$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa File: d0ee2888-029d-3033-aaf8-55220aa70a0a.roa (raw, json) Hash identifier: RGgItZazOhVzKphot8c18sVk6bpa/cOfL3ghBOKO60g= Subject key identifier: DF:24:BC:B4:F0:0F:90:F6:42:79:FD:A0:AF:94:65:3F:83:F1:23:AE Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584E104EDA3ADF687C7AA94DF800 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 16433 IP address blocks: 2605:f00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:da:3a:df:68:7c:7a:a9:4d:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=b509a97a-71fa-4080-8caa-9c17ef69caae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:c2:18:5f:65:15:7c:b6:b0:94:3c:2d:c7: e3:33:84:b3:f3:a4:d9:d3:7f:4c:4c:3c:d7:43:df: c9:be:48:44:d3:d7:08:26:0e:54:1d:bf:15:f2:8a: ca:24:0b:9d:e0:2b:b9:e8:bd:3a:3b:0e:42:4d:77: ab:cd:d3:da:56:71:a5:62:27:2a:d6:60:bb:ea:c8: 49:1b:d6:a1:0c:f0:d4:4f:2f:26:36:15:0a:b6:61: 90:ef:cf:a6:7a:cb:40:7a:d5:d6:88:2b:f7:72:ea: bf:8f:27:82:71:4a:bc:c2:cc:f1:01:6f:7f:e9:42: 84:19:e8:58:4a:1c:7f:ba:df:12:bc:51:4a:28:68: 3a:f4:29:d4:c4:c4:ab:d3:17:fc:82:d7:fe:a6:94: 07:52:94:68:a9:58:e7:37:f9:01:e6:31:c6:36:1d: 9f:ef:6e:a5:3a:63:c1:93:fe:41:96:c4:15:57:ba: 22:7c:9e:ac:ee:b3:df:6c:c8:f9:ef:16:93:5f:96: 61:a4:43:97:39:5c:ce:44:39:48:49:ca:ae:8b:05: ba:be:5b:37:73:d7:62:cb:55:b4:d1:93:82:ae:47: ef:25:b6:4e:fb:3c:dd:33:06:e6:8c:75:1b:01:92: 2c:b4:f8:31:12:85:21:75:48:4b:be:8b:09:89:35: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:BC:B4:F0:0F:90:F6:42:79:FD:A0:AF:94:65:3F:83:F1:23:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/d0ee2888-029d-3033-aaf8-55220aa70a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv6: 2605:f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2f:a5:8f:64:56:93:64:7b:bf:04:e3:50:ea:23:01:ed:ec: af:04:b6:f0:0a:14:77:29:ce:b6:a8:95:0a:e4:87:32:c0:31: bf:6e:98:72:49:2d:d4:2f:14:6b:2b:44:5e:a9:4d:54:40:3d: ab:66:12:5f:72:34:47:62:33:45:f3:93:6b:5a:6d:93:9d:fc: a5:6d:ae:34:d3:88:9b:b6:7c:7e:90:4f:6e:01:14:43:07:81: eb:fd:e8:ab:da:90:a6:fc:7a:37:f5:3e:e8:a7:e8:5f:d0:c7: d2:da:62:ef:10:fd:29:07:65:b5:15:a7:e8:58:95:a7:67:cf: 43:02:ac:60:74:a4:47:af:2c:e6:6a:e6:39:4f:f7:53:06:81: 90:f0:4f:18:39:f3:8f:fe:29:f9:a5:45:af:c3:05:71:b1:54: ff:28:a9:45:93:23:96:07:99:bd:7b:1c:8f:a9:26:c3:95:d2: 8d:05:35:27:14:65:07:b8:da:4f:f4:89:18:3b:da:8b:fb:ab: 56:e5:7b:6e:67:ba:bb:1a:84:fa:da:dc:09:de:03:39:af:ca: 39:4e:ae:4d:76:21:2c:87:1c:6e:84:20:91:8c:e3:c0:17:93: 47:e2:9e:a9:1e:3e:8f:83:49:f3:08:04:94:e2:c0:35:f3:42: d8:a5:f3:82 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4QTto632h8eqlN+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YjUwOWE5N2EtNzFmYS00MDgwLThjYWEtOWMxN2VmNjljYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaXCGF9lFXy2sJQ8LcfjM4Sz86TZ039MTDzX Q9/JvkhE09cIJg5UHb8V8orKJAud4Cu56L06Ow5CTXerzdPaVnGlYicq1mC76shJ G9ahDPDUTy8mNhUKtmGQ78+mestAetXWiCv3cuq/jyeCcUq8wszxAW9/6UKEGehY Shx/ut8SvFFKKGg69CnUxMSr0xf8gtf+ppQHUpRoqVjnN/kB5jHGNh2f726lOmPB k/5BlsQVV7oifJ6s7rPfbMj57xaTX5ZhpEOXOVzORDlIScquiwW6vls3c9diy1W0 0ZOCrkfvJbZO+zzdMwbmjHUbAZIstPgxEoUhdUhLvosJiTUZrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN8kvLTwD5D2Qnn9oK+UZT+D8SOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZDBlZTI4ODgtMDI5ZC0z MDMzLWFhZjgtNTUyMjBhYTcwYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUPADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4L6WPZFaTZHu/BONQ6iMB7eyvBLbwChR3Kc62qJUK5IcywDG/bphy SS3ULxRrK0ReqU1UQD2rZhJfcjRHYjNF85NrWm2Tnfylba4004ibtnx+kE9uARRD B4Hr/eir2pCm/Ho39T7op+hf0MfS2mLvEP0pB2W1FafoWJWnZ89DAqxgdKRHryzm auY5T/dTBoGQ8E8YOfOP/in5pUWvwwVxsVT/KKlFkyOWB5m9exyPqSbDldKNBTUn FGUHuNpP9IkYO9qL+6tW5XtuZ7q7GoT62twJ3gM5r8o5Tq5NdiEshxxuhCCRjOPA F5NH4p6pHj6Pg0nzCASU4sA180LYpfOC -----END CERTIFICATE-----Generated at Sat Jun 13 14:36:23 2026 by rpki-client