$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/706b4db8-fc63-33bf-b4f5-b238f5d6b79a.roa File: 706b4db8-fc63-33bf-b4f5-b238f5d6b79a.roa (raw, json) Hash identifier: c6v3rHwRQpnLZDwWP6OaHEAbzG5FzX31B40vaARiaKI= Subject key identifier: 49:E3:65:6C:C2:DB:99:AC:D2:56:BE:66:74:5C:90:F6:69:8D:4E:FD Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584DE84B2FDED8FFC5E4FED1CF80 Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/706b4db8-fc63-33bf-b4f5-b238f5d6b79a.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 55236 IP address blocks: 2604:6240::/32 maxlen: 126 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:2f:de:d8:ff:c5:e4:fe:d1:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=2a7f3553-89cb-4d23-a15e-18fb6e32e256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:a3:21:42:05:b3:7f:d9:1c:f7:dd:7c:1f: 26:b1:a2:7e:29:04:1f:f1:52:ce:6c:f7:74:0c:96: 58:05:ad:3b:9c:ed:f2:1f:1e:3f:42:23:9a:3b:76: ce:56:2d:f7:ba:11:30:a0:34:7b:17:12:2e:ad:ed: e3:06:a9:05:38:b0:a1:c7:fe:08:0d:91:01:f8:ef: 97:ec:30:72:c5:e3:53:87:0d:95:c9:87:23:a3:97: 75:57:e7:46:4b:40:80:a1:2b:ea:e5:34:78:c5:26: 02:29:ee:ae:7b:46:fd:3e:53:8e:cb:5a:d8:1c:17: 62:24:b7:dc:02:a2:b7:4c:2b:0c:fe:82:ef:c7:05: 9c:cb:ea:ec:ab:6b:45:7b:24:d3:5d:c2:2f:d7:54: 0a:76:35:1f:95:93:2d:0b:4f:71:bb:4c:2e:aa:dc: a6:c8:47:73:4b:d2:19:eb:73:08:23:eb:af:07:18: 5f:f2:6a:54:4c:52:a6:6b:e6:6c:19:7e:62:92:8c: bb:bd:fe:72:62:61:41:1f:a3:d5:cd:96:bf:46:3c: 59:d5:4f:48:11:dc:61:3c:64:18:37:48:88:2f:6b: 6f:a5:7b:eb:7c:d4:20:a9:9b:6f:ba:95:68:13:fb: 33:e1:a1:d3:2e:80:69:aa:d9:2a:35:27:7a:05:ca: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:65:6C:C2:DB:99:AC:D2:56:BE:66:74:5C:90:F6:69:8D:4E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/706b4db8-fc63-33bf-b4f5-b238f5d6b79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv6: 2604:6240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c8:b3:f8:d9:e7:ed:fe:e0:ee:ce:ea:af:e5:50:f8:27:55: 00:da:f4:78:cc:a8:0c:37:69:52:96:a8:fa:8f:14:ea:a1:6a: ed:25:c9:b8:2a:91:f2:a2:f0:19:72:05:62:36:ac:48:31:39: 9e:54:94:c6:e0:7a:d7:4f:ff:b7:c4:4e:56:e7:bb:6b:93:31: c2:45:86:df:4f:43:f1:47:18:e6:25:db:b1:b5:ea:0a:f8:4a: 9d:37:58:09:a0:a0:fb:4a:d9:e6:b4:29:da:92:6f:86:25:76: b6:47:41:ea:c1:df:f2:13:45:e6:41:02:d6:d8:88:cf:0c:af: 8a:f7:7d:8b:aa:0e:0c:7c:e8:f9:16:c4:67:b7:2c:4f:dc:e0: 59:d3:b1:70:37:35:80:95:99:bd:88:ba:2b:54:b2:e2:a4:bf: 75:55:4b:a1:b2:38:ed:02:ff:e6:17:1e:ef:03:9f:c4:8e:eb: 3f:f6:45:6b:fb:14:14:d4:35:94:de:11:ed:b5:c1:32:04:8a: 0f:c7:f1:d6:b0:ca:86:f1:e1:e5:30:fb:20:40:9e:6a:e9:82: e3:d1:74:96:18:b0:07:eb:89:e6:f0:5b:7a:10:96:d3:e7:b9: f2:99:2c:8d:1c:5e:40:77:8a:3f:c6:30:fc:4b:8f:b2:fa:93: 54:b7:bd:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3oSy/e2P/F5P7Rz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk MmE3ZjM1NTMtODljYi00ZDIzLWExNWUtMThmYjZlMzJlMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpOjIUIFs3/ZHPfdfB8msaJ+KQQf8VLObPd0 DJZYBa07nO3yHx4/QiOaO3bOVi33uhEwoDR7FxIure3jBqkFOLChx/4IDZEB+O+X 7DByxeNThw2VyYcjo5d1V+dGS0CAoSvq5TR4xSYCKe6ue0b9PlOOy1rYHBdiJLfc AqK3TCsM/oLvxwWcy+rsq2tFeyTTXcIv11QKdjUflZMtC09xu0wuqtymyEdzS9IZ 63MII+uvBxhf8mpUTFKma+ZsGX5ikoy7vf5yYmFBH6PVzZa/RjxZ1U9IEdxhPGQY N0iIL2tvpXvrfNQgqZtvupVoE/sz4aHTLoBpqtkqNSd6BcrhXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEnjZWzC25ms0la+ZnRckPZpjU79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvNzA2YjRkYjgtZmM2My0z M2JmLWI0ZjUtYjIzOGY1ZDZiNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRiQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBYyLP42eft/uDuzuqv5VD4J1UA2vR4zKgMN2lSlqj6jxTqoWrtJcm4 KpHyovAZcgViNqxIMTmeVJTG4HrXT/+3xE5W57trkzHCRYbfT0PxRxjmJduxteoK +EqdN1gJoKD7StnmtCnakm+GJXa2R0Hqwd/yE0XmQQLW2IjPDK+K932Lqg4MfOj5 FsRntyxP3OBZ07FwNzWAlZm9iLorVLLipL91VUuhsjjtAv/mFx7vA5/Ejus/9kVr +xQU1DWU3hHttcEyBIoPx/HWsMqG8eHlMPsgQJ5q6YLj0XSWGLAH64nm8Ft6EJbT 57nymSyNHF5Ad4o/xjD8S4+y+pNUt71z -----END CERTIFICATE-----Generated at Sun Jun 14 02:30:45 2026 by rpki-client