$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa File: 3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa (raw, json) Hash identifier: 3CBuxhvWu1xzOrxLrrlvyZEZyeSeBD1xqM8VqhWEEBE= Subject key identifier: 2B:06:F3:80:61:B6:14:3E:3D:5E:A2:C9:5F:B1:36:8C:44:49:11:CE Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584DDA55CD15FD9ACF8FF41192C0 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa Signing time: Sat 16 May 2026 13:00:31 +0000 ROA not before: Sat 16 May 2026 13:00:31 +0000 ROA not after: Fri 14 Aug 2026 13:00:31 +0000 asID: 77 IP address blocks: 2620:0:320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:da:55:cd:15:fd:9a:cf:8f:f4:11:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: May 16 13:00:31 2026 GMT Not After : Aug 14 13:00:31 2026 GMT Subject: CN=979d5c6c-45d1-405f-adb3-f67f7dd72de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:0d:b8:73:24:f2:d0:54:16:25:85:5c:e7: 6a:69:c0:6c:4a:44:5f:3e:20:c0:1a:a6:db:43:e2: cd:55:05:5a:94:14:2d:5e:61:c3:c5:78:92:da:5c: 20:0b:1f:5d:cd:85:4f:2c:9f:d5:76:b6:04:20:52: 41:fe:d7:6b:b2:72:78:f1:65:b1:1a:ca:a3:f5:0c: 25:88:d9:e2:e3:99:3e:db:7e:27:fd:4a:a1:17:3d: 3a:d4:62:03:0d:bb:10:95:bc:15:2b:c5:ae:26:b6: cd:40:3b:b3:1f:97:94:1c:88:ce:89:39:c5:0f:9f: 1a:ef:2b:a6:92:21:78:68:7f:fd:65:b1:ef:d6:fa: db:e5:72:88:d1:be:ee:24:60:8e:e7:d5:fb:71:76: f1:4f:02:80:cd:04:d0:02:f9:d7:9f:b4:19:65:c0: 75:c6:08:d5:e8:dc:1e:ce:d9:6c:0d:d9:d1:d1:34: c7:bc:06:2c:1e:9f:ee:c5:3a:c3:06:3f:5e:3d:8f: 0c:b1:c0:4c:10:a3:f3:49:ce:ed:7b:0d:29:e1:5a: c6:e0:ae:13:91:79:07:4e:a8:2b:4e:25:cc:31:fa: 2e:ad:73:d9:57:90:44:9e:a5:89:05:53:25:7b:af: bf:83:8a:cf:2e:ad:4d:12:56:7c:e3:ea:3b:3d:1c: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:F3:80:61:B6:14:3E:3D:5E:A2:C9:5F:B1:36:8C:44:49:11:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/3fb7cd4a-dfa1-32e1-a311-ab18aeb1b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d8:01:9f:79:8f:78:e7:a8:f8:ec:43:b3:db:9a:55:9d:47: cf:2e:c2:c4:b9:d4:e2:3d:a6:9c:20:79:15:97:cb:77:04:70: cc:d3:d8:29:c1:04:54:ae:b1:80:04:13:ca:a4:50:15:16:67: 60:53:1d:1d:dd:52:af:40:d0:a1:09:a1:c1:51:f0:a6:0c:e9: 50:88:68:40:7f:39:14:d4:6c:b1:59:01:3e:eb:3e:61:b8:11: b1:20:75:8e:41:70:c0:c2:3b:06:3d:4f:d9:a4:fe:bd:84:f2: 1b:5c:81:9a:0c:3b:f2:ce:75:3f:35:bc:24:b8:1a:00:52:cb: bf:39:a9:0a:d4:09:fa:9d:54:24:41:6c:32:ef:82:0e:1e:b9: 4b:4a:02:96:e4:fe:40:ad:13:80:b6:aa:bd:09:41:ba:30:2f: 5d:97:d3:f5:f8:b6:32:9c:e8:75:26:53:ae:50:59:40:b3:d9: 45:e3:08:fe:93:e6:c8:cf:1a:e1:d5:45:26:9b:1d:4f:22:12: e1:77:30:de:ba:b5:68:10:dc:d0:14:93:6c:f9:3b:70:06:7e: 04:90:ba:0e:62:9c:af:75:52:de:fd:63:67:c2:f3:74:64:95: 2b:ab:e5:20:12:02:3e:2b:22:50:e3:8a:ec:d4:13:3a:1e:40: c4:6f:8d:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3aVc0V/ZrPj/QRksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI2MDUxNjEzMDAzMVoXDTI2MDgxNDEzMDAzMVowLzEtMCsGA1UEAxMk OTc5ZDVjNmMtNDVkMS00MDVmLWFkYjMtZjY3ZjdkZDcyZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6MNuHMk8tBUFiWFXOdqacBsSkRfPiDAGqbb Q+LNVQValBQtXmHDxXiS2lwgCx9dzYVPLJ/VdrYEIFJB/tdrsnJ48WWxGsqj9Qwl iNni45k+234n/UqhFz061GIDDbsQlbwVK8WuJrbNQDuzH5eUHIjOiTnFD58a7yum kiF4aH/9ZbHv1vrb5XKI0b7uJGCO59X7cXbxTwKAzQTQAvnXn7QZZcB1xgjV6Nwe ztlsDdnR0TTHvAYsHp/uxTrDBj9ePY8MscBMEKPzSc7tew0p4VrG4K4TkXkHTqgr TiXMMfourXPZV5BEnqWJBVMle6+/g4rPLq1NElZ84+o7PRxc1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCsG84BhthQ+PV6iyV+xNoxESRHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvM2ZiN2NkNGEtZGZhMS0z MmUxLWEzMTEtYWIxOGFlYjFiMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXYAZ95j3jnqPjsQ7PbmlWdR88uwsS51OI9ppwgeRWXy3cEcMzT 2CnBBFSusYAEE8qkUBUWZ2BTHR3dUq9A0KEJocFR8KYM6VCIaEB/ORTUbLFZAT7r PmG4EbEgdY5BcMDCOwY9T9mk/r2E8htcgZoMO/LOdT81vCS4GgBSy785qQrUCfqd VCRBbDLvgg4euUtKApbk/kCtE4C2qr0JQbowL12X0/X4tjKc6HUmU65QWUCz2UXj CP6T5sjPGuHVRSabHU8iEuF3MN66tWgQ3NAUk2z5O3AGfgSQug5inK91Ut79Y2fC 83RklSur5SASAj4rIlDjiuzUEzoeQMRvjaw= -----END CERTIFICATE-----Generated at Sun Jun 14 00:21:16 2026 by rpki-client