2:26:b9:08:39:e0:a8:9d: 66:50:1d:f7:11:4f:97:4a:11:40:a5:92:92:df:fa: 07:ff:41:bc:42:b5:d2:61:1b:a4:c5:d0:73:ba:7b: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:57:4F:D3:91:03:09:D9:A2:FE:85:CE:64:DC:45:9D:C1:DB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl X509v3 Authority Key Identifier: keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer sbgp-ipAddrBlock: critical IPv6: 2604:6580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:12:6a:4f:ee:32:cf:7a:09:72:14:09:72:d1:a7:f5:02:d1: f1:2c:26:51:88:cd:90:c6:be:57:03:b0:43:be:7e:e0:1c:e7: 33:fd:6f:93:4e:90:b0:61:29:ec:a0:b7:fd:ec:88:16:4d:ff: 50:19:86:4f:c3:c0:e2:08:af:2e:4f:e1:39:92:95:8e:46:36: 52:c9:b4:ea:f4:c9:42:b4:bc:da:91:3f:10:f4:1b:0b:1f:4f: 19:7c:e0:50:eb:8a:d7:a3:c0:a1:55:91:a1:8d:f2:8a:21:db: cd:30:ec:88:a7:42:cd:c8:8b:84:bb:a2:be:10:9b:35:82:0b: 9f:ce:25:9a:76:ae:23:84:0d:7f:65:f2:7c:c4:98:8b:2f:6a: 6a:1d:ab:04:72:e8:4e:64:38:82:85:29:c9:b1:0e:1c:bb:85: 86:ee:0b:61:3d:0c:e1:91:d4:0c:eb:b5:8b:2d:92:f6:dc:f8: 65:5f:17:0b:9b:af:67:16:6a:18:0e:61:b8:53:ac:0d:f6:47: 73:ac:1c:f5:2b:91:16:79:f6:ad:5a:75:2b:d3:40:49:3e:fc: 18:d1:cd:fd:fa:0a:8b:34:d5:9b:51:77:f3:b3:00:11:7c:b8: 27:30:70:4a:fc:82:ab:14:4b:ac:97:fc:cc:ff:de:76:a0:a5: 70:da:53:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2A//JoOaGwnNCAyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl Njg3MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YWJmMzVmMzktNWI1NS00NzhjLTg0OTAtMTQ0MzIwNTFjYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSQ7Yclj6kgioxw/MiwVz/hBC25k0Gxurd1B ldHxOwUF0127qa9OIfLDfRmDN/61rND9KJDZVhW6frOhn7bOWPrBx1QOQYF6ztH4 E8sRqqo7EASR2M2Vj8e7sSHa4AXkQIxT1EbGuB7wOktBGFjZvG8bmdgoDKzCdw3r gmtMUt5isIpr+dhPMMi9SxYSBiQmyPJvkatZOQ2o5Vvuh28xKkpMuHqESF0opmvX oCEtz8vRtBjr9MXcSCpC+7Uqs/y9LPz4oFhUQBgPnuoC4FNeyxoG7DSsVEhi8ia5 CDngqJ1mUB33EU+XShFApZKS3/oH/0G8QrXSYRukxdBzunvDfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN8MV0/TkQMJ2aL+hc5k3EWdwdtEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGQ2ZWJjNjUtNjM3NS0z ZjNkLWE0ZDQtN2U3OWIxNjYyZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0 OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2 ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2 Yjg3NmU2ODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRlgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCcEmpP7jLPeglyFAly0af1AtHxLCZRiM2Qxr5XA7BDvn7gHOcz/W+T TpCwYSnsoLf97IgWTf9QGYZPw8DiCK8uT+E5kpWORjZSybTq9MlCtLzakT8Q9BsL H08ZfOBQ64rXo8ChVZGhjfKKIdvNMOyIp0LNyIuEu6K+EJs1ggufziWadq4jhA1/ ZfJ8xJiLL2pqHasEcuhOZDiChSnJsQ4cu4WG7gthPQzhkdQM67WLLZL23PhlXxcL m69nFmoYDmG4U6wN9kdzrBz1K5EWefatWnUr00BJPvwY0c39+gqLNNWbUXfzswAR fLgnMHBK/IKrFEusl/zM/952oKVw2lMh -----END CERTIFICATE-----Generated at Sun Apr 19 16:58:30 2026 by rpki-client