$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa File: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (raw, json) Hash identifier: yn/hDmAoPiqiAYtgvXNxOy4r6NMRff+W7NicoOkPFYM= Subject key identifier: 29:75:1B:B6:DA:58:85:86:33:CB:4A:06:FF:D3:52:90:D6:64:44:4B Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584D91C00DCD2EF4B8ED79C07100 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 398951 IP address blocks: 2602:f978::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0d:cd:2e:f4:b8:ed:79:c0:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=3b795618-d51f-45a4-bf0a-d493e47fd611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:5a:b1:05:d9:4a:99:47:6b:cd:55:c5:0e: 1b:f9:2d:53:be:b7:2a:5a:01:52:db:8a:a1:0b:f0: 57:9f:d4:b6:09:ee:1c:54:8e:dc:2a:63:cf:4e:bc: 32:a1:8d:dc:81:b3:1f:0f:d5:19:c6:6f:00:bf:39: d3:34:ab:86:99:4d:8d:4d:65:11:7e:51:23:05:f9: 71:e3:bc:3e:e1:8d:05:a4:05:74:a9:61:5e:63:77: f3:af:ec:4a:a8:5e:24:a3:da:0b:9c:f6:26:10:7e: 9b:26:f7:1d:5f:09:fa:c7:74:a6:78:5f:56:01:08: 86:79:90:71:51:2e:e4:21:e2:22:35:b7:24:b0:76: de:26:4e:e4:2f:c0:34:bc:de:10:db:36:44:c1:f0: 00:50:14:82:ed:85:ac:55:1e:03:13:f2:42:db:9a: a6:40:ec:59:9b:45:82:8d:04:c8:48:5f:7c:26:b3: 42:86:f6:de:ed:df:59:41:e9:42:1c:61:59:37:65: 29:9f:4b:5f:cb:ae:4a:18:71:57:75:5d:97:7b:f4: 85:37:8f:56:00:ad:f5:87:e2:a3:6b:f1:f7:1b:52: e3:ed:2e:d5:b8:b9:f1:58:f4:86:d1:38:30:9b:5a: 1f:b2:d8:44:b7:44:78:a8:a4:b7:56:31:75:d7:7a: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:1B:B6:DA:58:85:86:33:CB:4A:06:FF:D3:52:90:D6:64:44:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv6: 2602:f978::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f0:f6:7d:b8:79:52:17:f3:f8:44:04:f2:c2:87:f4:3f:52: 82:15:9a:6b:62:80:fb:76:90:64:86:c0:09:61:f8:1a:4f:c2: 1e:a5:4f:96:5d:be:3f:ae:7d:9a:ba:0b:f1:5e:fa:7f:a0:11: be:0f:6e:75:23:f6:67:4e:74:c1:fb:d5:44:25:33:d7:a2:4a: 4a:30:f4:a9:54:71:a5:aa:1c:5d:01:13:43:82:77:30:9a:46: 38:88:6e:af:cd:78:7c:18:4b:8e:29:b2:48:d9:f5:b5:7c:d1: cc:e7:49:ed:0d:19:05:7f:3a:f0:d2:e7:6b:58:fa:ce:06:b2: e3:2a:e6:07:1d:7c:f7:80:df:38:a0:a2:c9:b0:db:22:c1:26: 2c:f9:45:57:ab:d1:7b:a1:33:5e:cd:01:f9:8f:99:8a:02:38: fc:70:a4:65:7f:ce:de:bf:89:62:24:c2:a7:2b:f6:c3:10:57: 0e:e8:23:8b:21:87:14:83:e3:3f:21:56:08:62:ad:68:02:e1: 49:ec:dc:7f:50:1f:be:62:2f:08:c1:9a:1d:38:ab:28:bf:4c: 7f:42:82:46:c1:26:b5:c6:e7:ae:96:4e:cb:53:a0:02:b7:5c: ba:c1:90:db:22:82:c1:4b:36:44:61:57:fc:71:b2:52:ae:5a: 45:09:6f:55 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2RwA3NLvS47XnAcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk M2I3OTU2MTgtZDUxZi00NWE0LWJmMGEtZDQ5M2U0N2ZkNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ9asQXZSplHa81VxQ4b+S1TvrcqWgFS24qh C/BXn9S2Ce4cVI7cKmPPTrwyoY3cgbMfD9UZxm8AvznTNKuGmU2NTWURflEjBflx 47w+4Y0FpAV0qWFeY3fzr+xKqF4ko9oLnPYmEH6bJvcdXwn6x3SmeF9WAQiGeZBx US7kIeIiNbcksHbeJk7kL8A0vN4Q2zZEwfAAUBSC7YWsVR4DE/JC25qmQOxZm0WC jQTISF98JrNChvbe7d9ZQelCHGFZN2Upn0tfy65KGHFXdV2Xe/SFN49WAK31h+Kj a/H3G1Lj7S7VuLnxWPSG0Tgwm1ofsthEt0R4qKS3VjF113rL9QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCl1G7baWIWGM8tKBv/TUpDWZERLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvY2NmNzBmY2MtNDBjZC0z NTRiLTk1ZDAtNWZmODBmOWU1ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL5eAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB/D2fbh5Uhfz+EQE8sKH9D9SghWaa2KA+3aQZIbACWH4Gk/CHqVP ll2+P659mroL8V76f6ARvg9udSP2Z050wfvVRCUz16JKSjD0qVRxpaocXQETQ4J3 MJpGOIhur814fBhLjimySNn1tXzRzOdJ7Q0ZBX868NLna1j6zgay4yrmBx1894Df OKCiybDbIsEmLPlFV6vRe6EzXs0B+Y+ZigI4/HCkZX/O3r+JYiTCpyv2wxBXDugj iyGHFIPjPyFWCGKtaALhSezcf1AfvmIvCMGaHTirKL9Mf0KCRsEmtcbnrpZOy1Og ArdcusGQ2yKCwUs2RGFX/HGyUq5aRQlvVQ== -----END CERTIFICATE-----Generated at Wed May 13 09:35:02 2026 by rpki-client