$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa File: 2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa (raw, json) Hash identifier: zaJpOYl8GYR403JfdfWFVOUNSfAFFmvfSdY+2574gfw= Subject key identifier: 29:6E:D2:60:F9:3C:45:33:26:63:EE:8C:04:C2:F8:D2:31:E2:C6:57 Certificate issuer: /CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Certificate serial: 010D0C9F4328584E104F346583F0A1104C790680 Authority key identifier: A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 2620:cb:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:34:65:83:f0:a1:10:4c:79:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcda9af9-d2df-4809-b52c-d7bc8859feb3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=4251a6ea-6f06-4123-9415-6d336a414d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:6d:70:be:a2:3b:c9:24:44:71:a8:a3:ab: e7:f8:7c:69:f1:9e:fb:0b:04:e0:34:a3:4b:8a:78: 5c:23:55:e3:51:ee:e1:bd:a7:c8:94:64:8f:20:3f: 30:04:cb:a6:04:21:0b:49:d4:44:63:07:47:b2:99: 31:1c:6d:60:e3:0f:a7:ad:d5:21:41:af:f4:47:6d: 33:29:bb:ad:1e:8c:1e:ad:42:0c:b3:3e:c6:46:f5: ea:32:60:a3:f8:81:59:14:c2:d6:64:b3:32:6f:b5: 95:32:06:e8:11:52:22:3a:1b:6f:74:86:d7:8f:19: 3b:79:49:ce:16:e5:cd:bf:60:27:5a:bd:cf:43:01: 19:35:2b:27:50:52:05:ec:ec:14:51:5b:63:94:e5: 6d:87:42:99:f8:a3:03:67:d0:ee:3c:b0:ad:30:18: 81:04:cd:7e:af:2e:d7:69:5d:48:64:05:2f:0d:cc: 7b:b5:b3:96:88:df:68:1d:b7:7c:88:ec:5c:78:71: c9:4d:22:df:c4:72:5c:fa:76:3d:ad:7b:49:3b:17: 77:6a:23:49:17:f7:f8:43:39:40:37:88:2c:c7:4a: 41:72:cb:25:66:cc:a5:d4:d9:3f:71:7e:18:b0:47: 57:e2:6f:32:d4:9b:45:23:97:bf:23:1a:8c:07:f9: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6E:D2:60:F9:3C:45:33:26:63:EE:8C:04:C2:F8:D2:31:E2:C6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/2a9c0848-2a94-3cbc-bc67-7ca2ba4c9a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3/fcda9af9-d2df-4809-b52c-d7bc8859feb3.crl X509v3 Authority Key Identifier: keyid:A1:04:0B:45:E8:6C:B5:BF:6E:3F:7E:F5:87:0B:16:B3:E3:82:BD:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcda9af9-d2df-4809-b52c-d7bc8859feb3.cer sbgp-ipAddrBlock: critical IPv6: 2620:cb:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b8:a7:e2:ef:93:92:28:ed:61:95:26:07:94:54:bf:ed:47: b8:66:0c:a6:8b:a5:b8:c0:89:6c:20:84:f8:f4:74:19:c5:38: 9a:88:0d:dc:25:66:6d:7a:53:6e:8f:68:2e:31:60:d9:6f:74: 1e:ef:91:c8:c0:43:aa:b2:1e:b7:0f:51:3c:b7:ca:21:64:63: 49:24:8c:62:5a:06:d5:0c:e1:61:e2:c3:6e:9a:c2:7e:df:c7: a2:12:0f:58:f2:0d:31:b2:00:e0:f3:6d:54:82:74:65:93:cc: bd:8b:bd:b5:7f:f2:cc:08:5f:e8:3d:d8:6a:de:b1:2d:cb:ef: b9:08:37:dc:02:a3:66:00:2f:3d:cb:d3:48:e8:11:12:03:42: 23:0d:1c:97:c1:08:72:98:e3:e8:5c:e8:9e:3d:e0:32:44:83: 05:42:de:a3:b8:6d:e1:c4:d4:49:1a:20:c2:57:20:40:bd:e4: 0c:cd:cc:7c:2c:5b:8d:33:29:07:97:6e:a5:01:64:9f:f6:72: dd:0e:d3:c2:ff:1c:6f:64:82:86:49:62:e1:cb:17:41:4e:5c: 8c:60:08:70:33:09:d1:08:34:6c:16:1f:44:57:67:bc:31:95: f4:46:4d:eb:3a:92:8c:09:9b:12:ad:df:0b:ce:c3:0e:f1:54: 2e:7f:a0:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTzRlg/ChEEx5BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkYTlhZjktZDJkZi00ODA5LWI1MmMtZDdiYzg4NTlm ZWIzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDI1MWE2ZWEtNmYwNi00MTIzLTk0MTUtNmQzMzZhNDE0ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPZtcL6iO8kkRHGoo6vn+Hxp8Z77CwTgNKNL inhcI1XjUe7hvafIlGSPID8wBMumBCELSdREYwdHspkxHG1g4w+nrdUhQa/0R20z KbutHowerUIMsz7GRvXqMmCj+IFZFMLWZLMyb7WVMgboEVIiOhtvdIbXjxk7eUnO FuXNv2AnWr3PQwEZNSsnUFIF7OwUUVtjlOVth0KZ+KMDZ9DuPLCtMBiBBM1+ry7X aV1IZAUvDcx7tbOWiN9oHbd8iOxceHHJTSLfxHJc+nY9rXtJOxd3aiNJF/f4QzlA N4gsx0pBcsslZsyl1Nk/cX4YsEdX4m8y1JtFI5e/IxqMB/nV/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFClu0mD5PEUzJmPujATC+NIx4sZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mY2Rh OWFmOS1kMmRmLTQ4MDktYjUyYy1kN2JjODg1OWZlYjMvMmE5YzA4NDgtMmE5NC0z Y2JjLWJjNjctN2NhMmJhNGM5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmNkYTlhZjktZDJkZi00ODA5LWI1 MmMtZDdiYzg4NTlmZWIzL2ZjZGE5YWY5LWQyZGYtNDgwOS1iNTJjLWQ3YmM4ODU5 ZmViMy5jcmwwHwYDVR0jBBgwFoAUoQQLRehstb9uP371hwsWs+OCvQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mY2RhOWFmOS1kMmRmLTQ4MDktYjUyYy1kN2Jj ODg1OWZlYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAyyAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEm4p+Lvk5Io7WGVJgeUVL/tR7hmDKaLpbjAiWwghPj0dBnFOJqI DdwlZm16U26PaC4xYNlvdB7vkcjAQ6qyHrcPUTy3yiFkY0kkjGJaBtUM4WHiw26a wn7fx6ISD1jyDTGyAODzbVSCdGWTzL2LvbV/8swIX+g92GresS3L77kIN9wCo2YA Lz3L00joERIDQiMNHJfBCHKY4+hc6J494DJEgwVC3qO4beHE1EkaIMJXIEC95AzN zHwsW40zKQeXbqUBZJ/2ct0O08L/HG9kgoZJYuHLF0FOXIxgCHAzCdEINGwWH0RX Z7wxlfRGTes6kowJmxKt3wvOww7xVC5/oKU= -----END CERTIFICATE-----Generated at Sat Jun 13 13:32:00 2026 by rpki-client