$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: wgZihMBjrGqCNcwBjTRt+3jgEbHjn0qfInyDrnsK0/8= Subject key identifier: E9:77:9A:EA:05:93:71:EA:5D:BF:93:E0:46:07:4E:98:B0:9D:C8:28 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584E2D9F25CA178D763ABAA42C80 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:25:ca:17:8d:76:3a:ba:a4:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=3a257beb-e998-4427-b8ea-ac92a4ab6172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fd:9f:a6:30:09:3c:d1:b5:7c:4f:1e:73:eb: ab:7a:ba:84:1e:62:3e:7e:bb:a3:10:c9:ce:ec:3f: c2:1c:57:ed:f0:8e:c8:5a:a9:b2:2b:97:5d:62:e7: 7d:38:3a:17:ea:2b:4f:b9:9b:c3:11:df:95:fe:52: c7:23:ab:4c:04:c6:46:4b:fa:d8:06:c2:ac:26:f3: c7:a1:36:e8:d1:f6:72:82:62:75:5a:a1:38:d7:57: e5:4e:af:ed:90:3b:c6:de:eb:88:bf:ce:53:b9:fa: 26:e3:38:aa:61:33:91:4d:38:ae:b7:80:b4:f8:81: 3b:e1:e0:f0:c1:15:65:6f:7a:d9:9a:48:57:f3:c6: 41:a8:af:bd:50:a6:56:e0:31:ca:b0:e5:93:05:52: 55:dd:23:7b:b3:a0:95:c3:9a:44:11:89:88:4c:24: c6:94:17:9f:38:2f:2b:a2:7e:df:06:75:ae:53:89: ea:5f:fc:d7:40:8b:65:fb:6e:4f:17:7b:4f:ca:85: fa:12:33:65:0c:da:9d:ff:b7:92:30:9c:69:26:03: 0f:79:cf:16:94:d0:0f:4f:e0:6b:1d:d7:48:fa:50: 1f:a4:dc:01:9a:58:47:6a:e9:45:f6:d3:43:47:37: e2:a1:92:46:93:e5:8c:d5:2a:1c:8d:5d:90:db:b9: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:9A:EA:05:93:71:EA:5D:BF:93:E0:46:07:4E:98:B0:9D:C8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:79:a6:f0:37:6f:a6:3a:41:51:c0:ab:6e:e4:75:b1:ac:db: ae:50:8b:69:23:0c:f2:2e:cf:25:5f:6d:cc:15:60:1f:72:81: ce:fa:a7:c5:e6:5d:59:75:25:33:0f:b6:b0:ee:3d:1a:1e:43: 61:a4:1e:72:1c:3c:11:2b:f4:19:18:3e:11:27:e4:d7:30:0d: 96:fc:ab:70:89:48:48:88:d9:26:d8:17:a9:7c:7d:7b:ac:db: 4b:87:a5:e4:bb:c7:43:59:35:11:2f:21:1b:c9:11:0e:fc:f1: b2:bd:10:06:1a:97:2e:c1:ad:e7:f2:dc:90:61:e6:44:10:7e: 05:f3:e0:3c:88:bf:ec:09:a8:9b:22:c5:da:5b:93:53:54:b2: 41:d9:c8:5e:b3:dd:41:80:8b:e4:38:f1:32:94:21:b8:40:f0: f8:92:5b:a1:e6:8c:77:43:25:5c:e9:b7:36:d6:f3:77:e5:b5: 56:44:6f:91:f4:96:ec:4f:fc:3c:02:a8:a7:18:46:98:cc:32: a7:d8:ac:d7:fe:56:f1:ec:55:ff:20:df:c0:db:e8:6e:f5:37: 80:20:f7:4b:a5:11:31:61:83:c5:83:54:f8:e5:78:36:8d:bb: 05:df:16:a7:3e:b5:31:4a:d6:cf:56:0b:59:93:ed:e4:03:73: 79:64:d6:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4tnyXKF412OrqkLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk M2EyNTdiZWItZTk5OC00NDI3LWI4ZWEtYWM5MmE0YWI2MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v2fpjAJPNG1fE8ec+urerqEHmI+frujEMnO 7D/CHFft8I7IWqmyK5ddYud9ODoX6itPuZvDEd+V/lLHI6tMBMZGS/rYBsKsJvPH oTbo0fZygmJ1WqE411flTq/tkDvG3uuIv85Tufom4ziqYTORTTiut4C0+IE74eDw wRVlb3rZmkhX88ZBqK+9UKZW4DHKsOWTBVJV3SN7s6CVw5pEEYmITCTGlBefOC8r on7fBnWuU4nqX/zXQItl+25PF3tPyoX6EjNlDNqd/7eSMJxpJgMPec8WlNAPT+Br HddI+lAfpNwBmlhHaulF9tNDRzfioZJGk+WM1SocjV2Q27krqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOl3muoFk3HqXb+T4EYHTpiwncgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA15pvA3b6Y6QVHAq27kdbGs265Qi2kjDPIuzyVfbcwVYB9ygc76 p8XmXVl1JTMPtrDuPRoeQ2GkHnIcPBEr9BkYPhEn5NcwDZb8q3CJSEiI2SbYF6l8 fXus20uHpeS7x0NZNREvIRvJEQ788bK9EAYaly7Brefy3JBh5kQQfgXz4DyIv+wJ qJsixdpbk1NUskHZyF6z3UGAi+Q48TKUIbhA8PiSW6HmjHdDJVzptzbW83fltVZE b5H0luxP/DwCqKcYRpjMMqfYrNf+VvHsVf8g38Db6G71N4Ag90ulETFhg8WDVPjl eDaNuwXfFqc+tTFK1s9WC1mT7eQDc3lk1og= -----END CERTIFICATE-----Generated at Tue Jun 16 21:32:52 2026 by rpki-client