$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa File: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (raw, json) Hash identifier: 9wL+wU49fYYjn8dshil/mZZM3LuQ/NW+dRkDAIRRCK8= Subject key identifier: 33:C1:5A:75:24:93:95:49:DB:78:45:A4:4D:63:FE:CF:DC:3A:D9:19 Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584E296F18EF6DB2E7C51931DEE0 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 397301 IP address blocks: 2604:30::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:18:ef:6d:b2:e7:c5:19:31:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=6d543607-b231-4e72-93eb-aceb0b87abe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:67:14:1d:f3:10:67:69:b2:20:a3:b4:74: ef:c8:28:b6:12:b9:d5:d2:2d:23:6c:4b:54:a6:44: e5:6d:3b:8b:d7:ca:c6:6c:2e:c5:4c:77:97:16:2c: 9a:8c:a9:3e:92:de:24:c9:c0:e0:c1:f8:8d:90:82: 0d:2b:eb:67:f5:d0:b0:52:cf:bb:7d:24:0a:7a:1f: 3c:e2:63:38:ce:0f:a5:5d:48:82:81:c9:7d:a4:e8: 09:63:38:39:ee:06:10:4f:4a:c1:cb:87:85:12:d2: 0d:5f:6f:5d:6f:e6:37:57:ab:28:9a:d8:df:cd:6f: 24:c9:97:16:9a:e2:f1:0a:73:ad:4b:48:e4:c3:a9: 2f:02:6c:92:fd:66:d8:4b:d2:26:8a:ac:12:2f:4a: cd:56:f1:a4:d9:47:d6:c0:2e:25:38:d0:83:80:15: 12:1b:21:55:52:0a:e6:43:54:48:88:4e:ae:97:77: 67:0f:72:05:0a:2a:79:69:ec:4f:ba:da:66:94:6b: f6:c3:ff:d3:85:9f:0a:36:a7:a9:6a:7c:53:17:ee: d2:86:95:e8:28:46:d5:3f:20:5f:e8:cb:d7:96:ef: e0:90:cd:92:f9:d5:42:f1:64:81:3d:db:87:a8:75: 2b:0c:19:b1:b5:ca:26:10:39:b9:cc:20:e6:a3:cf: 1f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C1:5A:75:24:93:95:49:DB:78:45:A4:4D:63:FE:CF:DC:3A:D9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/4038b20b-42b0-34fd-ab16-9e3f170db289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv6: 2604:30::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e4:85:07:16:7f:97:ad:c9:55:dd:5d:32:de:f6:47:1c:35: 64:ba:ac:4c:9b:63:1b:ee:3d:61:37:7e:30:41:f5:2b:d0:62: 83:13:2d:21:d7:41:40:53:05:8a:d9:d9:41:67:95:64:40:1d: 5c:6d:21:e2:0e:25:15:dc:b7:04:64:9a:f3:bb:60:29:c3:59: 21:69:39:1a:e1:6a:d1:64:74:54:e3:dc:06:f4:f8:fd:5e:a7: d2:ee:0b:99:41:f5:20:9e:6b:9a:e6:69:f1:9d:82:2c:e7:ce: 18:85:a9:d8:64:35:1f:58:17:e1:ed:8a:ac:d4:f4:a9:d0:7c: b6:b9:36:c9:1b:90:8f:82:47:bf:b1:05:de:dd:6e:ef:aa:06: 10:57:19:47:ed:a0:9e:d5:01:43:a6:d6:15:1d:b4:54:12:c9: 1d:02:4e:3b:25:92:f5:24:a1:a2:a6:98:a6:13:4f:cf:2b:78: f4:a7:37:5c:34:6b:1a:a7:ff:16:f5:06:34:69:25:1b:66:f1: df:2e:76:cc:fc:23:a5:b6:e0:21:bd:fc:9b:83:6c:7c:6e:78: c2:2b:59:b5:1d:a2:3f:e0:74:38:5c:01:9a:3f:ab:3c:d3:67: 9d:3c:b6:a8:6c:dd:99:7c:d4:c6:b3:a9:a6:cc:65:b6:f9:3b: 62:30:29:5c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4pbxjvbbLnxRkx3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk NmQ1NDM2MDctYjIzMS00ZTcyLTkzZWItYWNlYjBiODdhYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlghnFB3zEGdpsiCjtHTvyCi2ErnV0i0jbEtU pkTlbTuL18rGbC7FTHeXFiyajKk+kt4kycDgwfiNkIINK+tn9dCwUs+7fSQKeh88 4mM4zg+lXUiCgcl9pOgJYzg57gYQT0rBy4eFEtINX29db+Y3V6somtjfzW8kyZcW muLxCnOtS0jkw6kvAmyS/WbYS9ImiqwSL0rNVvGk2UfWwC4lONCDgBUSGyFVUgrm Q1RIiE6ul3dnD3IFCip5aexPutpmlGv2w//ThZ8KNqepanxTF+7ShpXoKEbVPyBf 6MvXlu/gkM2S+dVC8WSBPduHqHUrDBmxtcomEDm5zCDmo88f3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDPBWnUkk5VJ23hFpE1j/s/cOtkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNDAzOGIyMGItNDJiMC0z NGZkLWFiMTYtOWUzZjE3MGRiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQAMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCI5IUHFn+XrclV3V0y3vZHHDVkuqxMm2Mb7j1hN34wQfUr0GKDEy0h 10FAUwWK2dlBZ5VkQB1cbSHiDiUV3LcEZJrzu2Apw1khaTka4WrRZHRU49wG9Pj9 XqfS7guZQfUgnmua5mnxnYIs584YhanYZDUfWBfh7Yqs1PSp0Hy2uTbJG5CPgke/ sQXe3W7vqgYQVxlH7aCe1QFDptYVHbRUEskdAk47JZL1JKGippimE0/PK3j0pzdc NGsap/8W9QY0aSUbZvHfLnbM/COltuAhvfybg2x8bnjCK1m1HaI/4HQ4XAGaP6s8 02edPLaobN2ZfNTGs6mmzGW2+TtiMClc -----END CERTIFICATE-----Generated at Fri Jul 17 11:40:48 2026 by rpki-client