$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: 74wc4AwPsxtgPz/5+GtAE2VHOuXd3FUdyk1msCCZrxE= Subject key identifier: C6:68:B5:61:66:38:E9:A5:3E:30:BE:FD:2D:1A:DC:21:93:60:F8:F9 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584E253F06CDE3B6B80E2AC2D2E0 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:06:cd:e3:b6:b8:0e:2a:c2:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=b5faffbc-30d2-477d-964d-3feeed1f5663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a0:d3:d6:d5:fe:33:4e:05:6e:ae:27:a9:8d: 0d:50:27:b2:df:b6:11:a3:8c:d0:7e:31:c0:e5:83: 5d:b2:20:95:95:37:35:8e:6d:c2:90:e1:22:f6:f3: 3b:f8:81:7a:77:d1:18:d8:14:3e:71:98:98:47:54: 3b:a1:5b:09:ee:73:a9:3a:23:19:42:91:8a:66:e1: 6f:3d:bd:5a:e8:1e:45:9a:77:d5:09:26:48:f5:25: 40:06:59:ea:54:7b:e7:b2:60:43:7c:66:cc:6b:3e: ed:32:ff:ff:de:1a:85:e7:aa:0b:5d:d2:e6:8d:b4: 92:51:10:8e:1a:99:fc:3c:d3:51:cc:91:6b:f1:7b: ca:6c:1a:aa:e1:90:f2:ae:51:1f:0d:5a:11:91:73: d1:be:67:94:b8:3d:c3:91:a8:11:7d:74:61:a0:54: 8e:60:d2:f0:fd:6d:68:7c:71:cc:0f:9a:93:8b:c3: 12:43:28:97:9f:7f:6b:c7:7f:4b:62:cc:82:c1:89: 02:d6:5c:89:49:49:ef:a8:77:0b:18:55:8b:41:25: 2d:eb:11:b0:df:51:b1:d9:65:86:01:48:c4:22:16: 51:78:86:64:16:76:5d:73:02:27:a0:43:d5:63:62: 9c:33:1a:fe:5c:bd:45:2d:24:54:d8:67:ba:34:ec: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:68:B5:61:66:38:E9:A5:3E:30:BE:FD:2D:1A:DC:21:93:60:F8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ac:20:d8:0e:ab:8e:60:16:c2:9b:b9:0b:ec:ed:57:97:0e: 8a:57:97:80:21:55:97:f3:11:5e:8c:34:c1:6a:12:80:a8:0c: 34:cc:ab:0b:da:51:b8:aa:a5:c6:b7:dd:ce:37:92:c4:b2:5a: 99:d5:c7:46:bf:51:19:8c:a2:06:98:d6:e4:a6:6a:a6:7b:72: b7:56:7c:86:6e:d1:53:5f:65:52:ba:95:ec:b3:38:66:96:44: fe:ef:46:30:4e:f9:8a:43:c1:4e:2e:62:cc:51:1c:d1:5b:e6: 88:10:6d:48:a5:1c:1d:70:b8:61:f4:d4:bc:60:ea:64:3a:46: 63:0f:6e:f5:bc:5d:da:8d:77:33:59:5c:54:bc:52:f6:62:4f: cb:4c:27:d6:ed:4c:bd:68:fe:0d:ed:7d:c4:55:c9:54:f8:8c: 1b:33:66:1b:7b:24:66:3f:7d:9e:a1:d2:c1:f8:65:73:b3:e5: a0:21:c0:8e:a9:39:21:7e:a0:e8:6e:31:63:41:38:f5:bb:38: 94:9c:e7:1d:55:c5:1a:6b:17:3c:cd:df:53:da:4c:71:5a:5e: e4:10:0f:42:45:3c:cc:bc:fb:84:7b:73:72:f7:50:a5:58:2e: 0f:b0:b6:dd:bb:4e:07:5f:41:e8:f7:2c:40:8c:a8:86:c0:e3: 39:92:28:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4lPwbN47a4DirC0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk YjVmYWZmYmMtMzBkMi00NzdkLTk2NGQtM2ZlZWVkMWY1NjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaDT1tX+M04Fbq4nqY0NUCey37YRo4zQfjHA 5YNdsiCVlTc1jm3CkOEi9vM7+IF6d9EY2BQ+cZiYR1Q7oVsJ7nOpOiMZQpGKZuFv Pb1a6B5FmnfVCSZI9SVABlnqVHvnsmBDfGbMaz7tMv//3hqF56oLXdLmjbSSURCO Gpn8PNNRzJFr8XvKbBqq4ZDyrlEfDVoRkXPRvmeUuD3DkagRfXRhoFSOYNLw/W1o fHHMD5qTi8MSQyiXn39rx39LYsyCwYkC1lyJSUnvqHcLGFWLQSUt6xGw31Gx2WWG AUjEIhZReIZkFnZdcwInoEPVY2KcMxr+XL1FLSRU2Ge6NOx0IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZotWFmOOmlPjC+/S0a3CGTYPj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6sINgOq45gFsKbuQvs7VeXDopXl4AhVZfzEV6MNMFqEoCoDDTM qwvaUbiqpca33c43ksSyWpnVx0a/URmMogaY1uSmaqZ7crdWfIZu0VNfZVK6leyz OGaWRP7vRjBO+YpDwU4uYsxRHNFb5ogQbUilHB1wuGH01Lxg6mQ6RmMPbvW8XdqN dzNZXFS8UvZiT8tMJ9btTL1o/g3tfcRVyVT4jBszZht7JGY/fZ6h0sH4ZXOz5aAh wI6pOSF+oOhuMWNBOPW7OJSc5x1VxRprFzzN31PaTHFaXuQQD0JFPMy8+4R7c3L3 UKVYLg+wtt27TgdfQej3LECMqIbA4zmSKM8= -----END CERTIFICATE-----Generated at Sat Jun 13 19:09:43 2026 by rpki-client