$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa File: bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa (raw, json) Hash identifier: Ef66RqpPTq6sdVtTaRBztuTOotOVjgjuD4Lhl8NfCNI= Subject key identifier: C0:4B:7F:C7:4F:D1:3B:03:12:C2:8D:82:4A:AD:1D:B8:6B:07:27:67 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584E08227CDDE2D76B0AF8BA9F80 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa Signing time: Mon 01 Jun 2026 22:44:28 +0000 ROA not before: Mon 01 Jun 2026 22:44:28 +0000 ROA not after: Sun 30 Aug 2026 22:44:28 +0000 asID: 16509 IP address blocks: 2620:147:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:22:7c:dd:e2:d7:6b:0a:f8:ba:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jun 1 22:44:28 2026 GMT Not After : Aug 30 22:44:28 2026 GMT Subject: CN=5964fc5b-cc5f-43e9-b52a-1b3e3a2ff824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:eb:14:57:f8:da:d1:95:d8:94:54:1a:94: 18:62:85:e0:e4:f5:5c:f4:e6:cf:09:5e:24:3e:6c: b1:46:17:8f:1f:69:2f:34:98:9c:0f:4a:1a:e0:1a: 81:1e:55:7c:4f:09:31:1f:56:0b:3d:0d:28:fa:d9: 93:e5:8d:d9:e0:33:3b:5e:ed:b2:f8:44:21:f1:24: 51:ab:1b:a8:3c:b7:e9:1f:33:69:60:50:4e:a2:31: 3c:f0:3f:5d:ab:c7:a0:49:d5:d4:3f:97:bb:2f:c2: 7d:3f:fc:0b:03:81:f1:7f:74:0b:38:fe:c6:7e:8a: 5c:6d:33:9a:47:7b:77:00:53:7a:d0:b8:31:26:5c: 0f:91:4a:53:5a:bf:0c:1a:c3:05:7b:b4:f6:c8:a5: 01:c9:54:20:36:d0:10:ae:30:c5:ed:5f:5a:73:29: 22:16:83:ac:87:78:a4:73:80:36:5e:d2:18:7b:9f: 91:d9:a9:df:d6:9c:be:52:ee:b4:2c:ae:5a:86:a7: 49:8c:3c:3e:88:b2:3f:e6:8f:3f:ca:61:37:f1:75: 33:e4:e2:27:ea:77:12:eb:dc:54:70:55:9e:e6:54: b1:a2:8b:94:2a:a6:f0:17:cd:4f:e9:c0:66:a5:98: 61:d9:62:4a:31:76:2e:d3:ac:77:30:f7:fd:38:27: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:7F:C7:4F:D1:3B:03:12:C2:8D:82:4A:AD:1D:B8:6B:07:27:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/bf702afc-11e5-30ed-8db0-b2d876f2f0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b6:ae:2c:14:c7:50:db:5c:91:09:72:ce:10:22:72:c1:b2: 7f:8f:0d:29:f1:9c:d3:62:b7:09:dc:8b:0b:11:7f:f8:05:90: 23:e6:a7:46:9d:ea:56:73:40:e9:9e:de:39:17:b2:a3:93:35: 00:12:1f:42:4a:86:d3:96:a5:e7:0f:49:2a:68:13:21:9e:3d: 36:67:fc:70:a2:0c:c8:84:4e:25:d9:aa:53:d0:48:a1:dc:cd: 66:79:48:29:a8:db:79:14:e6:b0:2a:bd:1b:8c:15:a1:fa:14: 06:ac:36:52:ea:8c:e6:1d:3b:0f:3d:6f:2b:10:f2:09:6f:5d: 8e:ea:ac:b9:88:6f:05:8d:e1:d0:16:ff:3e:93:a9:0d:63:a4: af:aa:2f:22:3b:9c:53:7d:c8:12:23:00:3d:87:bd:94:eb:01: 8a:69:6e:24:93:f2:d6:51:c9:77:90:c3:52:4c:dd:2b:29:c3: 84:f4:6e:77:a1:f4:a7:de:08:ea:6e:62:b3:fb:14:42:a1:11: 1f:05:f6:a3:a5:00:02:df:55:27:ed:a4:92:69:c0:3c:61:8d: 8d:b7:d3:a6:bb:da:2a:39:25:1e:ab:57:1f:4a:69:78:83:4e: 9b:2e:a7:67:94:74:e0:18:44:56:d1:9b:ec:76:7b:15:70:04: b0:c1:b9:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4IInzd4tdrCvi6n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDYwMTIyNDQyOFoXDTI2MDgzMDIyNDQyOFowLzEtMCsGA1UEAxMk NTk2NGZjNWItY2M1Zi00M2U5LWI1MmEtMWIzZTNhMmZmODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOLrFFf42tGV2JRUGpQYYoXg5PVc9ObPCV4k PmyxRhePH2kvNJicD0oa4BqBHlV8TwkxH1YLPQ0o+tmT5Y3Z4DM7Xu2y+EQh8SRR qxuoPLfpHzNpYFBOojE88D9dq8egSdXUP5e7L8J9P/wLA4Hxf3QLOP7GfopcbTOa R3t3AFN60LgxJlwPkUpTWr8MGsMFe7T2yKUByVQgNtAQrjDF7V9acykiFoOsh3ik c4A2XtIYe5+R2anf1py+Uu60LK5ahqdJjDw+iLI/5o8/ymE38XUz5OIn6ncS69xU cFWe5lSxoouUKqbwF81P6cBmpZhh2WJKMXYu06x3MPf9OCcpHwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMBLf8dP0TsDEsKNgkqtHbhrBydnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYmY3MDJhZmMtMTFlNS0z MGVkLThkYjAtYjJkODc2ZjJmMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABRw0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANLauLBTHUNtckQlyzhAicsGyf48NKfGc02K3CdyLCxF/+AWQI+an Rp3qVnNA6Z7eOReyo5M1ABIfQkqG05al5w9JKmgTIZ49Nmf8cKIMyIROJdmqU9BI odzNZnlIKajbeRTmsCq9G4wVofoUBqw2UuqM5h07Dz1vKxDyCW9djuqsuYhvBY3h 0Bb/PpOpDWOkr6ovIjucU33IEiMAPYe9lOsBimluJJPy1lHJd5DDUkzdKynDhPRu d6H0p94I6m5is/sUQqERHwX2o6UAAt9VJ+2kkmnAPGGNjbfTprvaKjklHqtXH0pp eINOmy6nZ5R04BhEVtGb7HZ7FXAEsMG5/Q== -----END CERTIFICATE-----Generated at Wed Jun 3 20:13:45 2026 by rpki-client