$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa File: a656001b-bd35-370a-bb4e-55d8a1d6df08.roa (raw, json) Hash identifier: Kn5dSa9VOjYJUQPk+OVrsJfe8t7XUXd/BpxPDgTnoVg= Subject key identifier: 3A:DA:48:0C:EA:68:AA:9D:8E:21:E2:5E:E2:1E:62:BE:A3:FE:0D:07 Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584E11B42C02EC59BD10A9BC8C40 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 16740 IP address blocks: 2602:f5c1:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:2c:02:ec:59:bd:10:a9:bc:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=86e0b483-961c-4623-a493-864dcd8840da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:89:1c:5f:2e:c9:1a:44:42:14:62:6c:9b: a1:aa:d5:cf:5c:45:d7:4e:7b:b2:60:5a:c1:5b:58: 71:65:44:32:a0:87:4c:ac:f9:83:a4:93:45:e2:0d: 95:5d:28:3d:0e:09:f3:05:08:5b:dc:bc:a6:f8:eb: ae:0c:76:53:b0:59:ea:34:79:34:a5:13:07:c1:62: 1f:7c:52:25:2f:ac:ca:74:0a:dc:b3:16:2b:d3:6c: 8e:c2:5a:2b:54:f0:fc:66:6a:9c:7e:b6:8d:ea:40: 7d:fc:53:bd:7b:a6:8e:5b:84:fa:24:d0:e9:84:14: c3:95:86:70:95:df:31:84:97:f5:28:03:af:a0:90: c1:40:db:2d:5a:42:ba:e4:48:a8:ea:1d:c2:24:02: f1:2c:5e:39:27:da:34:dd:66:94:8e:ed:94:eb:ed: 15:f3:fc:7d:66:4d:e9:0a:75:d8:cc:af:69:e7:e3: 47:49:c5:2f:0c:0b:f1:95:73:23:6b:c9:60:c5:f7: d2:89:5c:63:7f:72:aa:76:3b:33:0a:dc:a7:ae:db: 2a:9f:6c:ee:2e:1b:68:6d:62:15:41:58:cd:e7:85: 71:72:af:49:73:e2:69:22:16:98:d2:6d:99:04:fb: e3:5c:f7:ff:1f:2f:84:a7:46:cd:bb:22:fe:92:d2: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:48:0C:EA:68:AA:9D:8E:21:E2:5E:E2:1E:62:BE:A3:FE:0D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/a656001b-bd35-370a-bb4e-55d8a1d6df08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5c1:7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:97:83:9d:4e:34:10:b2:bf:e1:4f:84:b0:db:ef:46:a8:a8: e1:1e:34:ff:09:e7:4a:8c:92:7f:4b:02:89:8d:e1:33:06:9e: 8e:55:c8:75:60:80:02:5b:0a:06:7a:d3:5f:3d:c6:d0:21:f2: b3:fa:15:45:dc:19:e1:94:1e:6a:c8:73:9b:d0:64:7c:50:0f: c8:69:0d:94:81:cc:ee:c8:ff:b1:7a:40:f6:9c:69:60:86:7d: 69:84:d0:87:f8:54:c1:75:c0:db:8c:53:43:01:e7:b3:97:76: 50:2f:7e:d5:23:82:c5:7f:43:fe:e5:a6:9f:0c:73:1a:9d:61: e3:21:9f:06:04:68:ae:7e:46:34:16:3b:fc:f5:2b:fd:50:1a: f4:9f:20:06:de:1a:5c:15:63:27:ef:a4:43:95:0b:ed:46:cf: fa:cd:bd:5e:2b:94:7d:22:16:a6:2e:97:2c:32:b6:42:57:34: 8e:8f:14:f0:e1:cd:2c:d4:07:fe:fe:ea:a1:65:8f:5d:98:99: 96:01:68:93:32:fe:41:a2:86:99:94:e9:be:40:a1:21:58:51: 8d:ee:3b:dc:93:10:7c:e1:e6:5a:16:94:1d:f7:7e:46:a5:5d: 25:b6:0a:2c:a6:eb:50:b4:9e:22:18:41:bc:a0:ce:e6:2c:06: 24:a0:bd:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4RtCwC7Fm9EKm8jEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk ODZlMGI0ODMtOTYxYy00NjIzLWE0OTMtODY0ZGNkODg0MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z+JHF8uyRpEQhRibJuhqtXPXEXXTnuyYFrB W1hxZUQyoIdMrPmDpJNF4g2VXSg9DgnzBQhb3Lym+OuuDHZTsFnqNHk0pRMHwWIf fFIlL6zKdArcsxYr02yOwlorVPD8ZmqcfraN6kB9/FO9e6aOW4T6JNDphBTDlYZw ld8xhJf1KAOvoJDBQNstWkK65Eio6h3CJALxLF45J9o03WaUju2U6+0V8/x9Zk3p CnXYzK9p5+NHScUvDAvxlXMja8lgxffSiVxjf3KqdjszCtynrtsqn2zuLhtobWIV QVjN54Vxcq9Jc+JpIhaY0m2ZBPvjXPf/Hy+Ep0bNuyL+ktIHjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDraSAzqaKqdjiHiXuIeYr6j/g0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvYTY1NjAwMWItYmQzNS0z NzBhLWJiNGUtNTVkOGExZDZkZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuXg51ONBCyv+FPhLDb70aoqOEeNP8J50qMkn9LAomN4TMGno5V yHVggAJbCgZ60189xtAh8rP6FUXcGeGUHmrIc5vQZHxQD8hpDZSBzO7I/7F6QPac aWCGfWmE0If4VMF1wNuMU0MB57OXdlAvftUjgsV/Q/7lpp8McxqdYeMhnwYEaK5+ RjQWO/z1K/1QGvSfIAbeGlwVYyfvpEOVC+1Gz/rNvV4rlH0iFqYulywytkJXNI6P FPDhzSzUB/7+6qFlj12YmZYBaJMy/kGihpmU6b5AoSFYUY3uO9yTEHzh5loWlB33 fkalXSW2Ciym61C0niIYQbygzuYsBiSgvco= -----END CERTIFICATE-----Generated at Sat Jun 13 13:17:39 2026 by rpki-client