$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9e8da233-edef-3d54-b838-429500e9287a.roa File: 9e8da233-edef-3d54-b838-429500e9287a.roa (raw, json) Hash identifier: ys87nBCX/5mhjUPXlHX7k8h0BPa8hVrtNf1aR4sZmN4= Subject key identifier: 1D:C6:1D:A5:EC:35:A9:B9:00:C7:80:47:3F:81:37:9B:D5:BE:0F:8B Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584E1FA99222A7CA2D9CD48D9880 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9e8da233-edef-3d54-b838-429500e9287a.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 62943 IP address blocks: 2604:2980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:92:22:a7:ca:2d:9c:d4:8d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=599f429a-2fde-4710-943a-011257f90e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:12:ab:62:b1:54:58:19:6a:c0:60:2c:b7:16: 95:ec:86:ca:1a:e9:11:8f:7f:c6:38:9a:72:c0:95: d0:8c:f9:c4:54:1d:e7:29:8b:a0:02:78:9a:76:f0: f5:58:4b:e8:31:70:a9:d6:06:e9:37:d5:0d:41:08: 35:8e:c7:59:22:a7:ae:de:4f:a6:23:08:3c:4a:cf: b2:6d:09:98:84:fc:cc:75:a0:d3:79:f9:8a:59:eb: cf:44:28:9b:3a:ba:ec:d8:15:04:44:f3:a3:2e:bf: 96:9a:52:d0:d9:35:29:a3:b9:ec:7e:1a:98:c6:8c: 7d:ca:50:2d:a9:eb:29:6d:52:35:f7:3c:3f:95:ec: 57:2e:f0:d8:31:50:98:bf:51:e8:4a:d9:69:38:57: e3:7f:bc:14:d5:77:ce:94:24:78:b0:11:1a:f0:a6: 8e:e4:c8:d9:e0:a0:ec:54:f6:f8:6f:e9:61:bb:7d: 5a:1a:d8:3a:47:f1:72:4f:da:0e:73:24:42:44:e6: 8c:8c:11:0f:bb:3f:cf:93:03:02:47:84:e0:d2:10: 12:c5:52:44:8a:d5:a7:45:20:11:56:5c:cf:3f:20: 86:8b:5c:6f:55:e3:0c:87:94:be:f1:24:ed:df:94: ca:22:ba:8a:ee:49:ba:93:d6:e8:94:4b:c8:2f:e0: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C6:1D:A5:EC:35:A9:B9:00:C7:80:47:3F:81:37:9B:D5:BE:0F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/9e8da233-edef-3d54-b838-429500e9287a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv6: 2604:2980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9a:6d:b4:c3:b7:2e:24:8a:1d:b0:e6:03:52:67:85:f2:14: 05:ad:55:65:5a:54:a7:69:40:aa:fb:8c:de:3a:5f:ae:2a:3b: ed:4b:20:f3:d8:c2:3d:c3:a0:6b:f3:6a:1f:19:49:e0:56:f1: b6:4c:7e:c8:1a:6d:2b:63:42:2d:59:18:0f:9b:2c:6b:aa:38: 8a:4c:01:95:02:a4:76:47:a0:37:5a:f6:eb:b7:57:04:6d:6a: 06:60:b8:74:d1:e0:d4:93:98:e3:68:9a:e8:cf:c7:44:52:34: b6:c8:77:ce:bc:4a:ff:2d:cc:46:93:91:19:44:9d:07:ab:95: a0:a2:01:02:87:2c:1e:0c:11:fc:29:89:39:5b:bb:58:3e:56: 00:4d:23:c5:0a:02:5f:50:5f:7e:17:e4:f8:31:2a:74:3b:8b: 93:5c:04:fb:76:97:71:5c:12:22:1a:65:50:e1:90:f7:d9:3d: ca:19:1a:d1:ee:14:96:e9:fe:15:9c:58:da:8e:e5:0f:2c:33: 7e:3d:75:c9:1c:02:9e:cf:db:ec:f8:8a:26:09:6f:b6:b7:6e: 47:08:8e:91:3a:f8:81:5c:6f:de:89:4d:f2:72:16:2f:0e:17: e3:45:54:19:3c:18:e9:48:16:1a:b1:e6:24:3d:4b:66:41:cd: c9:37:c2:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4fqZIip8otnNSNmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk NTk5ZjQyOWEtMmZkZS00NzEwLTk0M2EtMDExMjU3ZjkwZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRKrYrFUWBlqwGAstxaV7IbKGukRj3/GOJpy wJXQjPnEVB3nKYugAniadvD1WEvoMXCp1gbpN9UNQQg1jsdZIqeu3k+mIwg8Ss+y bQmYhPzMdaDTefmKWevPRCibOrrs2BUERPOjLr+WmlLQ2TUpo7nsfhqYxox9ylAt qespbVI19zw/lexXLvDYMVCYv1HoStlpOFfjf7wU1XfOlCR4sBEa8KaO5MjZ4KDs VPb4b+lhu31aGtg6R/FyT9oOcyRCROaMjBEPuz/PkwMCR4Tg0hASxVJEitWnRSAR VlzPPyCGi1xvVeMMh5S+8STt35TKIrqK7km6k9bolEvIL+DpWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB3GHaXsNam5AMeARz+BN5vVvg+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvOWU4ZGEyMzMtZWRlZi0z ZDU0LWI4MzgtNDI5NTAwZTkyODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQpgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbmm20w7cuJIodsOYDUmeF8hQFrVVlWlSnaUCq+4zeOl+uKjvtSyDz 2MI9w6Br82ofGUngVvG2TH7IGm0rY0ItWRgPmyxrqjiKTAGVAqR2R6A3Wvbrt1cE bWoGYLh00eDUk5jjaJroz8dEUjS2yHfOvEr/LcxGk5EZRJ0Hq5WgogEChyweDBH8 KYk5W7tYPlYATSPFCgJfUF9+F+T4MSp0O4uTXAT7dpdxXBIiGmVQ4ZD32T3KGRrR 7hSW6f4VnFjajuUPLDN+PXXJHAKez9vs+IomCW+2t25HCI6ROviBXG/eiU3ychYv DhfjRVQZPBjpSBYaseYkPUtmQc3JN8KT -----END CERTIFICATE-----Generated at Sat Jun 13 16:34:30 2026 by rpki-client