$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa File: 342be0e4-6b26-3229-8808-286812c3a7c1.roa (raw, json) Hash identifier: auBEZqvEgX/t0fBosy/NjbvF2VbeTmjO7sQxEpCCw3o= Subject key identifier: 2E:5E:05:38:95:E9:24:79:1F:99:B4:DB:F1:46:E6:7B:AF:AD:85:A9 Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Certificate serial: 010D0C9F4328584E0C1EDB5E6F2C8A9CB13C7180 Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 398203 IP address blocks: 2605:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:db:5e:6f:2c:8a:9c:b1:3c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=7fb81d85-6e8c-4f4d-8053-c471e89e0d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:cd:b3:1c:4f:d9:4e:d0:b8:5d:3e:23:77: db:c9:02:66:38:1b:b8:f5:1d:07:a1:21:cd:b5:57: bc:b2:a2:11:c5:c7:d5:05:ae:3f:b5:7c:0c:c0:c0: ea:89:a4:1b:29:b6:74:33:24:ca:30:3f:24:e5:31: 18:57:63:29:b5:3b:2b:c8:ed:f9:48:3a:bc:5b:6e: 04:9f:81:04:4b:67:79:08:15:ca:ff:d6:7d:79:7a: 0b:34:70:e2:86:0c:3b:60:89:b8:be:3b:4c:d4:fa: 32:31:59:e8:d4:da:cf:a8:86:4c:bc:eb:c5:99:52: 16:91:51:a2:da:82:8f:2c:02:fa:a1:4a:20:96:2b: 2b:61:41:58:00:6c:15:bb:b2:8d:b2:32:a1:4e:7e: 00:63:d1:41:65:86:e6:6f:7e:d5:62:20:36:fd:7c: 6e:d3:51:6f:8f:58:72:a4:e4:8d:6e:c6:d6:19:69: 50:f3:c1:f5:fe:9c:d2:20:21:47:88:64:5c:8f:1d: 7c:85:22:57:8c:6a:93:3b:59:e4:03:da:34:d8:05: 7c:67:5b:0e:5a:dc:9f:a4:ad:72:67:e4:fd:cf:40: 8f:67:d7:11:ce:73:c3:7b:92:35:f0:74:46:8f:2b: 93:60:b1:35:6d:c9:45:3b:28:c8:c2:3c:29:aa:0c: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5E:05:38:95:E9:24:79:1F:99:B4:DB:F1:46:E6:7B:AF:AD:85:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/342be0e4-6b26-3229-8808-286812c3a7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl X509v3 Authority Key Identifier: keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer sbgp-ipAddrBlock: critical IPv6: 2605:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:35:8e:20:10:1c:50:59:03:fc:93:08:cc:7f:47:ce:ec:bb: f8:97:3c:ea:c6:81:6e:9b:a1:e1:81:6e:12:e2:ae:cd:d0:6b: ba:39:32:f7:9d:4c:c1:ff:45:87:fd:74:2b:22:76:e0:4b:32: f6:15:22:c9:ae:17:29:96:70:59:d9:f4:b9:4e:40:2e:41:a7: cb:65:fc:96:e3:16:62:aa:56:80:15:64:df:69:aa:61:3e:4a: fa:1d:66:81:99:6b:af:cc:b9:c5:97:1c:b1:3d:6e:39:f1:96: 48:f5:2a:7b:56:ab:55:10:8f:d8:e2:52:84:b0:00:dc:69:a2: 83:1c:37:a2:0a:74:1a:23:2f:8e:1e:91:f5:96:f0:c8:43:e0: 11:04:88:4e:d1:3f:b3:4b:2d:86:34:ab:f3:54:9e:8f:44:59: 01:d9:d5:1c:6a:8d:9c:81:59:47:4f:ab:59:1d:90:ac:74:b6: cd:6b:31:29:dd:3e:a0:77:b6:52:59:65:37:5a:53:c5:c4:1f: 19:3b:ad:49:18:b1:bc:0e:99:b2:33:84:8c:89:29:03:f9:ce: 22:1b:2e:15:9f:ff:2e:71:9a:d5:1b:6e:aa:32:ea:41:90:2b: f4:bb:79:9c:28:31:05:8c:39:e8:cf:12:b4:13:84:d5:ae:49: bb:1f:da:62 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4MHttebyyKnLE8cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2YTRlYzMtYTNiNS00ZDcyLWJlZTItZjU4YzNjZGUw MWExMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk N2ZiODFkODUtNmU4Yy00ZjRkLTgwNTMtYzQ3MWU4OWUwZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug7NsxxP2U7QuF0+I3fbyQJmOBu49R0HoSHN tVe8sqIRxcfVBa4/tXwMwMDqiaQbKbZ0MyTKMD8k5TEYV2MptTsryO35SDq8W24E n4EES2d5CBXK/9Z9eXoLNHDihgw7YIm4vjtM1PoyMVno1NrPqIZMvOvFmVIWkVGi 2oKPLAL6oUoglisrYUFYAGwVu7KNsjKhTn4AY9FBZYbmb37VYiA2/Xxu01Fvj1hy pOSNbsbWGWlQ88H1/pzSICFHiGRcjx18hSJXjGqTO1nkA9o02AV8Z1sOWtyfpK1y Z+T9z0CPZ9cRznPDe5I18HRGjyuTYLE1bclFOyjIwjwpqgykzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC5eBTiV6SR5H5m02/FG5nuvrYWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iODZh NGVjMy1hM2I1LTRkNzItYmVlMi1mNThjM2NkZTAxYTEvMzQyYmUwZTQtNmIyNi0z MjI5LTg4MDgtMjg2ODEyYzNhN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjg2YTRlYzMtYTNiNS00ZDcyLWJl ZTItZjU4YzNjZGUwMWExL2I4NmE0ZWMzLWEzYjUtNGQ3Mi1iZWUyLWY1OGMzY2Rl MDFhMS5jcmwwHwYDVR0jBBgwFoAU3fYJlReLt0punKrfsGmFOCZwCxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iODZhNGVjMy1hM2I1LTRkNzItYmVlMi1mNThj M2NkZTAxYTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7NY4gEBxQWQP8kwjMf0fO7Lv4lzzqxoFum6HhgW4S4q7N0Gu6OTL3 nUzB/0WH/XQrInbgSzL2FSLJrhcplnBZ2fS5TkAuQafLZfyW4xZiqlaAFWTfaaph Pkr6HWaBmWuvzLnFlxyxPW458ZZI9Sp7VqtVEI/Y4lKEsADcaaKDHDeiCnQaIy+O HpH1lvDIQ+ARBIhO0T+zSy2GNKvzVJ6PRFkB2dUcao2cgVlHT6tZHZCsdLbNazEp 3T6gd7ZSWWU3WlPFxB8ZO61JGLG8DpmyM4SMiSkD+c4iGy4Vn/8ucZrVG26qMupB kCv0u3mcKDEFjDnozxK0E4TVrkm7H9pi -----END CERTIFICATE-----Generated at Sat Jun 13 21:39:48 2026 by rpki-client