$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa File: f871407c-c2bc-3d6c-8715-048a48274b19.roa (raw, json) Hash identifier: bem2Z5lS4WfDYqyrkbb6iBIwMjJY2kDRpVSiKfASFFo= Subject key identifier: 6C:C1:05:26:62:B6:F9:00:B5:76:85:28:F4:D3:B6:31:51:2B:1C:23 Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Certificate serial: 010D0C9F4328584E210EFA403DAEB171FB6FE100 Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 21693 IP address blocks: 2620:18b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:fa:40:3d:ae:b1:71:fb:6f:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=cc1a261e-1fa4-4365-b828-7f2aaab38337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:bb:54:d2:77:3c:05:c9:4f:39:66:38:a5: 11:28:c0:c4:79:e6:76:da:3d:54:8f:16:f0:6d:6a: 2a:24:a4:e9:08:ba:1d:2b:60:cd:21:bd:68:2a:0d: 46:86:7b:c8:67:09:f7:59:63:d3:03:13:06:12:12: 45:cd:82:bb:46:07:61:e1:54:d2:fa:c7:cb:c8:fb: 75:1f:9d:06:3d:64:4e:a3:4a:3b:3f:1d:08:0c:d8: bc:16:a2:93:5d:46:e1:9b:9f:a1:83:77:c5:3d:89: 33:dc:72:2b:c5:1e:83:57:6a:8d:a4:31:a8:60:52: 6c:4b:e9:1a:c0:3d:59:89:2e:23:19:88:72:59:67: 39:17:f3:30:d6:fd:4c:a2:47:87:ca:d1:0c:23:5b: ab:52:51:35:a4:b1:cb:7f:0f:e2:94:74:84:bb:4d: 16:a9:39:5b:51:51:39:ea:c4:bf:f4:52:ed:0e:b8: 77:5c:ee:60:a4:5d:e7:e0:6d:78:f6:f0:a6:2e:05: cf:de:fa:b6:9a:66:e1:e4:ae:e7:77:33:45:97:aa: 00:b6:a4:76:ca:90:3d:01:eb:18:d7:58:c2:d7:47: c5:e4:32:40:7c:b3:43:5a:8e:46:70:7c:7a:b6:3c: ba:6f:02:ac:42:6c:c9:03:0e:93:a2:d9:30:08:dd: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C1:05:26:62:B6:F9:00:B5:76:85:28:F4:D3:B6:31:51:2B:1C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/f871407c-c2bc-3d6c-8715-048a48274b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl X509v3 Authority Key Identifier: keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer sbgp-ipAddrBlock: critical IPv6: 2620:18b::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:86:08:f8:f0:d3:58:ab:15:6d:fb:fa:f6:b1:f7:45:bd:96: d2:f6:46:e9:eb:a0:8b:23:02:2b:08:09:71:f3:c8:d9:50:4e: 24:c8:04:dd:89:21:c8:e1:06:0a:b2:16:8a:e6:50:9e:17:b1: b2:5b:58:99:14:73:1b:ef:1e:b2:e4:2a:82:3f:e7:01:35:1c: 87:8b:dd:3a:a9:49:35:6e:f7:16:7f:e1:dd:ba:5d:b1:e6:bb: 5e:39:a4:d2:41:db:7a:b4:64:62:f0:99:cb:a3:4e:d6:d7:42: e3:00:53:32:ab:74:49:bf:e8:cb:6f:bd:ab:23:18:1d:6e:94: 65:fc:91:1d:43:32:69:f8:4c:7c:b1:4a:23:86:ab:78:2b:e6: 27:af:3b:47:8b:25:34:e1:52:f7:fd:e3:4c:ed:28:2f:80:c2: 17:52:11:32:cc:75:e4:bd:a4:5e:94:ae:6d:1e:08:12:b4:55: 62:34:ce:48:11:55:b6:18:94:ba:b5:36:41:52:17:bf:8d:90: 3d:b1:68:bc:ae:d1:23:53:aa:a6:43:e6:69:9e:69:0c:ff:62: 66:0d:e8:26:3a:4c:13:08:9b:0f:8d:d6:a9:23:2a:46:95:ad: 91:4f:0b:8a:cc:18:e8:5d:44:d6:ca:bd:05:5f:22:fc:a3:37: e0:a1:e5:99 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4hDvpAPa6xcftv4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5ZTM2NzQtYWNjNi00ODU4LWIwZjEtN2EyZGFhYWVk MTE5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk Y2MxYTI2MWUtMWZhNC00MzY1LWI4MjgtN2YyYWFhYjM4MzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimu7VNJ3PAXJTzlmOKURKMDEeeZ22j1Ujxbw bWoqJKTpCLodK2DNIb1oKg1GhnvIZwn3WWPTAxMGEhJFzYK7Rgdh4VTS+sfLyPt1 H50GPWROo0o7Px0IDNi8FqKTXUbhm5+hg3fFPYkz3HIrxR6DV2qNpDGoYFJsS+ka wD1ZiS4jGYhyWWc5F/Mw1v1MokeHytEMI1urUlE1pLHLfw/ilHSEu00WqTlbUVE5 6sS/9FLtDrh3XO5gpF3n4G149vCmLgXP3vq2mmbh5K7ndzNFl6oAtqR2ypA9AesY 11jC10fF5DJAfLNDWo5GcHx6tjy6bwKsQmzJAw6TotkwCN2T+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGzBBSZitvkAtXaFKPTTtjFRKxwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMjll MzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJkYWFhZWQxMTkvZjg3MTQwN2MtYzJiYy0z ZDZjLTg3MTUtMDQ4YTQ4Mjc0YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTI5ZTM2NzQtYWNjNi00ODU4LWIw ZjEtN2EyZGFhYWVkMTE5L2EyOWUzNjc0LWFjYzYtNDg1OC1iMGYxLTdhMmRhYWFl ZDExOS5jcmwwHwYDVR0jBBgwFoAUml1tM1p2OnrYfTyiJ/n5DI1sO48wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMjllMzY3NC1hY2M2LTQ4NTgtYjBmMS03YTJk YWFhZWQxMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJiABizBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAthgj48NNYqxVt+/r2sfdFvZbS9kbp66CLIwIrCAlx88jZUE4kyATd iSHI4QYKshaK5lCeF7GyW1iZFHMb7x6y5CqCP+cBNRyHi906qUk1bvcWf+Hdul2x 5rteOaTSQdt6tGRi8JnLo07W10LjAFMyq3RJv+jLb72rIxgdbpRl/JEdQzJp+Ex8 sUojhqt4K+YnrztHiyU04VL3/eNM7SgvgMIXUhEyzHXkvaRelK5tHggStFViNM5I EVW2GJS6tTZBUhe/jZA9sWi8rtEjU6qmQ+ZpnmkM/2JmDegmOkwTCJsPjdapIypG la2RTwuKzBjoXUTWyr0FXyL8ozfgoeWZ -----END CERTIFICATE-----Generated at Sat Jun 13 21:37:25 2026 by rpki-client