$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/3f6b7cba-68a5-3df2-9627-64379b0e6079.roa File: 3f6b7cba-68a5-3df2-9627-64379b0e6079.roa (raw, json) Hash identifier: aWxypoNYawJ3xXwOgJ52gubLBhrlBpmS2iC+koCyBZw= Subject key identifier: 7C:A6:98:14:A1:32:0B:5A:63:C8:00:C0:25:FC:77:54:BE:31:1E:28 Certificate issuer: /CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Certificate serial: 010D0C9F4328584D8100AABAE30C1FF5D2DCC5C0 Authority key identifier: 88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/3f6b7cba-68a5-3df2-9627-64379b0e6079.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 2602:f7e1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:aa:ba:e3:0c:1f:f5:d2:dc:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de513f7-173f-4447-a34f-d58d3b1ce99d Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=89306c96-8e4d-4fdb-8552-4d68811a71de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b6:e2:44:6a:39:ff:32:4c:f9:57:7e:85:ca: ad:4d:62:18:72:c2:02:84:3d:ba:96:f9:b0:da:52: 15:bb:63:f9:83:8c:2f:fc:e7:4d:b4:e7:7f:3d:f1: 0c:34:dd:ea:29:3b:ae:90:e2:b6:b9:d0:5c:61:df: 39:d4:36:cc:2d:5d:46:54:7e:e5:b1:eb:0d:47:89: d1:40:f9:b2:0d:de:7c:49:17:7e:a4:c2:db:c8:ec: 2f:80:a9:e8:dc:bf:41:a3:33:8c:2b:45:c7:a6:6d: 27:82:38:ce:94:5a:64:21:29:e2:cb:a6:d3:cf:dd: b0:79:b7:7d:7b:4a:3c:f7:d6:8f:6b:4f:cb:c8:07: 1d:d9:4b:fd:20:c8:a2:79:de:64:38:59:50:b5:68: aa:b8:77:b2:5f:22:91:9c:cc:d2:a2:3d:dd:f3:51: de:dc:85:2d:1d:84:8e:c1:aa:7f:0c:3e:b0:0c:40: 83:74:fc:db:4f:89:a7:0e:b9:bd:dd:81:93:e0:ce: 59:80:d2:1e:76:30:85:04:98:7e:e8:42:f8:d7:c5: db:bf:c1:ca:af:82:d1:53:4d:93:ab:e4:2a:95:30: b6:aa:84:26:6d:be:98:8a:f7:3e:cd:ae:f9:4a:65: 36:93:c0:08:71:7e:aa:af:c4:91:c1:76:4c:2c:cd: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:98:14:A1:32:0B:5A:63:C8:00:C0:25:FC:77:54:BE:31:1E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/3f6b7cba-68a5-3df2-9627-64379b0e6079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d/1de513f7-173f-4447-a34f-d58d3b1ce99d.crl X509v3 Authority Key Identifier: keyid:88:F1:63:EE:90:2F:42:06:D2:1E:34:89:D8:3E:5E:1E:78:1C:0A:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1de513f7-173f-4447-a34f-d58d3b1ce99d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7e1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:53:9a:40:d4:a1:c2:9a:93:47:a0:7b:fa:c8:89:05:14:bf: 06:d2:45:df:f2:63:63:17:35:c9:40:7f:f4:a1:24:0e:44:06: ca:3e:f4:bf:22:2d:ab:9d:08:d7:9d:aa:b4:8d:36:1c:90:81: ef:f4:b3:f4:8a:f9:5b:de:5d:36:60:3c:bc:20:20:53:9a:2b: 30:14:7d:57:d0:d4:9f:51:85:c9:3d:ef:82:be:36:22:b6:c2: 31:b0:dc:1b:33:cd:24:d9:eb:9f:15:df:a1:6e:87:ac:6a:f5: e6:54:22:79:44:99:dc:83:fa:8e:ec:ed:c5:90:e4:8f:19:9b: 31:ba:cc:b3:9d:ad:0d:42:be:53:96:19:ed:2c:ea:f7:f1:73: db:ab:89:67:9b:81:6f:da:f5:cb:f8:5d:14:b4:0d:70:1a:a6: f7:83:2d:f3:08:c8:5b:a0:6a:2d:c7:f2:41:e2:24:32:06:22: 73:bc:73:4d:6e:2d:88:61:93:2e:2f:c1:13:c0:40:ab:6a:16: 53:55:b6:bc:31:d6:b7:10:dd:8e:71:5d:79:0c:7a:e9:ef:68: 92:d8:cb:63:68:9e:de:b1:0e:37:78:10:ca:df:bf:da:5d:06: 3c:7c:b7:36:2a:a5:07:ac:9c:9d:c4:54:d8:2f:b4:a7:d9:84: c8:cc:41:0d -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2BAKq64wwf9dLcxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlNTEzZjctMTczZi00NDQ3LWEzNGYtZDU4ZDNiMWNl OTlkMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ODkzMDZjOTYtOGU0ZC00ZmRiLTg1NTItNGQ2ODgxMWE3MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrbiRGo5/zJM+Vd+hcqtTWIYcsIChD26lvmw 2lIVu2P5g4wv/OdNtOd/PfEMNN3qKTuukOK2udBcYd851DbMLV1GVH7lsesNR4nR QPmyDd58SRd+pMLbyOwvgKno3L9BozOMK0XHpm0ngjjOlFpkISniy6bTz92webd9 e0o899aPa0/LyAcd2Uv9IMiied5kOFlQtWiquHeyXyKRnMzSoj3d81He3IUtHYSO wap/DD6wDECDdPzbT4mnDrm93YGT4M5ZgNIedjCFBJh+6EL418Xbv8HKr4LRU02T q+QqlTC2qoQmbb6Yivc+za75SmU2k8AIcX6qr8SRwXZMLM2w/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHymmBShMgtaY8gAwCX8d1S+MR4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1 MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThkM2IxY2U5OWQvM2Y2YjdjYmEtNjhhNS0z ZGYyLTk2MjctNjQzNzliMGU2MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWRlNTEzZjctMTczZi00NDQ3LWEz NGYtZDU4ZDNiMWNlOTlkLzFkZTUxM2Y3LTE3M2YtNDQ0Ny1hMzRmLWQ1OGQzYjFj ZTk5ZC5jcmwwHwYDVR0jBBgwFoAUiPFj7pAvQgbSHjSJ2D5eHngcCiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZGU1MTNmNy0xNzNmLTQ0NDctYTM0Zi1kNThk M2IxY2U5OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL34QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATVOaQNShwpqTR6B7+siJBRS/BtJF3/JjYxc1yUB/9KEkDkQGyj70 vyItq50I152qtI02HJCB7/Sz9Ir5W95dNmA8vCAgU5orMBR9V9DUn1GFyT3vgr42 IrbCMbDcGzPNJNnrnxXfoW6HrGr15lQieUSZ3IP6juztxZDkjxmbMbrMs52tDUK+ U5YZ7Szq9/Fz26uJZ5uBb9r1y/hdFLQNcBqm94Mt8wjIW6BqLcfyQeIkMgYic7xz TW4tiGGTLi/BE8BAq2oWU1W2vDHWtxDdjnFdeQx66e9oktjLY2ie3rEON3gQyt+/ 2l0GPHy3NiqlB6ycncRU2C+0p9mEyMxBDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:25 2026 by rpki-client