$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa File: 9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa (raw, json) Hash identifier: qrinM5HpkIhR4VqJRAQFMljVyY6w7MVTYMB2He+hRV4= Subject key identifier: DA:95:06:0C:A0:14:DE:7C:C6:65:07:84:EB:13:77:52:66:10:56:C0 Certificate issuer: /CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Certificate serial: 010D0C9F4328584E18AEFC92436799FE2388CF00 Authority key identifier: 45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 40591 IP address blocks: 2620:0:d90::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:fc:92:43:67:99:fe:23:88:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd4f17b-3d8c-4bcd-a454-9647e663c093 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=f9505c7e-961e-475c-a778-803ea4017b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f2:bf:eb:bd:64:fd:d0:77:ec:50:a3:e9:68: 42:35:8d:7f:94:5e:23:4d:34:be:a8:92:19:6f:f6: 85:1d:7a:02:92:f9:4f:9f:d0:c5:bb:1e:2e:16:c4: ad:94:d2:9b:bc:33:a5:5f:f8:de:ad:bb:af:4c:a2: e1:d0:4b:4b:58:d7:9d:86:29:d2:4e:f1:3e:38:8d: cc:e1:c2:8c:b7:f6:32:29:45:0d:09:df:b9:af:b7: 05:83:67:c9:40:38:ee:6a:aa:13:02:c5:0e:7a:ce: 9c:bd:b5:05:f3:59:d0:30:cb:c7:15:7c:4c:00:2c: 98:38:43:32:dd:6f:45:d7:71:86:0f:9a:14:71:0f: d8:02:e8:28:51:53:4d:c7:50:2c:1d:ea:71:38:50: b4:02:ae:b3:1d:c0:69:57:e1:e9:7b:48:6c:d2:c0: a5:61:7a:71:b2:fb:57:86:bf:f0:7b:86:7d:4b:30: 0b:91:66:45:8d:c1:3a:d4:a6:3b:0f:8c:3c:4d:ae: 70:18:6c:12:e1:f9:09:08:16:dc:02:3c:1d:46:fe: 78:0a:c7:47:3f:70:23:84:42:40:19:2a:c6:6b:6b: 4a:07:4a:9a:1a:e0:c7:b9:8c:12:d3:17:22:56:01: 47:de:5c:28:07:0c:29:f5:85:9d:c6:8c:4c:74:d6: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:95:06:0C:A0:14:DE:7C:C6:65:07:84:EB:13:77:52:66:10:56:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9afd1b9a-f288-37c1-a9a9-6631481d90a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093/9bd4f17b-3d8c-4bcd-a454-9647e663c093.crl X509v3 Authority Key Identifier: keyid:45:C1:4A:C3:33:AC:98:E7:BE:EE:1A:63:E1:7D:E8:F4:EE:6E:4F:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9bd4f17b-3d8c-4bcd-a454-9647e663c093.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:d90::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c4:b1:2e:c6:35:4c:5b:0c:82:f8:ff:02:82:44:2a:ae:21: 3b:f2:27:7e:47:a3:5e:e8:ab:98:e1:30:90:d2:72:78:3f:a8: 58:4d:36:c1:df:a5:57:57:ff:cb:93:75:de:45:45:76:15:3c: 2a:26:c8:41:3a:fd:cf:7d:e6:11:99:45:84:d2:9c:3d:bd:04: e8:92:e1:e2:b8:e4:80:34:36:a3:f6:f0:e5:56:4e:95:1e:74: aa:77:7a:a1:9a:c4:ff:55:24:1c:19:37:61:fa:e8:bd:da:e5: 96:6a:a7:cb:c8:55:26:b3:20:ab:df:1f:01:c9:8e:65:15:60: 24:4b:91:b8:5b:a0:c5:42:71:fa:42:e3:42:9e:9c:ff:48:00: 25:1f:6d:f4:5e:e0:72:61:41:2e:54:38:2c:23:b8:68:1c:c5: d1:fe:6e:84:18:6a:64:e5:a8:ac:61:19:e4:0e:01:f3:7f:10: 74:ee:96:07:df:a1:c1:d3:ad:34:64:6e:25:35:dd:76:83:10: f0:62:d6:06:1d:17:bc:83:63:b4:e8:3e:f8:eb:ff:9d:52:20: 0a:de:dd:0c:c6:20:2c:32:95:38:bb:7a:c1:2b:5d:94:bb:25: 5e:7a:93:bf:ae:3f:db:99:40:9c:fe:11:9e:82:c4:23:28:2c: e8:c5:8b:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4YrvySQ2eZ/iOIzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkNGYxN2ItM2Q4Yy00YmNkLWE0NTQtOTY0N2U2NjNj MDkzMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk Zjk1MDVjN2UtOTYxZS00NzVjLWE3NzgtODAzZWE0MDE3YjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfK/671k/dB37FCj6WhCNY1/lF4jTTS+qJIZ b/aFHXoCkvlPn9DFux4uFsStlNKbvDOlX/jerbuvTKLh0EtLWNedhinSTvE+OI3M 4cKMt/YyKUUNCd+5r7cFg2fJQDjuaqoTAsUOes6cvbUF81nQMMvHFXxMACyYOEMy 3W9F13GGD5oUcQ/YAugoUVNNx1AsHepxOFC0Aq6zHcBpV+Hpe0hs0sClYXpxsvtX hr/we4Z9SzALkWZFjcE61KY7D4w8Ta5wGGwS4fkJCBbcAjwdRv54CsdHP3AjhEJA GSrGa2tKB0qaGuDHuYwS0xciVgFH3lwoBwwp9YWdxoxMdNZEMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqVBgygFN58xmUHhOsTd1JmEFbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0 ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3ZTY2M2MwOTMvOWFmZDFiOWEtZjI4OC0z N2MxLWE5YTktNjYzMTQ4MWQ5MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWJkNGYxN2ItM2Q4Yy00YmNkLWE0 NTQtOTY0N2U2NjNjMDkzLzliZDRmMTdiLTNkOGMtNGJjZC1hNDU0LTk2NDdlNjYz YzA5My5jcmwwHwYDVR0jBBgwFoAURcFKwzOsmOe+7hpj4X3o9O5uT/AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85YmQ0ZjE3Yi0zZDhjLTRiY2QtYTQ1NC05NjQ3 ZTY2M2MwOTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAA2Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHEsS7GNUxbDIL4/wKCRCquITvyJ35Ho17oq5jhMJDScng/qFhN NsHfpVdX/8uTdd5FRXYVPComyEE6/c995hGZRYTSnD29BOiS4eK45IA0NqP28OVW TpUedKp3eqGaxP9VJBwZN2H66L3a5ZZqp8vIVSazIKvfHwHJjmUVYCRLkbhboMVC cfpC40KenP9IACUfbfRe4HJhQS5UOCwjuGgcxdH+boQYamTlqKxhGeQOAfN/EHTu lgffocHTrTRkbiU13XaDEPBi1gYdF7yDY7ToPvjr/51SIAre3QzGICwylTi7esEr XZS7JV56k7+uP9uZQJz+EZ6CxCMoLOjFix4= -----END CERTIFICATE-----Generated at Sat Jun 13 17:58:18 2026 by rpki-client