$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa File: dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa (raw, json) Hash identifier: R9dNLOhAj57URF89SXUETQZ53BNCcFtRQ96K5nMw+0Y= Subject key identifier: 9F:D7:1D:B0:9E:6C:F3:E2:C3:4A:2C:CF:E0:49:AD:51:CC:85:D4:6E Certificate issuer: /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d Certificate serial: 010D0C9F4328584D7A0519F13B8F4A440976FE60 Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 401880 IP address blocks: 2602:f5b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:19:f1:3b:8f:4a:44:09:76:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=452b138c-a2db-44e0-8cce-48618799b0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:d5:23:7a:be:c3:89:29:10:1a:ae:fc:ba: e6:57:24:d2:23:53:ff:2e:2b:2c:fb:36:ec:e1:56: c0:4f:c9:8e:44:9d:12:4d:dc:8d:87:58:53:4b:a1: f2:66:1f:8b:d9:13:cb:3c:01:4a:45:01:56:44:f5: 71:db:42:f1:4d:6a:b2:15:12:2f:bd:34:5a:0f:c8: e1:38:5f:d6:dd:c1:02:f2:dc:71:c9:55:d8:24:75: 10:d1:84:48:a6:99:da:1d:af:37:b7:8f:0f:33:6b: 9c:e2:b5:54:9b:b7:16:56:ef:11:92:9c:9d:9e:4d: f2:fe:cf:ed:92:34:f6:1d:68:cf:f2:38:bd:38:bc: 88:e0:b8:af:b4:d7:33:fc:19:51:5d:bd:a1:7d:45: 5e:0d:e2:0b:7c:2b:99:0a:e2:01:77:c5:74:36:ae: 0e:86:8a:f7:19:7b:95:69:5d:78:38:c7:86:16:b8: ca:1d:3a:7f:20:b6:bc:fc:96:b4:61:40:c8:d2:79: bf:0c:12:d9:0e:e7:8d:77:20:ac:a5:91:5e:64:88: 23:7b:48:25:14:59:77:08:00:fb:f3:13:f6:c5:e8: 71:cb:26:2b:45:89:77:5d:ac:fd:eb:42:f8:a1:82: c3:29:8f:04:e4:8c:07:7f:58:96:62:47:8f:f7:fa: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D7:1D:B0:9E:6C:F3:E2:C3:4A:2C:CF:E0:49:AD:51:CC:85:D4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl X509v3 Authority Key Identifier: keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:91:db:e1:5e:e0:16:e8:61:a8:5d:7e:0c:6b:a0:70:31:ed: 7a:1d:0b:5b:bc:77:b7:19:7f:10:bb:3b:e2:af:98:95:44:02: 9d:8c:29:e5:40:06:88:f7:2f:df:14:ac:81:df:5b:d2:53:88: 6e:cc:8e:80:94:e0:c7:3b:20:a8:a3:36:c3:56:ba:9f:f6:23: 4b:7f:44:9f:01:e1:9c:b7:5c:49:3b:f1:36:07:92:a1:db:fd: c6:93:00:b4:5f:6d:99:2c:6b:43:9f:f8:81:b7:71:1c:12:94: 66:28:62:1b:16:8e:fa:a2:b3:2a:d1:7f:3e:d5:0c:b9:26:35: 8d:8b:65:2a:09:0a:db:f4:b5:be:88:5b:81:d1:a2:b8:2e:c8: dd:24:8f:e7:6f:9f:53:a4:8e:88:f8:b3:66:f0:c6:1f:ab:0e: de:54:d1:32:5a:b3:d7:8a:cd:82:1c:58:00:64:4d:f0:63:e3: 19:17:f8:21:7a:22:61:84:5d:50:33:55:56:d6:b5:4c:c8:6e: c8:59:ab:9f:b5:89:de:0a:26:16:6e:d2:36:48:4a:5b:d9:a4: 1f:cf:7e:c1:c6:8a:89:17:04:da:18:22:dd:cb:75:ac:09:f8: 50:e2:de:17:ef:9d:38:7f:c6:ac:49:61:85:1c:f6:b9:ed:39: 31:f0:86:c5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE16BRnxO49KRAl2/mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwYWMwMjMtYzMzNC00YmJlLWJhYjMtYWZiNzY2MmJl ODNkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NDUyYjEzOGMtYTJkYi00NGUwLThjY2UtNDg2MTg3OTliMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbVI3q+w4kpEBqu/LrmVyTSI1P/Liss+zbs 4VbAT8mORJ0STdyNh1hTS6HyZh+L2RPLPAFKRQFWRPVx20LxTWqyFRIvvTRaD8jh OF/W3cEC8txxyVXYJHUQ0YRIppnaHa83t48PM2uc4rVUm7cWVu8Rkpydnk3y/s/t kjT2HWjP8ji9OLyI4LivtNcz/BlRXb2hfUVeDeILfCuZCuIBd8V0Nq4Ohor3GXuV aV14OMeGFrjKHTp/ILa8/Ja0YUDI0nm/DBLZDueNdyCspZFeZIgje0glFFl3CAD7 8xP2xehxyyYrRYl3Xaz960L4oYLDKY8E5IwHf1iWYkeP9/oXLwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJ/XHbCebPPiw0osz+BJrVHMhdRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBh YzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3NjYyYmU4M2QvZGJmNDBmZGYtMmM3ZC0z ZDcwLThjZTgtMWUzMTYzYjc4ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGUwYWMwMjMtYzMzNC00YmJlLWJh YjMtYWZiNzY2MmJlODNkLzBlMGFjMDIzLWMzMzQtNGJiZS1iYWIzLWFmYjc2NjJi ZTgzZC5jcmwwHwYDVR0jBBgwFoAU6yCFl6bIMynVCOYJufQwC7463CkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZTBhYzAyMy1jMzM0LTRiYmUtYmFiMy1hZmI3 NjYyYmU4M2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1swAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAQ5Hb4V7gFuhhqF1+DGugcDHteh0LW7x3txl/ELs74q+YlUQCnYwp 5UAGiPcv3xSsgd9b0lOIbsyOgJTgxzsgqKM2w1a6n/YjS39EnwHhnLdcSTvxNgeS odv9xpMAtF9tmSxrQ5/4gbdxHBKUZihiGxaO+qKzKtF/PtUMuSY1jYtlKgkK2/S1 vohbgdGiuC7I3SSP52+fU6SOiPizZvDGH6sO3lTRMlqz14rNghxYAGRN8GPjGRf4 IXoiYYRdUDNVVta1TMhuyFmrn7WJ3gomFm7SNkhKW9mkH89+wcaKiRcE2hgi3ct1 rAn4UOLeF++dOH/GrElhhRz2ue05MfCGxQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:56:40 2026 by rpki-client