$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa File: a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa (raw, json) Hash identifier: 3CSkMdveRVC1YM9yQ7qYY9A+x2Vu/3xRJdWCHnjk9fw= Subject key identifier: 4E:B8:6F:76:14:7C:88:A2:5E:E4:11:44:73:D5:55:65:96:38:69:01 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584E1CDEE360ECC35AAE2F775010 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa Signing time: Tue 09 Jun 2026 09:00:13 +0000 ROA not before: Tue 09 Jun 2026 09:00:13 +0000 ROA not after: Mon 07 Sep 2026 09:00:13 +0000 asID: 55286 IP address blocks: 2607:4300:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1c:de:e3:60:ec:c3:5a:ae:2f:77:50:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 9 09:00:13 2026 GMT Not After : Sep 7 09:00:13 2026 GMT Subject: CN=7b91f626-b562-49f7-a86e-88c0e474d576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:4c:39:5d:72:78:e8:2b:de:08:82:61:c0: 2d:30:aa:c8:4e:49:af:fc:07:ca:3d:5d:a6:d3:b9: f0:9a:63:59:fe:dc:2b:73:3c:54:de:fa:42:00:b1: 50:16:8c:01:7a:91:1d:b9:d5:53:98:19:f7:8c:f5: a0:fd:43:7f:60:00:23:98:d8:d2:0c:ea:89:52:70: e5:e2:26:73:85:d9:4b:35:84:33:05:45:af:8e:c6: 39:8b:81:8b:29:9b:b9:40:e4:87:65:75:7b:e4:dd: 0e:68:3d:15:7d:80:4e:f3:b9:fc:84:a9:f7:71:fd: 56:d9:21:4d:03:c9:65:7c:a6:4a:8e:3f:2e:87:bb: bd:f0:b6:a9:83:3f:1f:49:d1:b3:69:07:7c:1e:fe: 83:e7:53:ae:1d:c8:88:f4:89:21:05:37:fe:1d:6b: 30:cf:2a:e1:03:ce:bb:76:08:0e:73:cd:91:db:11: fa:a1:02:d6:48:67:c1:68:28:88:a7:5e:0e:66:a2: 67:5c:20:96:8b:d0:ed:0f:61:83:e5:2c:28:f2:e2: 3f:ad:76:8d:26:d2:ad:49:94:41:7a:f8:c0:45:61: 43:5a:1d:71:c5:43:e3:9e:4e:39:81:a2:d1:67:2a: 7e:1e:56:73:87:91:25:30:84:85:90:02:8e:5a:c6: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B8:6F:76:14:7C:88:A2:5E:E4:11:44:73:D5:55:65:96:38:69:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a20625f9-47b6-3aa1-ad29-43e8283aa81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv6: 2607:4300:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:29:06:8e:4f:b0:59:8a:b1:b8:5f:44:74:4a:48:04:73:e6: 44:d0:68:b4:c4:0d:86:f4:b7:b3:1a:31:79:d1:49:59:e7:ac: 79:28:48:5a:ae:13:9a:16:57:27:c5:34:73:59:40:55:13:28: ee:52:b1:55:07:41:70:5c:bd:68:4a:cb:92:cb:71:76:fa:fe: a3:8b:2b:b9:3d:7b:c8:88:a1:d7:31:5d:a1:58:a1:ad:e3:9c: 7a:59:62:99:4c:9c:f4:1e:46:bc:b5:aa:8b:18:8f:57:28:51: fa:c7:b5:ff:d5:0c:e7:57:43:f7:3a:b6:d6:f2:bf:5e:37:6a: b3:68:52:e5:ac:9a:d2:43:f7:76:ff:5e:09:04:67:2c:d4:59: 20:45:14:c8:0f:30:ab:a8:6a:11:1e:5f:03:89:ef:f8:ea:d6: d6:68:a8:5e:af:d6:b4:1c:3b:69:d5:f2:db:84:26:7a:01:7c: 27:36:2d:bf:45:c8:41:0b:1a:11:16:ca:42:99:3f:6a:47:bd: 61:68:c2:de:1a:74:fe:80:e8:82:eb:c0:27:61:f0:67:51:42: f7:38:54:a5:42:95:ca:b2:ac:45:c3:9a:4d:58:56:03:83:e1: 86:da:21:13:dd:11:63:78:d6:2b:5c:14:34:1e:38:7e:26:f1: 53:99:7e:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4c3uNg7MNari93UBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDYwOTA5MDAxM1oXDTI2MDkwNzA5MDAxM1owLzEtMCsGA1UEAxMk N2I5MWY2MjYtYjU2Mi00OWY3LWE4NmUtODhjMGU0NzRkNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xMOV1yeOgr3giCYcAtMKrITkmv/AfKPV2m 07nwmmNZ/twrczxU3vpCALFQFowBepEdudVTmBn3jPWg/UN/YAAjmNjSDOqJUnDl 4iZzhdlLNYQzBUWvjsY5i4GLKZu5QOSHZXV75N0OaD0VfYBO87n8hKn3cf1W2SFN A8llfKZKjj8uh7u98Lapgz8fSdGzaQd8Hv6D51OuHciI9IkhBTf+HWswzyrhA867 dggOc82R2xH6oQLWSGfBaCiIp14OZqJnXCCWi9DtD2GD5Swo8uI/rXaNJtKtSZRB evjARWFDWh1xxUPjnk45gaLRZyp+HlZzh5ElMISFkAKOWsbVXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE64b3YUfIiiXuQRRHPVVWWWOGkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTIwNjI1ZjktNDdiNi0z YWExLWFkMjktNDNlODI4M2FhODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdDAAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4pBo5PsFmKsbhfRHRKSARz5kTQaLTEDYb0t7MaMXnRSVnnrHko SFquE5oWVyfFNHNZQFUTKO5SsVUHQXBcvWhKy5LLcXb6/qOLK7k9e8iIodcxXaFY oa3jnHpZYplMnPQeRry1qosYj1coUfrHtf/VDOdXQ/c6ttbyv143arNoUuWsmtJD 93b/XgkEZyzUWSBFFMgPMKuoahEeXwOJ7/jq1tZoqF6v1rQcO2nV8tuEJnoBfCc2 Lb9FyEELGhEWykKZP2pHvWFowt4adP6A6ILrwCdh8GdRQvc4VKVClcqyrEXDmk1Y VgOD4YbaIRPdEWN41itcFDQeOH4m8VOZfiI= -----END CERTIFICATE-----Generated at Sat Jun 13 21:38:03 2026 by rpki-client