$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: pYXZPAexiVCfaPZfiici0uTZE6HNNIGnD6FuqbKCF4Q= Subject key identifier: 21:13:59:8F:07:C3:56:06:25:39:1D:02:CC:65:C5:DB:4A:C2:FE:DB Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584E070097F8A77071261B894080 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:97:f8:a7:70:71:26:1b:89:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=d6cda5f3-d446-4172-84c4-04c0b85b574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:01:ad:49:9e:ad:c0:0e:8c:3f:5c:d9:8b: f6:23:3f:5d:07:1b:de:4e:e7:71:28:85:f2:42:28: 6a:09:64:88:5c:4a:3f:fa:17:9b:28:a5:0a:ac:82: 50:89:14:c2:ac:cd:b5:df:fc:2b:56:0d:1f:89:3a: 64:95:db:55:bd:7a:31:6d:63:30:58:d9:7c:1c:50: 6e:cc:2b:ce:b2:9e:e5:32:aa:ce:e0:66:37:8a:18: 18:19:2c:f7:fa:b8:41:ca:1a:78:22:8c:88:bb:14: da:9a:7c:04:0a:bc:86:8f:24:36:bb:d3:4b:ae:d5: 73:7c:34:40:f1:e5:ae:ef:6d:d6:eb:63:35:ec:d4: ce:67:98:1d:55:3c:6b:16:79:12:89:66:49:84:f5: a9:84:c0:2e:9f:da:8c:c0:38:d5:3a:80:58:f7:14: db:5e:1c:fc:ab:94:12:ee:77:1e:9d:38:67:56:7c: 33:53:53:57:86:1f:9d:6f:15:25:3a:9c:11:44:3a: f1:45:3f:ed:09:9e:39:1d:8e:71:74:89:32:e4:04: c4:34:45:4a:9f:dc:86:e1:7e:6c:43:a2:35:fb:10: 3d:a9:95:9a:6f:6e:5b:d3:ca:46:7b:4b:2f:0c:ab: 44:c2:d6:69:76:1c:ab:46:09:79:cb:79:16:e5:6f: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:59:8F:07:C3:56:06:25:39:1D:02:CC:65:C5:DB:4A:C2:FE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8a:de:bc:18:2c:dc:7a:0a:a3:0c:8e:a5:a0:9e:2a:5a:09: 68:a8:85:6b:f9:46:67:11:50:26:66:a3:51:65:7e:60:7c:9f: 09:b6:fd:a6:78:a6:01:19:59:5b:c0:33:66:72:80:c6:75:a9: 5c:bf:9c:17:ab:d1:3a:aa:72:b6:29:36:10:84:5e:25:7a:d3: 6f:d7:ce:1b:f0:94:a6:a3:24:67:84:b5:e7:0b:b9:8e:24:1a: b3:30:af:26:91:04:04:0f:3a:ca:b0:ca:35:09:2f:ca:70:79: 81:f7:a6:01:b2:36:db:5e:09:e4:a4:f2:54:d3:1d:8c:bd:71: b6:7f:25:53:a6:cf:55:bd:7a:9e:6f:84:eb:29:1f:83:28:7b: 2b:e4:e5:b1:0d:dc:6d:37:4d:02:89:e5:78:ed:b2:b1:c5:b2: 97:58:8c:81:bd:17:6d:43:dc:a7:cd:f8:76:1b:5c:cb:a0:e8: ea:2a:5c:69:dc:41:28:f6:5e:8b:5b:ff:c8:35:14:48:fb:9a: 03:62:81:13:3c:cf:2b:38:7a:d6:1d:78:56:29:9f:83:9a:1b: d2:d2:0c:c2:d3:a0:ce:fd:c4:b9:df:84:e8:35:a4:b2:8f:e2: 7a:81:8a:48:6b:b9:eb:4f:ce:5f:4e:f8:ba:f8:a5:93:60:dd: 6f:d4:a1:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4HAJf4p3BxJhuJQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk ZDZjZGE1ZjMtZDQ0Ni00MTcyLTg0YzQtMDRjMGI4NWI1NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAoBrUmercAOjD9c2Yv2Iz9dBxveTudxKIXy QihqCWSIXEo/+hebKKUKrIJQiRTCrM213/wrVg0fiTpkldtVvXoxbWMwWNl8HFBu zCvOsp7lMqrO4GY3ihgYGSz3+rhByhp4IoyIuxTamnwECryGjyQ2u9NLrtVzfDRA 8eWu723W62M17NTOZ5gdVTxrFnkSiWZJhPWphMAun9qMwDjVOoBY9xTbXhz8q5QS 7ncenThnVnwzU1NXhh+dbxUlOpwRRDrxRT/tCZ45HY5xdIky5ATENEVKn9yG4X5s Q6I1+xA9qZWab25b08pGe0svDKtEwtZpdhyrRgl5y3kW5W9gQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCETWY8Hw1YGJTkdAsxlxdtKwv7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKK3rwYLNx6CqMMjqWgnipaCWiohWv5RmcRUCZmo1FlfmB8nwm2 /aZ4pgEZWVvAM2ZygMZ1qVy/nBer0TqqcrYpNhCEXiV602/XzhvwlKajJGeEtecL uY4kGrMwryaRBAQPOsqwyjUJL8pweYH3pgGyNtteCeSk8lTTHYy9cbZ/JVOmz1W9 ep5vhOspH4Moeyvk5bEN3G03TQKJ5XjtsrHFspdYjIG9F21D3KfN+HYbXMug6Ooq XGncQSj2Xotb/8g1FEj7mgNigRM8zys4etYdeFYpn4OaG9LSDMLToM79xLnfhOg1 pLKP4nqBikhruetPzl9O+Lr4pZNg3W/UoXw= -----END CERTIFICATE-----Generated at Sat Jun 13 10:12:50 2026 by rpki-client