$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa File: d96cd042-9990-3ef7-a275-88bffac36444.roa (raw, json) Hash identifier: X5Z7ekdCNufgmmtkVbWS3DJo6qQxtgfVBfOLHLdYMB8= Subject key identifier: 12:9C:1E:C4:85:EB:64:56:F0:8A:A5:0C:DD:E3:70:CF:8A:42:8C:D7 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584DF4DB9D96623060EFA010CDA0 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 19718 IP address blocks: 2610:28:f020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:9d:96:62:30:60:ef:a0:10:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=4a92ba4a-f7ce-44c1-ab1b-b9f27f2ff45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:db:b6:59:e1:f8:1c:8c:13:f7:c3:40:13: cd:47:b8:b6:c0:95:5f:c1:f8:cd:d5:93:60:87:8c: b1:de:0c:df:66:1d:aa:92:3c:b0:3e:0d:16:5d:4c: 94:6b:48:93:0b:31:37:86:02:a5:18:44:07:a4:f1: 92:ad:e7:39:56:d5:e4:b0:0f:4a:ba:8b:d0:30:3d: 99:cc:99:74:9f:c2:f1:41:f6:ea:ee:02:33:41:f5: 8a:c9:2c:84:3b:d7:4e:22:35:ba:93:e9:92:5e:65: 53:53:b8:23:87:cf:69:f0:cb:82:c9:70:78:fe:3c: af:ee:c8:bc:30:28:54:d0:7b:c1:61:86:c9:be:11: 6f:f0:c7:41:f4:00:22:73:31:d1:9d:00:15:68:5e: ee:e5:e3:a5:de:7a:e2:4c:13:fa:f5:c6:1e:20:1e: 7d:f8:5a:c8:1c:e0:3a:b5:89:9f:66:82:05:8e:0c: 86:e8:15:8a:c3:01:70:93:39:c5:d4:f6:b6:ce:8c: 83:55:aa:c0:ef:11:99:85:78:f9:e6:eb:18:ff:0d: 66:2b:99:88:89:a1:f0:5b:c0:d4:54:a9:05:29:70: 24:d6:16:5f:20:05:1d:dc:a8:68:48:2c:3a:fc:d8: 31:a2:eb:c4:e8:2b:82:27:72:01:3a:1f:4c:68:06: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:1E:C4:85:EB:64:56:F0:8A:A5:0C:DD:E3:70:CF:8A:42:8C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2610:28:f020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:96:51:63:dd:c4:84:b0:50:3d:e5:8a:23:0c:1e:b5:c8: 21:63:6e:b6:70:33:8b:de:cb:8c:64:e4:2c:31:8f:9d:06:d5: a5:8b:75:03:88:5b:74:e3:52:0a:0e:d2:6d:d9:e5:48:70:29: d5:2c:ba:54:1b:90:97:28:0e:5c:54:b7:61:3b:31:e2:14:cf: a8:64:6c:0d:ef:4c:33:2f:d7:13:bd:ab:d8:df:ff:f4:c3:c9: 96:b3:12:c4:cc:8e:09:84:10:6b:c6:91:dc:5b:6b:6c:ad:bb: 36:a8:97:05:17:c6:00:b0:53:8a:46:4a:27:d3:0c:45:98:7d: 6f:d9:d9:a1:56:92:12:f0:b4:fb:71:70:e1:f0:6d:a5:89:44: fa:3a:6c:20:5e:e8:e0:57:d2:42:3a:43:49:31:d8:0d:7d:bb: 8f:b7:91:e4:16:c3:1d:59:55:04:04:79:b6:ab:59:5b:b5:d7: 13:49:1c:7d:93:d1:83:01:eb:0c:aa:e5:dd:c0:b5:6d:1f:2a: 1b:51:9f:ee:72:e2:43:8d:a3:87:6f:48:d7:46:11:7e:42:d4: 93:4f:0f:52:19:5b:71:6d:3e:a7:d1:b8:90:85:59:d6:16:9f: 63:d1:c6:8e:84:1d:ef:ed:56:c8:d8:19:40:0a:12:34:69:71: 06:55:1c:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE30252WYjBg76AQzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NGE5MmJhNGEtZjdjZS00NGMxLWFiMWItYjlmMjdmMmZmNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCvbtlnh+ByME/fDQBPNR7i2wJVfwfjN1ZNg h4yx3gzfZh2qkjywPg0WXUyUa0iTCzE3hgKlGEQHpPGSrec5VtXksA9KuovQMD2Z zJl0n8LxQfbq7gIzQfWKySyEO9dOIjW6k+mSXmVTU7gjh89p8MuCyXB4/jyv7si8 MChU0HvBYYbJvhFv8MdB9AAiczHRnQAVaF7u5eOl3nriTBP69cYeIB59+FrIHOA6 tYmfZoIFjgyG6BWKwwFwkznF1Pa2zoyDVarA7xGZhXj55usY/w1mK5mIiaHwW8DU VKkFKXAk1hZfIAUd3KhoSCw6/NgxouvE6CuCJ3IBOh9MaAYNFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKcHsSF62RW8IqlDN3jcM+KQozXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZDk2Y2QwNDItOTk5MC0z ZWY3LWEyNzUtODhiZmZhYzM2NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKPAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8XllFj3cSEsFA95YojDB61yCFjbrZwM4vey4xk5Cwxj50G1aWL dQOIW3TjUgoO0m3Z5UhwKdUsulQbkJcoDlxUt2E7MeIUz6hkbA3vTDMv1xO9q9jf //TDyZazEsTMjgmEEGvGkdxba2ytuzaolwUXxgCwU4pGSifTDEWYfW/Z2aFWkhLw tPtxcOHwbaWJRPo6bCBe6OBX0kI6Q0kx2A19u4+3keQWwx1ZVQQEebarWVu11xNJ HH2T0YMB6wyq5d3AtW0fKhtRn+5y4kONo4dvSNdGEX5C1JNPD1IZW3FtPqfRuJCF WdYWn2PRxo6EHe/tVsjYGUAKEjRpcQZVHNY= -----END CERTIFICATE-----Generated at Sat Jun 13 22:48:16 2026 by rpki-client