$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa File: 520fa190-52d0-3cd6-8a3c-8938820698fe.roa (raw, json) Hash identifier: TG58oGGP0ftBR9J0mwmtvR8LhtPZam08ZlXRp1UzTD8= Subject key identifier: 36:12:CF:41:DC:4F:19:AB:BA:2B:FF:43:EA:CE:D0:95:F1:6D:BA:36 Certificate issuer: /CN=a3095f6b-9f71-441b-8acd-bc18272b938d Certificate serial: 010D0C9F4328584E1298156B6384D4A4F2AB88F0 Authority key identifier: D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa Signing time: Fri 05 Jun 2026 16:39:30 +0000 ROA not before: Fri 05 Jun 2026 16:39:30 +0000 ROA not after: Thu 03 Sep 2026 16:39:30 +0000 asID: 20473 IP address blocks: 2620:1d:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:12:98:15:6b:63:84:d4:a4:f2:ab:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3095f6b-9f71-441b-8acd-bc18272b938d Validity Not Before: Jun 5 16:39:30 2026 GMT Not After : Sep 3 16:39:30 2026 GMT Subject: CN=cce3ba30-36f5-49b9-8181-33d6bee76b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:3f:82:ed:32:60:23:b0:99:b6:84:ed:b7: a4:d1:9b:a9:38:dc:ae:a4:0d:59:3b:bd:e2:03:93: 48:db:e8:32:d4:ac:8e:99:d6:16:48:38:67:d8:4f: 37:19:80:dc:3f:c0:07:53:50:ab:28:28:a4:18:b9: 38:ce:37:2c:f7:40:42:dd:7f:b0:85:f6:cb:5f:5f: e3:ad:95:db:8b:2b:38:4e:d0:9c:f6:62:44:98:9b: 5d:3f:23:46:ae:43:b8:71:6f:77:07:6e:8b:cd:98: 97:41:7f:54:ab:ac:ee:f1:55:6d:a7:48:b5:0d:37: 4e:75:ff:35:80:57:dc:f6:4e:7c:24:37:24:1a:21: ba:3c:20:5f:e3:53:ae:fa:28:92:19:7a:69:e0:8c: 5a:3c:70:2e:b9:6e:40:78:46:4f:dc:8a:39:38:73: 18:3b:c5:ab:36:34:c9:5b:94:50:c6:66:a9:e2:32: ea:f6:fc:6d:32:76:d0:f8:48:74:a9:a2:da:9b:15: 92:3e:62:d8:d4:c6:8d:38:8a:5d:46:71:d1:3c:fb: 83:ed:a8:d7:29:81:c3:03:46:09:24:0d:93:cc:10: c3:ea:99:29:93:de:27:46:05:a4:d2:0a:df:b7:2e: 85:a8:09:97:da:d9:13:92:f9:7d:e8:1f:d3:49:e2: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:CF:41:DC:4F:19:AB:BA:2B:FF:43:EA:CE:D0:95:F1:6D:BA:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/520fa190-52d0-3cd6-8a3c-8938820698fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d/a3095f6b-9f71-441b-8acd-bc18272b938d.crl X509v3 Authority Key Identifier: keyid:D9:6B:C1:C2:E9:B6:2E:68:8E:BA:C6:12:49:CC:06:E7:F1:C1:D3:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a3095f6b-9f71-441b-8acd-bc18272b938d.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:00:2f:fa:ef:83:a3:34:6d:e1:01:11:47:dd:8b:95:85:fa: f1:1d:bd:0c:1c:63:a7:da:b4:ab:c5:eb:ec:ea:0c:3e:5b:b6: 3e:98:af:7f:18:f9:f9:fe:ea:bb:5b:0c:94:8d:8d:7c:a1:cd: d9:a6:3c:64:f0:5e:bb:80:3f:8f:01:37:46:4f:b2:e3:55:8f: de:76:57:cb:10:92:32:ee:b3:3e:06:bf:f3:cf:05:2d:7d:bc: f0:e6:8e:da:07:e2:00:33:2c:b3:55:8b:27:2f:29:b3:61:c6: e9:d7:00:bf:d6:97:8e:c6:98:c7:fb:f8:af:7f:20:be:a9:de: 72:ec:7d:c5:d7:f1:bc:cb:17:07:66:57:b0:b1:71:e0:b9:76: 74:79:b3:8a:8b:06:be:0d:77:3d:38:f8:ae:02:88:68:10:fb: fd:d2:23:f8:ff:c4:a5:c8:ef:68:55:ce:de:2c:b1:75:13:34: 30:c6:29:fb:07:52:ed:57:91:16:16:f8:15:6d:a5:16:24:54: 95:85:eb:67:80:95:18:5c:4f:5c:f5:1e:fe:53:0b:27:25:a8: 91:62:48:0a:99:c5:07:d9:66:86:46:b1:64:c1:57:16:8a:49: d5:e9:45:6d:dc:be:b1:b4:19:17:01:b3:a8:88:07:72:1d:0b: 03:e4:83:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4SmBVrY4TUpPKriPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwOTVmNmItOWY3MS00NDFiLThhY2QtYmMxODI3MmI5 MzhkMB4XDTI2MDYwNTE2MzkzMFoXDTI2MDkwMzE2MzkzMFowLzEtMCsGA1UEAxMk Y2NlM2JhMzAtMzZmNS00OWI5LTgxODEtMzNkNmJlZTc2YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKo/gu0yYCOwmbaE7bek0ZupONyupA1ZO73i A5NI2+gy1KyOmdYWSDhn2E83GYDcP8AHU1CrKCikGLk4zjcs90BC3X+whfbLX1/j rZXbiys4TtCc9mJEmJtdPyNGrkO4cW93B26LzZiXQX9Uq6zu8VVtp0i1DTdOdf81 gFfc9k58JDckGiG6PCBf41Ou+iiSGXpp4IxaPHAuuW5AeEZP3Io5OHMYO8WrNjTJ W5RQxmap4jLq9vxtMnbQ+Eh0qaLamxWSPmLY1MaNOIpdRnHRPPuD7ajXKYHDA0YJ JA2TzBDD6pkpk94nRgWk0grfty6FqAmX2tkTkvl96B/TSeLY+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDYSz0HcTxmruiv/Q+rO0JXxbbo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzA5 NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4MjcyYjkzOGQvNTIwZmExOTAtNTJkMC0z Y2Q2LThhM2MtODkzODgyMDY5OGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMwOTVmNmItOWY3MS00NDFiLThh Y2QtYmMxODI3MmI5MzhkL2EzMDk1ZjZiLTlmNzEtNDQxYi04YWNkLWJjMTgyNzJi OTM4ZC5jcmwwHwYDVR0jBBgwFoAU2WvBwum2LmiOusYSScwG5/HB04MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hMzA5NWY2Yi05ZjcxLTQ0MWItOGFjZC1iYzE4 MjcyYjkzOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAHaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIAL/rvg6M0beEBEUfdi5WF+vEdvQwcY6fatKvF6+zqDD5btj6Y r38Y+fn+6rtbDJSNjXyhzdmmPGTwXruAP48BN0ZPsuNVj952V8sQkjLusz4Gv/PP BS19vPDmjtoH4gAzLLNViycvKbNhxunXAL/Wl47GmMf7+K9/IL6p3nLsfcXX8bzL FwdmV7CxceC5dnR5s4qLBr4Ndz04+K4CiGgQ+/3SI/j/xKXI72hVzt4ssXUTNDDG KfsHUu1XkRYW+BVtpRYkVJWF62eAlRhcT1z1Hv5TCyclqJFiSAqZxQfZZoZGsWTB VxaKSdXpRW3cvrG0GRcBs6iIB3IdCwPkg7U= -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:20 2026 by rpki-client