$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: Synq8wreTb/1w8GLzebCDyqrNSXZIHw4vp2aEDoJKAM= Subject key identifier: 8A:22:0E:C0:1D:1F:30:7C:C5:4D:CB:DC:3F:B4:DA:DD:90:52:DD:36 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584DD35B0A17EB4096BC19E5D140 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0a:17:eb:40:96:bc:19:e5:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=6d451f3a-68ee-456f-ad3a-9ec4a8689aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:a7:ce:36:13:4a:1e:e1:45:e6:c8:65:55: 76:fb:00:84:7e:e4:55:7a:95:69:cf:89:af:e5:1a: d2:ac:d0:1d:67:34:1d:07:7b:55:ef:2c:ed:63:66: 91:fb:ec:d9:cd:86:0d:0d:4e:fa:50:16:b7:95:52: f6:5e:90:16:45:cd:e6:3d:7c:86:e5:e8:2d:b1:2d: d9:17:d9:df:fa:28:83:d8:e8:98:94:7a:80:8e:8d: 93:1c:3c:20:b3:00:0d:50:62:14:58:c8:ac:8b:3a: af:89:26:a1:83:8a:0c:dc:20:f2:0b:88:32:62:0b: 5d:fb:06:6b:e6:da:0e:09:5e:aa:4f:e5:d5:b0:8b: b5:6d:25:c4:5f:af:30:5d:ce:a3:2b:33:15:27:db: 0e:a9:3b:aa:cc:ce:32:e4:ba:ae:99:8a:88:85:f2: 38:9b:0e:79:aa:29:92:ef:1f:ab:bf:cf:05:05:fd: 88:5b:42:5d:7e:fd:36:57:ed:aa:5a:c6:fe:87:3c: 99:32:6c:b7:d0:66:64:44:30:97:ce:f7:b4:4d:47: 58:79:a2:50:86:3c:c7:ad:cf:84:00:c7:1c:98:4b: 22:8e:8b:3a:70:8f:a8:31:8b:05:e3:2a:df:16:db: c8:cd:9f:9c:77:40:2d:c0:d6:7c:da:b8:48:2e:c0: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:22:0E:C0:1D:1F:30:7C:C5:4D:CB:DC:3F:B4:DA:DD:90:52:DD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c3:2c:26:d3:92:d4:28:e8:b6:96:52:e1:1d:fe:8c:85:82: 43:cc:1c:35:3d:48:9a:36:26:f0:f5:0b:70:a2:0c:45:1e:c9: fe:f5:88:96:dc:84:3c:ca:e0:6d:22:61:ae:92:9b:ff:34:97: 69:b8:72:03:61:6b:ad:14:52:a0:18:79:59:36:62:25:a0:d4: 42:3b:00:9f:e5:a2:22:1f:6a:82:ba:4d:11:c3:0d:8f:a5:0c: 8d:9d:d0:bd:94:02:fa:02:be:9d:08:a4:df:c1:0a:2f:c0:cb: b2:b9:8d:33:00:e2:ae:81:16:82:60:77:d5:4c:01:b8:c7:b0: 4a:7e:8c:36:f5:35:a9:27:d2:99:c7:cf:87:b7:13:ae:5b:1d: a2:40:57:18:82:8b:e9:00:6d:f1:f1:40:f6:ad:21:2b:7a:bb: a1:00:ff:8d:e4:7f:6e:3a:98:94:73:29:35:57:0f:f1:9b:88: da:a5:ce:4e:61:7c:94:ee:83:5d:02:54:a8:ee:6f:96:27:a9: 16:5b:a1:a3:40:b3:8e:d6:e9:28:e1:40:5c:08:74:ec:ef:95: d5:bf:c2:04:64:76:cb:bf:75:9a:b6:6c:f9:05:49:89:ba:84: 2a:1a:1a:dc:b6:cb:3d:e9:b9:ed:70:f9:42:9d:f0:5e:a4:19: 69:49:96:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3TWwoX60CWvBnl0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk NmQ0NTFmM2EtNjhlZS00NTZmLWFkM2EtOWVjNGE4Njg5YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7WnzjYTSh7hRebIZVV2+wCEfuRVepVpz4mv 5RrSrNAdZzQdB3tV7yztY2aR++zZzYYNDU76UBa3lVL2XpAWRc3mPXyG5egtsS3Z F9nf+iiD2OiYlHqAjo2THDwgswANUGIUWMisizqviSahg4oM3CDyC4gyYgtd+wZr 5toOCV6qT+XVsIu1bSXEX68wXc6jKzMVJ9sOqTuqzM4y5LqumYqIhfI4mw55qimS 7x+rv88FBf2IW0Jdfv02V+2qWsb+hzyZMmy30GZkRDCXzve0TUdYeaJQhjzHrc+E AMccmEsijos6cI+oMYsF4yrfFtvIzZ+cd0AtwNZ82rhILsBAvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIoiDsAdHzB8xU3L3D+02t2QUt02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbwywm05LUKOi2llLhHf6MhYJDzBw1PUiaNibw9QtwogxFHsn+9YiW 3IQ8yuBtImGukpv/NJdpuHIDYWutFFKgGHlZNmIloNRCOwCf5aIiH2qCuk0Rww2P pQyNndC9lAL6Ar6dCKTfwQovwMuyuY0zAOKugRaCYHfVTAG4x7BKfow29TWpJ9KZ x8+HtxOuWx2iQFcYgovpAG3x8UD2rSEreruhAP+N5H9uOpiUcyk1Vw/xm4japc5O YXyU7oNdAlSo7m+WJ6kWW6GjQLOO1uko4UBcCHTs75XVv8IEZHbLv3Watmz5BUmJ uoQqGhrctss96bntcPlCnfBepBlpSZYf -----END CERTIFICATE-----Generated at Sun Jun 14 05:24:18 2026 by rpki-client