$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa File: 9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa (raw, json) Hash identifier: FFvnTFc9FyMwUJLmd6tr78B8vo0TwdJEJoD4Jd7sC4c= Subject key identifier: 65:A9:AE:88:D3:44:B3:63:4E:B1:C1:B6:BA:E4:46:44:26:AF:E9:B6 Certificate issuer: /CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Certificate serial: 010D0C9F4328584E50849C8D738F8D3B72A59D80 Authority key identifier: 96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 22413 IP address blocks: 2604:f140::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:9c:8d:73:8f:8d:3b:72:a5:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=8fca8b2e-5a9d-4f9f-a793-5c2d06dd6de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:80:eb:0d:4f:8b:91:9f:52:a1:f3:6f:0e: 13:5b:8a:da:3b:87:7d:99:c2:26:d9:c0:9d:0c:d9: 0a:de:96:7c:44:86:39:65:d6:ba:e3:79:28:55:83: c8:b5:ab:16:ce:23:b3:ce:59:b9:0b:ea:39:7b:31: fe:3b:22:c1:11:35:25:e2:eb:3f:1a:75:b2:69:d9: 5a:63:7c:95:3d:04:f7:32:a0:9b:88:6c:5a:16:28: 4f:ef:cc:2f:6c:61:35:14:06:55:f4:96:cc:33:db: 44:d5:0b:dc:41:51:52:88:ee:22:28:a5:a7:dc:3c: 99:ec:db:c9:39:3c:90:ae:32:4a:6b:b1:9d:e6:51: 84:a9:72:e8:97:86:94:e9:9c:b4:10:b5:63:f5:d4: 89:02:de:35:dd:c7:1c:f7:9d:0e:90:c3:1d:7f:76: e7:75:d1:3a:95:69:a4:d2:c7:1b:2e:e9:4a:7c:51: ef:a5:52:92:53:66:b4:95:32:0e:ca:7c:63:00:28: c9:df:a9:00:4f:36:6d:ed:79:c4:ab:f0:9d:be:01: a6:68:dd:21:db:7c:67:89:eb:2d:c3:2c:9e:75:49: c1:a6:34:b1:28:82:bf:9e:a7:5f:42:72:dd:3a:2f: 30:22:00:46:23:7d:d8:5a:d6:68:80:a0:04:e6:85: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:AE:88:D3:44:B3:63:4E:B1:C1:B6:BA:E4:46:44:26:AF:E9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/9dd3a97c-9d6b-3e7f-a1f4-4204fce9e02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.crl X509v3 Authority Key Identifier: keyid:96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer sbgp-ipAddrBlock: critical IPv6: 2604:f140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2f:52:46:37:b4:64:ec:a0:d3:13:b2:de:79:75:02:8b:6a: b9:7b:62:97:96:38:fe:74:95:89:ec:63:f1:e1:a7:07:3c:17: e6:76:89:e4:6f:cd:e6:3c:d1:6b:eb:8c:56:83:4e:18:91:62: c0:bf:76:e4:d8:af:ba:bc:51:63:ce:d8:2e:e4:b8:90:78:29: b7:b0:72:9a:36:0f:f6:2b:2d:0e:27:2a:5c:e3:8b:33:4e:90: a9:2c:57:08:1b:57:7e:1b:ee:ac:41:a2:2a:17:0b:eb:7f:cd: 23:d9:89:27:da:a2:7e:9c:ea:a5:53:a1:ea:d5:34:c6:32:24: 28:f7:a0:db:b7:5b:32:bd:aa:e1:a2:95:ac:28:af:3c:9e:47: 6f:24:f8:9e:7b:45:db:54:25:a7:e8:f4:b2:85:2b:5a:66:5f: 55:a3:18:c2:1b:98:a7:aa:eb:1f:4c:bb:5d:7e:d4:03:df:d5: d9:32:11:fe:d9:e8:f4:c3:1c:f1:a0:c0:9c:e2:94:06:62:59: ed:0f:69:7b:ad:aa:48:c7:74:a5:a4:09:c8:86:05:49:e8:ea: c2:6a:b4:b8:5d:ed:5f:45:c3:65:da:cc:fe:32:8e:22:28:ca: 29:f9:a1:30:d5:10:69:d7:72:40:ab:eb:65:93:a3:8d:81:3c: b7:9c:9c:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5QhJyNc4+NO3KlnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYTRiN2EtZGU3Yi00ZTg0LWI5MTMtYTFiZWRiZTU4 ZjlhMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk OGZjYThiMmUtNWE5ZC00ZjlmLWE3OTMtNWMyZDA2ZGQ2ZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKA6w1Pi5GfUqHzbw4TW4raO4d9mcIm2cCd DNkK3pZ8RIY5Zda643koVYPItasWziOzzlm5C+o5ezH+OyLBETUl4us/GnWyadla Y3yVPQT3MqCbiGxaFihP78wvbGE1FAZV9JbMM9tE1QvcQVFSiO4iKKWn3DyZ7NvJ OTyQrjJKa7Gd5lGEqXLol4aU6Zy0ELVj9dSJAt413ccc950OkMMdf3bnddE6lWmk 0scbLulKfFHvpVKSU2a0lTIOynxjACjJ36kATzZt7XnEq/CdvgGmaN0h23xniest wyyedUnBpjSxKIK/nqdfQnLdOi8wIgBGI33YWtZogKAE5oXsOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGWprojTRLNjTrHBtrrkRkQmr+m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJh NGI3YS1kZTdiLTRlODQtYjkxMy1hMWJlZGJlNThmOWEvOWRkM2E5N2MtOWQ2Yi0z ZTdmLWExZjQtNDIwNGZjZTllMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYTRiN2EtZGU3Yi00ZTg0LWI5 MTMtYTFiZWRiZTU4ZjlhLzVhYmE0YjdhLWRlN2ItNGU4NC1iOTEzLWExYmVkYmU1 OGY5YS5jcmwwHwYDVR0jBBgwFoAUllRkOrAdiKVOgO9UnjMuz1ujWekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJhNGI3YS1kZTdiLTRlODQtYjkxMy1hMWJl ZGJlNThmOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTxQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPL1JGN7Rk7KDTE7LeeXUCi2q5e2KXljj+dJWJ7GPx4acHPBfmdonk b83mPNFr64xWg04YkWLAv3bk2K+6vFFjztgu5LiQeCm3sHKaNg/2Ky0OJypc44sz TpCpLFcIG1d+G+6sQaIqFwvrf80j2Ykn2qJ+nOqlU6Hq1TTGMiQo96Dbt1syvarh opWsKK88nkdvJPiee0XbVCWn6PSyhStaZl9VoxjCG5inqusfTLtdftQD39XZMhH+ 2ej0wxzxoMCc4pQGYlntD2l7rapIx3SlpAnIhgVJ6OrCarS4Xe1fRcNl2sz+Mo4i KMop+aEw1RBp13JAq+tlk6ONgTy3nJzw -----END CERTIFICATE-----Generated at Sun Jun 28 18:25:33 2026 by rpki-client