$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa File: deaf37bb-4661-37e0-a226-5e0de645fe9c.roa (raw, json) Hash identifier: eaLj1OGjYJvXGPpgepC56LCgWTGPyPI7ZW2xwfo5JAc= Subject key identifier: 7F:E8:12:FA:01:C9:D5:5F:C5:6C:F3:1A:D8:D5:63:A0:EE:6A:BB:A3 Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Certificate serial: 010D0C9F4328584DF4DB9D5C69401AD463394800 Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 81 IP address blocks: 2600:2700::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:9d:5c:69:40:1a:d4:63:39:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=28d106e3-be85-4061-87d6-5cae6f02a6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:a9:d8:3f:4c:b1:28:36:07:cd:85:f0:25: 9f:cb:b2:b1:a7:47:92:9e:b3:c5:7b:ad:d0:74:f5: b0:bb:4c:16:80:d9:ff:66:a5:76:44:23:04:7a:a0: b0:68:8d:6d:bb:d0:5e:4e:1f:36:21:99:b2:74:14: ae:ac:f6:c9:a2:02:e6:cc:32:62:2d:e9:40:28:23: 82:99:47:af:c9:d1:41:66:d7:17:00:06:2a:6e:76: 78:bf:a8:94:de:84:05:03:bc:b1:ba:87:93:52:83: 08:07:28:eb:4c:4d:82:78:4b:f9:6f:92:2c:d4:14: 32:c9:94:99:26:af:c2:ac:d6:6e:fa:5d:62:e7:9a: 2c:95:15:3b:b3:76:b1:27:f0:a4:95:2c:df:11:0e: c5:00:ec:7b:a6:d9:50:0f:fa:1a:63:4b:6f:7d:83: e3:7d:df:1c:1a:71:e2:34:19:10:54:eb:f1:35:1c: 3a:fe:2f:11:b8:77:c6:21:e8:e9:2e:4d:5c:03:03: 67:aa:bd:3f:96:70:89:e0:c9:ed:a7:ee:ba:c0:91: 35:0e:d7:be:59:09:4f:7b:b4:cc:ec:a3:d3:a7:ae: 41:38:32:cd:8d:6b:f7:a4:2c:85:ff:42:86:68:b7: ca:18:e6:8c:1a:45:ae:8b:7a:5d:80:06:2a:1a:18: 9d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E8:12:FA:01:C9:D5:5F:C5:6C:F3:1A:D8:D5:63:A0:EE:6A:BB:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/deaf37bb-4661-37e0-a226-5e0de645fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl X509v3 Authority Key Identifier: keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer sbgp-ipAddrBlock: critical IPv6: 2600:2700::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:67:e9:90:43:3a:8d:df:7f:27:3f:10:12:8f:94:96:13:24: e5:bc:27:07:93:f0:ed:e8:cb:52:3f:81:8a:06:73:1f:95:5c: 95:9a:40:3f:02:b0:b4:d1:dd:b6:fe:07:a5:15:2f:5a:f7:69: d0:78:d6:04:21:67:ab:f2:fc:c3:24:88:62:be:7f:f0:d0:b7: dd:e6:2e:c7:77:d8:53:8a:87:db:c9:73:1c:31:6e:cb:ae:2b: 1f:96:56:44:35:60:9d:6a:f5:cd:82:5e:3f:0f:09:1c:46:6d: ee:67:78:66:21:6f:a2:f8:2d:ea:a3:bf:ea:89:42:50:18:67: 06:53:7c:7b:30:a5:54:ae:b6:50:fd:aa:50:0c:1a:b1:45:d5: f8:82:a9:be:51:15:86:59:89:b9:e7:9b:2f:1c:80:3d:8d:39: 83:39:72:39:31:c4:92:a5:83:5e:78:58:91:45:81:57:d6:a4: 68:a5:61:6e:2f:98:a1:1f:4a:3a:75:52:bb:0b:27:69:c0:fb: a3:5c:2d:d2:ca:cf:b0:32:bb:a4:59:a1:dd:f2:10:87:de:52: 6f:e7:c5:38:b8:b6:88:32:15:59:37:34:73:9a:a5:cc:69:20: a8:1d:86:96:39:30:65:07:75:f4:c9:46:e3:63:b8:ff:63:0b: 1c:91:13:e4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE30251caUAa1GM5SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0 N2Q2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjhkMTA2ZTMtYmU4NS00MDYxLTg3ZDYtNWNhZTZmMDJhNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilip2D9MsSg2B82F8CWfy7Kxp0eSnrPFe63Q dPWwu0wWgNn/ZqV2RCMEeqCwaI1tu9BeTh82IZmydBSurPbJogLmzDJiLelAKCOC mUevydFBZtcXAAYqbnZ4v6iU3oQFA7yxuoeTUoMIByjrTE2CeEv5b5Is1BQyyZSZ Jq/CrNZu+l1i55oslRU7s3axJ/CklSzfEQ7FAOx7ptlQD/oaY0tvfYPjfd8cGnHi NBkQVOvxNRw6/i8RuHfGIejpLk1cAwNnqr0/lnCJ4Mntp+66wJE1Dte+WQlPe7TM 7KPTp65BODLNjWv3pCyF/0KGaLfKGOaMGkWui3pdgAYqGhidewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH/oEvoBydVfxWzzGtjVY6DuarujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5 MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZGVhZjM3YmItNDY2MS0z N2UwLWEyMjYtNWUwZGU2NDVmZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh Yjk4MzQ3ZDYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAnADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAPZ+mQQzqN338nPxASj5SWEyTlvCcHk/Dt6MtSP4GKBnMflVyVmkA/ ArC00d22/gelFS9a92nQeNYEIWer8vzDJIhivn/w0Lfd5i7Hd9hTiofbyXMcMW7L risfllZENWCdavXNgl4/DwkcRm3uZ3hmIW+i+C3qo7/qiUJQGGcGU3x7MKVUrrZQ /apQDBqxRdX4gqm+URWGWYm555svHIA9jTmDOXI5McSSpYNeeFiRRYFX1qRopWFu L5ihH0o6dVK7CydpwPujXC3Sys+wMrukWaHd8hCH3lJv58U4uLaIMhVZNzRzmqXM aSCoHYaWOTBlB3X0yUbjY7j/YwsckRPk -----END CERTIFICATE-----Generated at Sat Jun 13 21:41:33 2026 by rpki-client