$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa File: dd33e40a-b34b-360b-81cc-117570e36a78.roa (raw, json) Hash identifier: ONbQQp4Zp0S/yf0MvpVf2fCz3R8lOwegAGjFexPB8Hs= Subject key identifier: 38:7A:35:3F:FB:CB:C0:C5:34:35:40:6D:86:43:2D:91:C2:B5:17:22 Certificate issuer: /CN=b8e4e496-994f-4877-8328-aec6386bbc01 Certificate serial: 010D0C9F4328584E42912C1F3724EE25CC627C1E Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa Signing time: Mon 22 Jun 2026 21:04:22 +0000 ROA not before: Mon 22 Jun 2026 21:04:22 +0000 ROA not after: Sun 20 Sep 2026 21:04:22 +0000 asID: 10662 IP address blocks: 2620:d5:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:42:91:2c:1f:37:24:ee:25:cc:62:7c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01 Validity Not Before: Jun 22 21:04:22 2026 GMT Not After : Sep 20 21:04:22 2026 GMT Subject: CN=e0f6f9f7-3ca8-41cc-a0b7-9fb4a794d550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:bf:46:8a:84:88:8a:b2:a9:38:cd:98:a7: ea:d3:ad:64:71:3c:86:f3:c1:36:e4:da:00:3f:6a: db:0b:1b:b7:19:49:9b:78:6f:20:7e:4a:69:25:e9: bd:0d:27:88:87:32:fa:a5:69:99:6d:4e:b5:93:b1: 09:9d:11:3d:27:23:8b:5d:bb:36:03:3b:58:f8:c4: 80:b0:cf:fe:d3:60:8e:6a:79:2b:d6:44:47:aa:53: 6a:4b:14:40:3a:a3:fc:85:63:28:47:b8:23:6a:73: 9c:73:4a:4b:23:e1:e3:f9:cc:eb:af:a8:a3:94:a2: 5f:3d:50:4d:58:78:57:48:b2:e4:cd:0e:5a:4e:5a: 07:1e:dd:c8:95:c2:a6:40:90:66:b9:d9:16:38:42: 66:7f:96:50:9b:5e:f6:54:0a:4e:e0:f0:3e:78:18: db:b3:27:db:d5:ae:08:fc:38:1c:a6:02:3b:ac:35: 79:de:35:d2:b4:1c:88:65:67:bb:db:70:88:a3:1f: bf:5b:1c:50:cb:5d:94:fd:89:f4:98:9d:be:84:9c: 5e:5f:d2:60:e6:d3:07:8a:4d:0b:ae:ee:ac:53:ba: 1f:97:d2:52:b7:ca:12:3a:11:55:73:2e:60:b5:bf: 7c:de:73:9b:ac:43:c9:a8:cf:b0:61:d2:9b:a0:91: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:35:3F:FB:CB:C0:C5:34:35:40:6D:86:43:2D:91:C2:B5:17:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/dd33e40a-b34b-360b-81cc-117570e36a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl X509v3 Authority Key Identifier: keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:28:9c:1c:5f:c8:9e:fd:fa:19:8a:52:74:34:6e:6c:4c:04: 3f:f2:b6:6f:b3:d5:d7:66:2c:dc:a3:75:b0:15:bf:8a:b7:f7: 01:e8:00:8a:92:53:cf:2b:7d:05:9a:b9:a4:6b:fd:9d:76:e6: a7:cb:a2:67:5e:03:e0:db:a3:06:fb:b4:13:21:1b:2b:a4:66: 5e:4e:b2:e1:78:a1:89:45:9a:d9:1e:9a:c4:50:e5:ea:ab:09: 81:0c:94:f7:ee:5a:08:97:7c:9c:5a:b7:96:67:69:3e:fc:ac: a3:15:27:ad:83:bf:a6:ab:e0:b5:95:9f:17:1a:b4:77:14:1e: 7f:e6:1e:bc:18:59:a0:29:1f:a2:2a:d2:92:98:a6:86:26:fe: 85:e1:f1:49:65:9e:f9:13:4b:c1:c7:a9:a1:c4:e7:79:24:f0: f2:9f:3f:e3:86:36:5a:39:9c:b5:41:ff:2d:7a:86:35:0f:3d: 7d:4d:37:df:ad:42:7d:56:16:ac:d6:d5:e7:88:ab:66:a6:11: e1:aa:e0:f5:d1:17:e0:73:ed:77:7b:f7:55:0c:66:5e:c0:51: 09:97:11:0f:93:4a:d3:ce:53:11:0c:20:ac:60:46:2d:74:90: 4e:9e:f7:89:81:bf:40:6d:53:59:27:23:74:6a:21:f4:96:88: 7d:9a:0b:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5CkSwfNyTuJcxifB4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi YzAxMB4XDTI2MDYyMjIxMDQyMloXDTI2MDkyMDIxMDQyMlowLzEtMCsGA1UEAxMk ZTBmNmY5ZjctM2NhOC00MWNjLWEwYjctOWZiNGE3OTRkNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sq/RoqEiIqyqTjNmKfq061kcTyG88E25NoA P2rbCxu3GUmbeG8gfkppJem9DSeIhzL6pWmZbU61k7EJnRE9JyOLXbs2AztY+MSA sM/+02COankr1kRHqlNqSxRAOqP8hWMoR7gjanOcc0pLI+Hj+czrr6ijlKJfPVBN WHhXSLLkzQ5aTloHHt3IlcKmQJBmudkWOEJmf5ZQm172VApO4PA+eBjbsyfb1a4I /DgcpgI7rDV53jXStByIZWe723CIox+/WxxQy12U/Yn0mJ2+hJxeX9Jg5tMHik0L ru6sU7ofl9JSt8oSOhFVcy5gtb983nObrEPJqM+wYdKboJGoqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDh6NT/7y8DFNDVAbYZDLZHCtRciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0 ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvZGQzM2U0MGEtYjM0Yi0z NjBiLTgxY2MtMTE3NTcwZTM2YTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2 Mzg2YmJjMDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1YAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwonBxfyJ79+hmKUnQ0bmxMBD/ytm+z1ddmLNyjdbAVv4q39wHo AIqSU88rfQWauaRr/Z125qfLomdeA+Dbowb7tBMhGyukZl5OsuF4oYlFmtkemsRQ 5eqrCYEMlPfuWgiXfJxat5ZnaT78rKMVJ62Dv6ar4LWVnxcatHcUHn/mHrwYWaAp H6Iq0pKYpoYm/oXh8UllnvkTS8HHqaHE53kk8PKfP+OGNlo5nLVB/y16hjUPPX1N N9+tQn1WFqzW1eeIq2amEeGq4PXRF+Bz7Xd791UMZl7AUQmXEQ+TStPOUxEMIKxg Ri10kE6e94mBv0BtU1knI3RqIfSWiH2aCx0= -----END CERTIFICATE-----Generated at Mon Jun 29 11:32:06 2026 by rpki-client