$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d3331e7a-cdb3-3889-95b5-6b916d93b0e0.roa File: d3331e7a-cdb3-3889-95b5-6b916d93b0e0.roa (raw, json) Hash identifier: q5TQ6bhGshrrwPKsBuLJXpQMCcagDm4D4LTKd8IGaUs= Subject key identifier: 65:CD:13:27:8C:53:40:78:48:17:80:EE:5C:0A:F9:36:52:ED:73:CE Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584E4AEF6A178AF66EE51A2CB800 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d3331e7a-cdb3-3889-95b5-6b916d93b0e0.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 11537 IP address blocks: 2001:468:1f0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:6a:17:8a:f6:6e:e5:1a:2c:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=139738aa-5903-4c69-ad49-39977a11197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:45:c2:16:9b:d7:e9:c7:48:13:da:94:33: fc:3e:3d:29:bd:02:5b:57:ed:4e:43:6a:db:52:87: 91:ba:25:83:68:3f:be:48:e4:49:96:52:81:58:d6: 8d:29:0e:f8:51:06:68:c8:ae:01:e1:1e:d0:5d:04: 15:2c:f2:9e:d5:4e:5c:39:46:b0:25:92:87:f5:d5: 4b:24:1e:68:31:48:dd:58:86:e9:50:a7:cf:cc:93: a4:1e:55:ba:31:b7:d9:db:c4:45:62:1a:18:d9:67: fe:1e:b8:3d:61:b0:16:54:2f:2d:68:29:a5:01:06: 37:ac:56:46:76:55:21:d1:16:66:e4:99:be:be:6d: 73:64:ce:93:6a:df:e1:71:eb:42:cd:11:01:32:7e: d2:13:87:81:fb:0b:7c:61:6f:08:de:b0:97:cc:39: 3f:79:28:a3:23:37:6a:a8:9d:1e:23:05:78:9a:c1: ae:ee:c5:f8:ec:02:38:a0:d5:e3:f4:90:7d:c4:c3: 96:59:e0:c3:79:c1:18:f5:2b:ce:00:cc:b5:d0:3e: 14:28:a6:ad:2c:70:b8:20:89:fb:30:e8:5e:69:f8: 3c:f3:80:5f:78:10:a1:1e:04:64:4f:48:17:52:9d: d1:45:cb:c9:b2:85:87:35:b2:00:08:48:7f:75:c2: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:13:27:8C:53:40:78:48:17:80:EE:5C:0A:F9:36:52:ED:73:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d3331e7a-cdb3-3889-95b5-6b916d93b0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468:1f0c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:22:3b:75:64:03:55:b6:9c:d3:6b:88:0d:15:d7:b6:c7: 6f:ab:60:11:22:35:34:e1:35:b4:a1:35:87:dd:a6:bd:a1:59: 9e:5d:63:01:5d:15:47:cc:45:27:3e:99:41:1a:fe:dc:f3:26: ee:a1:76:de:a5:9f:a5:09:0e:de:0e:48:1f:83:84:29:80:f3: 1a:3a:2c:f3:fd:00:50:11:38:2b:25:ac:1a:ed:a5:e4:90:80: e1:51:be:cc:ab:7d:bb:e3:4a:a4:0b:74:7f:16:2b:ae:53:5f: 96:68:dc:d3:e4:48:c4:5b:cd:27:c7:46:b5:bd:cc:1b:4f:0a: 4b:15:f3:d5:5c:d2:3c:a8:c9:a9:2f:72:f9:30:07:40:41:21: 37:00:cc:18:98:c0:d1:1e:96:02:03:0c:f0:fb:4f:a0:48:e5: f8:3c:14:04:54:33:0b:4b:5e:66:75:ea:9c:73:7f:3a:a7:55: 73:1c:37:95:bc:71:a2:b7:9a:53:40:6d:3a:fc:ed:80:3b:ee: ed:0d:75:e4:7a:91:2e:67:33:af:2c:ce:76:9a:53:c6:04:ea: 53:a5:85:53:c0:2f:bb:3b:2c:70:e3:3b:d4:13:c4:76:10:05: 2e:75:80:90:51:23:48:4e:c3:67:e1:b6:e8:19:37:66:19:b0: 4b:67:51:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K72oXivZu5RosuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTM5NzM4YWEtNTkwMy00YzY5LWFkNDktMzk5NzdhMTExOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhFwhab1+nHSBPalDP8Pj0pvQJbV+1OQ2rb UoeRuiWDaD++SORJllKBWNaNKQ74UQZoyK4B4R7QXQQVLPKe1U5cOUawJZKH9dVL JB5oMUjdWIbpUKfPzJOkHlW6MbfZ28RFYhoY2Wf+Hrg9YbAWVC8taCmlAQY3rFZG dlUh0RZm5Jm+vm1zZM6Tat/hcetCzREBMn7SE4eB+wt8YW8I3rCXzDk/eSijIzdq qJ0eIwV4msGu7sX47AI4oNXj9JB9xMOWWeDDecEY9SvOAMy10D4UKKatLHC4IIn7 MOheafg884BfeBChHgRkT0gXUp3RRcvJsoWHNbIACEh/dcKW/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXNEyeMU0B4SBeA7lwK+TZS7XPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZDMzMzFlN2EtY2RiMy0z ODg5LTk1YjUtNmI5MTZkOTNiMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaB8M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETZIjt1ZANVtpzTa4gNFde2x2+rYBEiNTThNbShNYfdpr2hWZ5d YwFdFUfMRSc+mUEa/tzzJu6hdt6ln6UJDt4OSB+DhCmA8xo6LPP9AFAROCslrBrt peSQgOFRvsyrfbvjSqQLdH8WK65TX5Zo3NPkSMRbzSfHRrW9zBtPCksV89Vc0jyo yakvcvkwB0BBITcAzBiYwNEelgIDDPD7T6BI5fg8FARUMwtLXmZ16pxzfzqnVXMc N5W8caK3mlNAbTr87YA77u0NdeR6kS5nM68sznaaU8YE6lOlhVPAL7s7LHDjO9QT xHYQBS51gJBRI0hOw2fhtugZN2YZsEtnUdw= -----END CERTIFICATE-----Generated at Mon Jun 29 00:09:40 2026 by rpki-client