$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa File: 935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json) Hash identifier: aN9EHsppuHP1OWQxI+pF2dJ8+iF69HBQ1Hqfl8co7o8= Subject key identifier: 1B:72:45:34:98:55:83:C8:54:E1:99:F5:1D:F5:85:78:77:BE:9F:4E Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584DEDE0961B1FB21D536EAD0780 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 33000 IP address blocks: 2605:fdc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:96:1b:1f:b2:1d:53:6e:ad:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=4441e63f-8074-4998-a705-163fa5c09c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:13:c4:9a:83:98:38:60:0f:fd:74:6b:97: 14:9c:c1:29:72:c6:bb:2e:43:68:48:b0:39:87:39: f5:02:83:00:56:08:33:76:87:bf:4a:13:e5:eb:16: f0:a2:6b:d5:7d:fd:56:97:fd:ab:62:4f:af:43:2d: e1:68:35:7b:bc:67:4d:88:0e:97:df:78:17:3c:87: f1:9d:39:43:98:77:33:fc:70:6d:3f:fa:23:52:57: 20:cc:f6:6a:1a:14:5b:d4:d0:3f:54:de:9c:8f:15: e5:74:31:d5:b8:18:e6:e2:8b:30:12:3f:4a:34:b5: d9:1c:ca:a3:e7:a5:66:2d:8f:15:02:95:c7:17:69: 1f:91:e7:a4:bf:cb:3a:68:7a:81:32:f0:56:7e:1b: ab:03:2c:37:aa:73:4b:a9:9a:d2:fa:1f:92:b9:02: b3:55:b1:ca:cf:c4:99:b3:f7:c5:c6:61:17:69:ca: 93:d2:00:6a:4b:99:4f:ee:47:68:bc:8b:f4:da:ca: ae:56:72:28:14:a6:55:e4:f2:e1:50:a1:35:32:ca: 19:99:ba:1c:e8:51:bb:0e:7c:f2:cb:d7:4e:d0:09: e1:8a:a5:10:23:f9:31:ea:6f:2f:63:f7:45:bf:5e: 02:85:10:63:d3:d9:6d:fd:c3:2a:f8:0a:c9:20:b0: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:45:34:98:55:83:C8:54:E1:99:F5:1D:F5:85:78:77:BE:9F:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:21:ff:00:81:d7:2e:db:b0:b0:c1:40:41:49:17:e9:74:5f: cd:4f:f1:db:03:09:60:65:a1:75:6f:b7:d0:8d:f3:b4:11:34: 55:de:a2:27:a8:65:26:0d:48:92:e5:4a:bc:bc:97:49:38:fb: 44:00:c0:46:4c:60:43:6f:03:db:db:8b:f9:e6:ed:e1:1e:69: 6f:fb:c2:2d:8e:92:b8:c5:92:f0:29:7d:14:1a:78:e2:f1:c9: 68:cb:62:da:93:8f:24:5b:68:a6:9d:30:f1:e7:fc:ca:27:c6: f9:7b:21:bc:18:a2:ed:a2:09:ea:9b:f2:23:bf:d3:ff:a9:92: 28:df:2b:58:0b:57:e2:0a:56:ba:bc:4b:1c:34:af:a1:5d:c4: 31:4b:b8:fc:b4:20:2a:7c:11:b9:40:8e:5d:35:ea:76:db:d1: ec:33:c3:13:3a:61:f2:e5:f4:a8:de:00:43:29:7c:4b:df:c0: d8:5e:03:bb:05:63:29:35:57:9f:39:ed:ee:dd:25:39:61:9e: f6:54:f4:77:02:55:75:18:fe:77:be:79:ad:38:3f:b2:d8:f1: 1f:62:99:4a:11:4e:07:8a:44:7d:78:48:8a:06:9d:e0:b5:67: 64:6a:c3:c5:f6:1a:99:a8:ee:68:01:66:c2:26:d7:55:a1:1c: ff:54:e6:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3t4JYbH7IdU26tB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NDQ0MWU2M2YtODA3NC00OTk4LWE3MDUtMTYzZmE1YzA5YzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1icTxJqDmDhgD/10a5cUnMEpcsa7LkNoSLA5 hzn1AoMAVggzdoe/ShPl6xbwomvVff1Wl/2rYk+vQy3haDV7vGdNiA6X33gXPIfx nTlDmHcz/HBtP/ojUlcgzPZqGhRb1NA/VN6cjxXldDHVuBjm4oswEj9KNLXZHMqj 56VmLY8VApXHF2kfkeekv8s6aHqBMvBWfhurAyw3qnNLqZrS+h+SuQKzVbHKz8SZ s/fFxmEXacqT0gBqS5lP7kdovIv02squVnIoFKZV5PLhUKE1MsoZmboc6FG7Dnzy y9dO0AnhiqUQI/kx6m8vY/dFv14ChRBj09lt/cMq+ArJILBcZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBtyRTSYVYPIVOGZ9R31hXh3vp9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFIf8Agdcu27CwwUBBSRfpdF/NT/HbAwlgZaF1b7fQjfO0ETRV3qIn qGUmDUiS5Uq8vJdJOPtEAMBGTGBDbwPb24v55u3hHmlv+8ItjpK4xZLwKX0UGnji 8cloy2Lak48kW2imnTDx5/zKJ8b5eyG8GKLtognqm/Ijv9P/qZIo3ytYC1fiCla6 vEscNK+hXcQxS7j8tCAqfBG5QI5dNep229HsM8MTOmHy5fSo3gBDKXxL38DYXgO7 BWMpNVefOe3u3SU5YZ72VPR3AlV1GP53vnmtOD+y2PEfYplKEU4HikR9eEiKBp3g tWdkasPF9hqZqO5oAWbCJtdVoRz/VOaw -----END CERTIFICATE-----Generated at Sat Jun 13 15:38:21 2026 by rpki-client