$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa File: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json) Hash identifier: QwM6dHbW1PGL4b0SbhBEZ9029o26yHP+azK2FrsuJdU= Subject key identifier: C6:56:41:80:46:ED:BC:4B:AA:AD:39:F2:48:09:EB:11:F0:0B:9F:D4 Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584E104ED82C7CBD4B4E0E4AD980 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 394449 IP address blocks: 2604:3dc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:d8:2c:7c:bd:4b:4e:0e:4a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=0fab8a5f-92bd-487e-ac1b-046ac59b8148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f3:cc:0c:13:c6:31:19:44:87:5b:41:f0:2f: 65:25:8c:a1:04:94:92:89:b8:e7:46:84:3a:4b:90: f9:28:52:ce:4c:74:cb:9e:f6:76:dc:4e:42:a8:2e: 96:26:bb:3b:7c:7d:12:f6:dc:a0:23:59:34:2a:6e: 6f:bf:f3:f4:f8:6d:4e:e5:21:79:96:34:7c:2f:cc: 09:d2:f1:d9:58:39:dd:b3:fd:9a:59:8b:87:1b:3e: e5:c6:37:ca:53:2d:8b:52:1e:13:5a:f2:aa:7b:d5: ac:df:61:b8:78:fd:39:cd:4b:4f:ea:7d:6c:c0:88: 1f:5d:09:8f:60:a1:77:99:3e:a2:42:6f:55:84:2a: d7:0f:4a:e3:61:10:ea:87:90:a5:9c:09:f0:02:39: 64:97:c3:1e:a1:c5:1c:00:cc:fc:46:e4:c5:c5:c2: 12:2e:c5:aa:31:ae:42:0a:4a:0d:d8:74:ba:8a:12: 09:02:1b:7a:6b:47:1a:e4:84:9c:85:9d:72:a4:0e: 17:78:bf:90:ae:27:67:64:55:6e:15:c8:fc:19:77: 78:19:f8:95:be:5c:91:63:f7:a4:04:0b:15:26:05: 3c:15:2b:82:71:b9:46:48:6a:c6:bc:60:f0:4f:87: 60:dc:6e:cb:f0:6b:0f:77:48:1c:cc:72:e6:fd:6e: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:41:80:46:ED:BC:4B:AA:AD:39:F2:48:09:EB:11:F0:0B:9F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv6: 2604:3dc0:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8c:b1:bf:44:b6:e7:5d:af:cf:6d:da:ce:e0:81:04:33:39: af:1f:2d:5a:cf:9f:95:46:12:8b:59:47:aa:e0:18:d6:3c:ce: c3:d6:e5:eb:22:a5:1d:f2:95:44:e9:29:7b:05:6a:21:4e:18: d6:56:fc:1b:53:f5:9f:cb:67:c3:1e:f0:c0:de:ce:85:55:3e: c1:20:41:20:95:04:b6:1a:62:7e:f3:4b:2d:e8:55:4c:92:00: 3b:ca:95:00:c6:5b:a3:ee:e1:cd:69:0a:b2:86:d5:f7:94:01: bc:d7:e4:c6:64:6f:7b:ef:7f:c1:5e:73:1e:f0:56:2d:c0:d4: 40:43:19:1a:ea:2e:39:ed:cb:f4:13:75:23:f5:85:77:6f:8d: c4:22:a5:ef:9d:e9:d9:a9:87:c1:30:96:85:d3:36:86:f6:76: 47:f8:58:3c:e6:5b:52:86:41:85:03:e4:99:12:32:e4:df:1a: 8c:58:b5:5f:2d:7e:b0:47:e2:56:35:90:b8:15:b8:80:04:73: 0c:db:36:f6:06:70:7a:32:01:c1:1e:7b:61:2d:f2:de:77:d2: 76:10:7d:13:82:cf:cf:95:a8:83:e0:84:06:9a:a2:bf:6b:00: b3:8b:02:98:e7:81:5d:6e:93:aa:bd:de:22:75:c3:ab:b7:5a: 9e:61:8d:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTtgsfL1LTg5K2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MGZhYjhhNWYtOTJiZC00ODdlLWFjMWItMDQ2YWM1OWI4MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/PMDBPGMRlEh1tB8C9lJYyhBJSSibjnRoQ6 S5D5KFLOTHTLnvZ23E5CqC6WJrs7fH0S9tygI1k0Km5vv/P0+G1O5SF5ljR8L8wJ 0vHZWDnds/2aWYuHGz7lxjfKUy2LUh4TWvKqe9Ws32G4eP05zUtP6n1swIgfXQmP YKF3mT6iQm9VhCrXD0rjYRDqh5ClnAnwAjlkl8MeocUcAMz8RuTFxcISLsWqMa5C CkoN2HS6ihIJAht6a0ca5ISchZ1ypA4XeL+QridnZFVuFcj8GXd4GfiVvlyRY/ek BAsVJgU8FSuCcblGSGrGvGDwT4dg3G7L8GsPd0gczHLm/W7u2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZWQYBG7bxLqq058kgJ6xHwC5/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiMsb9Etuddr89t2s7ggQQzOa8fLVrPn5VGEotZR6rgGNY8zsPW 5esipR3ylUTpKXsFaiFOGNZW/BtT9Z/LZ8Me8MDezoVVPsEgQSCVBLYaYn7zSy3o VUySADvKlQDGW6Pu4c1pCrKG1feUAbzX5MZkb3vvf8Fecx7wVi3A1EBDGRrqLjnt y/QTdSP1hXdvjcQipe+d6dmph8EwloXTNob2dkf4WDzmW1KGQYUD5JkSMuTfGoxY tV8tfrBH4lY1kLgVuIAEcwzbNvYGcHoyAcEee2Et8t530nYQfROCz8+VqIPghAaa or9rALOLApjngV1uk6q93iJ1w6u3Wp5hje4= -----END CERTIFICATE-----Generated at Sat Jun 13 21:44:45 2026 by rpki-client