$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa File: 952bc161-991d-39ce-9362-1f60a57f0877.roa (raw, json) Hash identifier: kIvGoRla77s9z1YzI/ntPyrJmAJg//I8l/tVhAtj2yw= Subject key identifier: A9:15:A8:4F:1C:C2:08:D4:BD:16:18:9C:9F:3D:C7:1E:8E:A9:27:20 Certificate issuer: /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Certificate serial: 010D0C9F4328584E2D9F14D604455EB25B8754C0 Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 11525 IP address blocks: 2606:5d00::/28 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:14:d6:04:45:5e:b2:5b:87:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=40c617be-3ef0-45d2-8d7e-a04daba19e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:d5:6e:a4:53:d6:4b:8b:38:b9:a8:ef:53: cd:48:b4:91:f1:f9:47:1a:a9:ec:e1:b6:c2:c0:c9: cd:4c:e8:ec:43:74:b9:d9:d9:0a:56:b8:12:c0:d6: 0b:5d:02:11:1f:a7:e5:8c:1e:d5:98:64:2e:33:62: 7e:8d:9a:5d:78:02:54:8a:3d:91:b3:f9:0b:32:fd: 95:0d:62:69:74:38:4a:03:d8:82:20:13:af:e3:fc: 86:07:d4:da:c9:cb:83:1a:ee:85:39:0b:a0:cb:03: fe:ba:27:b1:57:56:5a:bf:e0:63:ee:08:42:90:db: d5:e4:ab:f3:c3:df:10:80:84:b5:6c:ba:76:4d:4e: 75:46:35:b7:3b:00:17:7c:75:1e:2a:c7:46:a9:0b: 4b:d5:ee:ce:4d:3c:39:c0:ed:dc:d6:a8:12:9d:7b: 0b:1d:e0:0f:72:67:45:fb:c5:0c:a8:76:7f:e2:41: f7:b4:a1:01:7e:0d:9e:58:d8:45:10:7d:5b:21:d6: 15:f5:c1:ae:94:3c:0a:77:b9:64:c0:09:47:c0:fd: 94:82:90:de:97:3a:b2:7b:57:d4:c8:94:8c:6b:4d: 50:9e:39:fe:70:f4:3a:29:15:b9:e7:a1:2d:6d:62: 18:cc:8f:1a:46:8f:ee:0b:7d:08:38:c0:1d:31:35: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:15:A8:4F:1C:C2:08:D4:BD:16:18:9C:9F:3D:C7:1E:8E:A9:27:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl X509v3 Authority Key Identifier: keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer sbgp-ipAddrBlock: critical IPv6: 2606:5d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e4:7c:8d:66:ef:3f:88:b1:6d:1b:50:2e:c9:a9:2c:3b:17: 37:64:b3:da:63:e6:10:0f:b7:85:08:13:51:cc:38:6f:2a:56: 35:b8:fe:95:be:29:1a:01:40:a2:21:ef:95:9c:e0:b1:e4:67: 51:41:9c:95:bc:17:df:21:91:3e:96:ec:7c:11:92:f0:a0:dd: 7a:38:a8:bc:5f:d3:2f:52:4b:34:b8:e8:8a:25:39:7a:8e:07: 54:33:d7:03:5f:7f:f5:1c:e5:36:d9:1c:6b:55:5a:ea:39:71: c6:a1:41:f7:1c:a3:76:84:f7:af:c6:f4:53:d2:16:46:74:07: d8:f9:19:44:8f:47:59:58:1e:d3:bd:07:49:21:54:62:b3:72: 50:cc:fe:21:77:bb:5f:5a:ef:6d:cc:8f:ed:31:44:d7:18:3c: fa:5d:0b:48:54:83:fe:21:50:97:d6:20:41:26:0c:d2:d8:14: 34:9f:7c:b1:49:38:00:2b:4b:41:78:db:78:fc:df:c8:25:15: 65:f0:85:c1:68:e1:c1:31:4f:0b:4a:82:96:cd:05:f3:06:b1: 6e:ef:7e:27:46:09:65:fe:66:0b:8d:07:f7:d1:17:10:b7:71: b3:17:cb:f9:36:11:66:2a:40:b1:99:ed:3f:31:fd:1d:74:88: 40:93:ed:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4tnxTWBEVesluHVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjllOWJkMGUtZGFlZC00Yjk0LTk2YTUtZTI4YjY5OGU5 ZDM3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk NDBjNjE3YmUtM2VmMC00NWQyLThkN2UtYTA0ZGFiYTE5ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aDVbqRT1kuLOLmo71PNSLSR8flHGqns4bbC wMnNTOjsQ3S52dkKVrgSwNYLXQIRH6fljB7VmGQuM2J+jZpdeAJUij2Rs/kLMv2V DWJpdDhKA9iCIBOv4/yGB9TaycuDGu6FOQugywP+uiexV1Zav+Bj7ghCkNvV5Kvz w98QgIS1bLp2TU51RjW3OwAXfHUeKsdGqQtL1e7OTTw5wO3c1qgSnXsLHeAPcmdF +8UMqHZ/4kH3tKEBfg2eWNhFEH1bIdYV9cGulDwKd7lkwAlHwP2UgpDelzqye1fU yJSMa01Qnjn+cPQ6KRW556EtbWIYzI8aRo/uC30IOMAdMTUlbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKkVqE8cwgjUvRYYnJ89xx6OqScgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWU5 YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhiNjk4ZTlkMzcvOTUyYmMxNjEtOTkxZC0z OWNlLTkzNjItMWY2MGE1N2YwODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjllOWJkMGUtZGFlZC00Yjk0LTk2 YTUtZTI4YjY5OGU5ZDM3LzY5ZTliZDBlLWRhZWQtNGI5NC05NmE1LWUyOGI2OThl OWQzNy5jcmwwHwYDVR0jBBgwFoAUBu504Tz0q/kHjHbZKSua5I1zrr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82OWU5YmQwZS1kYWVkLTRiOTQtOTZhNS1lMjhi Njk4ZTlkMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgZdADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH5HyNZu8/iLFtG1AuyaksOxc3ZLPaY+YQD7eFCBNRzDhvKlY1uP6V vikaAUCiIe+VnOCx5GdRQZyVvBffIZE+lux8EZLwoN16OKi8X9MvUks0uOiKJTl6 jgdUM9cDX3/1HOU22RxrVVrqOXHGoUH3HKN2hPevxvRT0hZGdAfY+RlEj0dZWB7T vQdJIVRis3JQzP4hd7tfWu9tzI/tMUTXGDz6XQtIVIP+IVCX1iBBJgzS2BQ0n3yx STgAK0tBeNt4/N/IJRVl8IXBaOHBMU8LSoKWzQXzBrFu734nRgll/mYLjQf30RcQ t3GzF8v5NhFmKkCxme0/Mf0ddIhAk+3Q -----END CERTIFICATE-----Generated at Mon Jun 22 06:03:47 2026 by rpki-client