$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa File: 936b2aa5-beb7-33e5-8227-bafa65bda840.roa (raw, json) Hash identifier: 1LYdcZyF21BD20YnocGxltPoDsmq/Vj6x+v+9h9BEpw= Subject key identifier: E3:AF:5C:96:26:7F:FF:A9:19:7B:1D:4F:96:9B:13:AA:13:7F:12:A9 Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74 Certificate serial: 010D0C9F4328584DEDE0B0B24793F8A211743FA0 Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 16509 IP address blocks: 2620:1d8::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b0:b2:47:93:f8:a2:11:74:3f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=01bd676b-a1fc-4375-91d4-0e6f891ca914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:da:70:2d:cc:34:6d:bd:06:f6:23:04:54: 7f:16:7a:fe:fa:d7:3b:61:cf:27:3a:df:3a:78:6e: 02:3a:5a:fd:dc:63:0a:db:fc:b4:16:ff:fb:dd:89: ad:73:1c:18:31:b8:22:98:3e:80:bd:73:24:54:de: 36:28:22:2c:6e:67:34:97:db:41:1a:3e:56:8c:0d: 2a:03:b1:c8:a9:5d:7a:c9:74:e7:2f:56:e1:3f:50: a2:5b:93:5f:25:90:fd:33:4d:e2:56:cc:16:76:9c: 75:99:25:23:98:1a:98:49:46:38:57:0c:b5:0e:b4: 21:08:17:8c:5d:f9:33:04:68:f9:c6:94:fc:9c:88: 66:99:40:44:5c:b7:19:c5:0d:1c:97:9f:16:b9:6e: ba:4d:62:69:fd:ed:fd:87:82:ae:3c:12:8c:71:a4: 8f:ca:02:c7:04:d2:a1:4c:97:56:f2:34:8a:77:4b: 47:e4:60:f1:a4:c6:fa:be:9f:e6:6b:17:5b:d3:c4: ca:99:f4:18:f5:2d:e3:3f:25:37:01:8e:b8:bf:89: bb:43:35:15:4c:71:9b:cf:c2:58:88:c0:a2:2c:2f: 29:e1:bc:a6:1e:5c:7a:30:63:1a:7f:94:63:05:57: 81:dc:e0:a4:c2:03:48:64:1c:46:c2:6b:72:04:2b: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:5C:96:26:7F:FF:A9:19:7B:1D:4F:96:9B:13:AA:13:7F:12:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl X509v3 Authority Key Identifier: keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d8::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6a:fe:c4:01:dd:ca:15:e4:5f:f3:8f:57:05:72:27:31:91: 80:68:4f:58:2a:b5:04:26:8a:a8:f4:0d:8e:9a:af:fb:30:c3: d4:fe:60:77:ef:f4:43:75:fa:bf:6b:8e:3d:09:13:bd:85:a2: 15:e3:98:6d:a4:31:a1:a8:8d:01:fe:38:9b:3e:1c:ee:01:ac: 9c:69:d8:64:3c:50:ba:67:fb:c3:a0:75:ab:c4:c3:12:2c:e4: b1:fc:7a:0f:82:b3:70:93:53:f0:e4:40:f8:ce:4c:9b:65:c1: 5e:98:38:63:c6:21:da:46:bb:03:ce:95:74:04:46:9b:86:7f: 8a:18:51:81:41:b1:76:5b:a6:c8:d3:c6:93:d7:f1:23:a8:4a: 05:05:45:ae:02:77:4f:eb:42:b2:5f:f2:fa:9c:57:68:e5:23: 8e:1f:53:52:7b:ef:85:fa:26:13:eb:86:7e:61:f1:a2:ca:7a: 0e:e7:03:1e:b3:53:bc:47:7a:80:f2:9c:bc:43:a5:65:14:ee: 01:83:35:22:21:47:d3:f0:c0:db:d3:2a:b9:ef:de:ae:f5:eb: f0:9a:b8:1e:73:7d:5e:58:39:25:d4:86:79:42:01:4f:ad:25: be:14:85:dc:7d:2f:1c:5d:fe:7a:cc:7a:50:aa:f1:7a:6b:34: 08:7d:94:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4LCyR5P4ohF0P6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl Yzc0MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk MDFiZDY3NmItYTFmYy00Mzc1LTkxZDQtMGU2Zjg5MWNhOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeDacC3MNG29BvYjBFR/Fnr++tc7Yc8nOt86 eG4COlr93GMK2/y0Fv/73YmtcxwYMbgimD6AvXMkVN42KCIsbmc0l9tBGj5WjA0q A7HIqV16yXTnL1bhP1CiW5NfJZD9M03iVswWdpx1mSUjmBqYSUY4Vwy1DrQhCBeM XfkzBGj5xpT8nIhmmUBEXLcZxQ0cl58WuW66TWJp/e39h4KuPBKMcaSPygLHBNKh TJdW8jSKd0tH5GDxpMb6vp/maxdb08TKmfQY9S3jPyU3AY64v4m7QzUVTHGbz8JY iMCiLC8p4bymHlx6MGMaf5RjBVeB3OCkwgNIZBxGwmtyBCtRwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOvXJYmf/+pGXsdT5abE6oTfxKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvOTM2YjJhYTUtYmViNy0z M2U1LTgyMjctYmFmYTY1YmRhODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2 Y2UyMWVjNzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiAB2AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpq/sQB3coV5F/zj1cFcicxkYBoT1gqtQQmiqj0DY6ar/sww9T+ YHfv9EN1+r9rjj0JE72FohXjmG2kMaGojQH+OJs+HO4BrJxp2GQ8ULpn+8OgdavE wxIs5LH8eg+Cs3CTU/DkQPjOTJtlwV6YOGPGIdpGuwPOlXQERpuGf4oYUYFBsXZb psjTxpPX8SOoSgUFRa4Cd0/rQrJf8vqcV2jlI44fU1J774X6JhPrhn5h8aLKeg7n Ax6zU7xHeoDynLxDpWUU7gGDNSIhR9PwwNvTKrnv3q716/CauB5zfV5YOSXUhnlC AU+tJb4Uhdx9Lxxd/nrMelCq8XprNAh9lPI= -----END CERTIFICATE-----Generated at Sat Jun 13 10:02:43 2026 by rpki-client