$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa File: 41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa (raw, json) Hash identifier: ZmaAbGZ7HNxCO+RMMnZMaU54wTs6x3LEAKBO2Ta0Y5U= Subject key identifier: FF:33:6C:6B:FA:65:D1:07:BE:A0:FB:54:FC:B6:CE:BF:D4:25:7E:31 Certificate issuer: /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Certificate serial: 010D0C9F4328584E1FA9A37C971A7BFF3AEBE28D Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 32334 IP address blocks: 2620:17:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a3:7c:97:1a:7b:ff:3a:eb:e2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=68d2f4b0-b548-4d22-bc47-6d32b5212898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:ed:a9:6a:41:9e:81:6d:69:9a:11:6d:39: 7a:ac:0a:c7:bc:f7:2b:91:c4:12:1c:f3:1c:2e:8f: 80:9e:35:06:46:58:d2:c5:82:28:28:5c:7d:52:d0: 6a:a6:eb:03:3b:b9:ce:18:5b:08:2e:18:a0:21:13: f8:6b:f4:be:07:04:72:fc:c3:92:82:98:bf:bc:6c: 73:a7:db:8d:d8:f8:20:73:25:aa:89:4a:1d:e6:a9: f5:71:ee:62:11:90:db:dd:bb:17:98:b1:54:42:e3: c1:4b:1e:f4:c2:cd:cd:45:d1:90:7f:4f:19:f1:e8: ce:3b:16:3a:63:97:9a:2f:7b:5a:e8:4d:06:8d:e8: 6a:db:d2:b5:3d:1a:22:4b:b2:80:bc:2a:bd:70:ff: 71:19:d3:ca:0e:bf:b5:b7:96:11:5d:2d:28:ec:09: 7d:50:c8:9c:0b:ad:d6:75:32:bf:cf:03:f1:8a:67: 9b:ae:6b:fb:ec:05:e7:d7:46:0d:82:5c:70:49:b8: 64:ef:4c:0f:a2:fd:93:b1:9a:26:06:8f:d5:d9:c7: 15:8b:32:1b:83:32:d8:a2:f5:fc:da:7b:12:5c:39: e6:7c:76:32:5c:7c:40:81:07:20:e3:f4:af:25:84: 69:fc:f4:9e:33:61:56:7f:a8:b8:8c:94:ca:d5:e9: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:33:6C:6B:FA:65:D1:07:BE:A0:FB:54:FC:B6:CE:BF:D4:25:7E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/41d5edb2-10f7-3e0a-b7d3-7ac2840b67b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl X509v3 Authority Key Identifier: keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer sbgp-ipAddrBlock: critical IPv6: 2620:17:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:61:dc:44:67:4b:46:af:2f:1e:f2:a4:1a:cc:aa:c6:fc:ce: 9c:58:cc:3f:c0:44:7b:e0:83:4b:00:6c:6f:a9:59:11:b3:78: 40:23:7a:68:be:f1:0a:4f:cb:af:20:28:81:91:46:ba:1c:bc: 97:6b:ff:d0:42:9f:b4:49:a4:38:22:7a:47:ae:11:6d:0d:19: 68:ad:8a:c6:da:fb:1d:46:04:9e:5e:e5:f9:d0:8f:18:a3:5c: 02:5d:7e:96:cb:77:de:66:e0:25:16:2b:23:e6:c8:35:5b:a1: 6b:db:2b:32:67:01:fc:5a:fe:84:0a:54:27:c3:a3:bc:19:ef: aa:68:e2:ae:a4:d2:75:22:51:91:64:fa:31:85:95:49:1d:17: ab:d5:6a:37:0d:76:79:63:9d:6d:c5:c5:c8:89:81:b0:54:79: e4:31:e0:ff:e8:6a:f8:80:e5:52:92:43:bc:61:e7:df:61:fb: 29:f2:ea:2d:0e:e4:18:ce:3e:66:3a:79:c1:1d:56:50:14:71: f4:08:12:23:bf:f9:ad:e0:08:78:dd:c9:8c:15:92:78:47:09: 40:6f:40:87:38:7c:4d:33:dd:8b:5a:11:57:80:f6:7e:e5:8c: ee:5b:2d:29:7f:9f:e8:3e:f1:e5:9b:19:59:f9:96:78:bc:25: 1d:17:04:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4fqaN8lxp7/zrr4o0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ0OTM0YzgtNWI3OC00OGQ2LWIyNjEtYjdhMGQxYmM0 YmI3MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk NjhkMmY0YjAtYjU0OC00ZDIyLWJjNDctNmQzMmI1MjEyODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+7tqWpBnoFtaZoRbTl6rArHvPcrkcQSHPMc Lo+AnjUGRljSxYIoKFx9UtBqpusDO7nOGFsILhigIRP4a/S+BwRy/MOSgpi/vGxz p9uN2PggcyWqiUod5qn1ce5iEZDb3bsXmLFUQuPBSx70ws3NRdGQf08Z8ejOOxY6 Y5eaL3ta6E0Gjehq29K1PRoiS7KAvCq9cP9xGdPKDr+1t5YRXS0o7Al9UMicC63W dTK/zwPximebrmv77AXn10YNglxwSbhk70wPov2TsZomBo/V2ccVizIbgzLYovX8 2nsSXDnmfHYyXHxAgQcg4/SvJYRp/PSeM2FWf6i4jJTK1elhAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP8zbGv6ZdEHvqD7VPy2zr/UJX4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5 MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFiYzRiYjcvNDFkNWVkYjItMTBmNy0z ZTBhLWI3ZDMtN2FjMjg0MGI2N2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmQ0OTM0YzgtNWI3OC00OGQ2LWIy NjEtYjdhMGQxYmM0YmI3LzJkNDkzNGM4LTViNzgtNDhkNi1iMjYxLWI3YTBkMWJj NGJiNy5jcmwwHwYDVR0jBBgwFoAUjaVzmWc3dFzU/MzrwMLF5wxUSeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2Ew ZDFiYzRiYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAF6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBh3ERnS0avLx7ypBrMqsb8zpxYzD/ARHvgg0sAbG+pWRGzeEAj emi+8QpPy68gKIGRRrocvJdr/9BCn7RJpDgiekeuEW0NGWitisba+x1GBJ5e5fnQ jxijXAJdfpbLd95m4CUWKyPmyDVboWvbKzJnAfxa/oQKVCfDo7wZ76po4q6k0nUi UZFk+jGFlUkdF6vVajcNdnljnW3FxciJgbBUeeQx4P/oaviA5VKSQ7xh599h+yny 6i0O5BjOPmY6ecEdVlAUcfQIEiO/+a3gCHjdyYwVknhHCUBvQIc4fE0z3YtaEVeA 9n7ljO5bLSl/n+g+8eWbGVn5lni8JR0XBBo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:58:19 2026 by rpki-client