$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: 6a1FqKbzGmqLIcBUJ1Vo6BeV00cbn1XNV5JAeI20mvE= Subject key identifier: 11:83:52:4A:9F:1C:D5:9B:4E:6F:FE:B1:97:68:1C:F1:82:FA:74:69 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584E0005DD78E21E3A669324FFED Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Sat 30 May 2026 01:00:10 +0000 ROA not before: Sat 30 May 2026 01:00:10 +0000 ROA not after: Fri 28 Aug 2026 01:00:10 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:00:05:dd:78:e2:1e:3a:66:93:24:ff:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: May 30 01:00:10 2026 GMT Not After : Aug 28 01:00:10 2026 GMT Subject: CN=a2076fb8-e3e6-4c1c-927b-701d24eed3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:7e:8b:cc:06:1b:0d:9b:58:00:14:34:1e: 09:e1:04:e6:a4:d0:68:8d:ef:f2:4b:6c:b6:ba:d2: 88:7c:3d:e2:e7:93:5c:b3:13:4c:d9:12:81:50:79: 2f:40:e3:dd:e0:6f:9f:e7:15:2c:ef:81:ad:a3:95: ef:1e:65:9c:5d:af:f7:8f:62:0d:19:75:7f:89:5d: e6:dc:53:0a:ec:d3:95:69:fa:7d:2d:a5:93:71:05: 6d:88:85:a5:77:01:a9:68:50:40:07:cd:2a:9d:ad: 7a:67:c0:cf:98:3e:c8:e5:e1:c1:0e:fa:22:7f:f2: 01:6c:45:58:48:8d:9f:28:0b:a7:50:df:32:50:a6: f8:30:a8:36:3e:74:19:6b:25:5d:d0:31:a8:2e:0d: a0:27:5e:81:8a:a8:ba:96:95:56:c0:07:5f:ed:7e: 30:57:aa:cd:78:1e:e2:27:6a:6e:3b:9f:06:08:f0: b0:5a:ad:e8:6f:eb:9e:74:aa:0e:f0:bc:e8:26:4e: 20:27:a6:57:0d:f0:8f:25:cb:f2:6a:cd:65:4e:72: 69:14:04:d4:76:69:26:b2:19:ab:b3:2c:78:30:c2: 1d:c5:87:a4:90:78:eb:fa:3a:83:0d:e5:8f:f5:a9: 7b:3e:a8:f9:47:ee:dc:37:72:88:aa:12:4f:a4:dc: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:52:4A:9F:1C:D5:9B:4E:6F:FE:B1:97:68:1C:F1:82:FA:74:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:16:91:ad:b2:4a:46:6f:6c:5c:95:35:08:de:71:de:1f:9c: 76:7b:e2:bf:f9:c6:be:86:23:cf:16:16:9c:c3:b6:11:76:db: 3d:c5:7c:90:2b:0b:7c:55:6b:76:b9:d5:a4:7e:b8:82:0d:52: be:ea:bb:f0:a6:96:97:c6:76:e5:03:3f:1d:49:9a:db:a8:2d: 6c:f7:08:82:41:ca:f3:66:de:f2:82:69:47:34:1f:62:f2:7a: e3:1d:93:9d:68:8d:0c:75:a8:20:09:ae:c1:b5:00:e0:3d:b8: 61:5c:cb:43:76:2b:93:26:a5:e3:95:30:ba:1a:b5:75:db:81: 11:f2:c6:cd:0e:6a:bd:df:b3:37:9c:d7:49:42:cf:ef:fb:a9: 14:47:bc:5e:27:94:5a:e5:16:e1:6c:32:c8:7f:04:2c:28:dc: 18:ff:54:dd:93:cc:34:c1:62:18:e6:0c:7b:17:f0:e2:97:50: c1:5d:d9:41:2f:82:b8:ca:3b:f0:29:1a:46:87:81:82:94:11: 03:19:1b:ac:ec:48:27:ed:74:5b:53:0c:0d:7d:d8:64:d3:c3: 15:49:84:d8:d3:47:ee:47:00:9c:87:7b:f2:9d:14:e5:51:70: a6:8f:ad:a5:74:fb:42:88:98:5f:3f:28:ad:45:61:00:17:19: 56:06:2a:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4ABd144h46ZpMk/+0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk YTIwNzZmYjgtZTNlNi00YzFjLTkyN2ItNzAxZDI0ZWVkM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLJ+i8wGGw2bWAAUNB4J4QTmpNBoje/yS2y2 utKIfD3i55NcsxNM2RKBUHkvQOPd4G+f5xUs74Gto5XvHmWcXa/3j2INGXV/iV3m 3FMK7NOVafp9LaWTcQVtiIWldwGpaFBAB80qna16Z8DPmD7I5eHBDvoif/IBbEVY SI2fKAunUN8yUKb4MKg2PnQZayVd0DGoLg2gJ16Biqi6lpVWwAdf7X4wV6rNeB7i J2puO58GCPCwWq3ob+uedKoO8LzoJk4gJ6ZXDfCPJcvyas1lTnJpFATUdmkmshmr syx4MMIdxYekkHjr+jqDDeWP9al7Pqj5R+7cN3KIqhJPpNw5FQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGDUkqfHNWbTm/+sZdoHPGC+nRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoFpGtskpGb2xclTUI3nHeH5x2e+K/+ca+hiPPFhacw7YRdts9xXyQ Kwt8VWt2udWkfriCDVK+6rvwppaXxnblAz8dSZrbqC1s9wiCQcrzZt7ygmlHNB9i 8nrjHZOdaI0MdaggCa7BtQDgPbhhXMtDdiuTJqXjlTC6GrV124ER8sbNDmq937M3 nNdJQs/v+6kUR7xeJ5Ra5RbhbDLIfwQsKNwY/1Tdk8w0wWIY5gx7F/Dil1DBXdlB L4K4yjvwKRpGh4GClBEDGRus7Egn7XRbUwwNfdhk08MVSYTY00fuRwCch3vynRTl UXCmj62ldPtCiJhfPyitRWEAFxlWBioP -----END CERTIFICATE-----Generated at Sat Jun 13 20:30:50 2026 by rpki-client