$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa File: 379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa (raw, json) Hash identifier: 8SA8ui4MTCJLhaP1RdLzvc1QcHGLFT1mVKSv6nlNig8= Subject key identifier: 8C:AE:09:91:0D:C1:59:87:5B:6A:7D:76:5E:64:24:74:0E:09:1E:30 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584E2AD46A48F5AFDE5C1664E800 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 16509 IP address blocks: 2604:ba80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:6a:48:f5:af:de:5c:16:64:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=8f7dd6bb-61a5-4a3c-91ab-a6b1d456cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ca:e7:0f:87:db:23:be:ee:d0:5a:21:7b:64: b2:b6:94:24:90:93:74:5a:66:bb:dd:6e:80:3f:48: 3c:92:f7:1a:c6:7f:c9:68:69:8c:02:4c:36:d8:b7: 6d:2e:00:1c:f6:32:ae:2c:35:67:5b:c8:74:6a:b1: 31:03:d2:64:fd:dc:08:7c:31:9c:fe:3c:dc:8f:5e: 6f:77:b0:a3:bc:4b:9e:10:4c:53:1c:3d:7c:f7:53: 2e:e8:31:f7:28:49:34:eb:36:67:7b:1b:af:1d:77: ef:94:f4:20:df:fe:1d:ee:4e:77:80:18:ac:f8:0f: 4b:6e:64:93:0e:39:1c:b9:ea:ca:09:15:f8:af:d4: 53:f8:0f:d1:82:cd:b8:71:77:3f:b8:a7:a4:3b:1f: c8:7f:08:16:bc:a0:55:4e:22:13:71:88:2e:cc:0c: f7:8a:72:2f:e7:b2:13:ed:d0:00:ce:db:72:77:bb: 9d:65:e9:06:0d:05:9d:8d:af:dd:28:bc:56:c9:d2: 14:25:0f:76:b8:74:3c:aa:18:8b:4d:09:12:99:1c: 1b:27:ff:d2:09:d8:55:7f:3a:6b:2e:04:6a:e3:71: d9:51:54:f4:6c:55:2e:74:2e:ef:48:cb:e8:47:81: 32:fb:f1:c0:c5:76:24:c2:2c:4f:19:81:33:c0:a6: df:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:09:91:0D:C1:59:87:5B:6A:7D:76:5E:64:24:74:0E:09:1E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/379a2a92-5b28-35c8-9d8d-02d0f4e1d9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:09:98:b0:de:32:b4:03:db:f0:72:c2:13:cf:23:a3:eb:9c: 9e:b5:d0:de:ac:94:80:8f:6c:f4:4e:ac:92:86:94:32:b8:60: 52:a9:52:db:7e:02:20:62:fb:09:db:48:4f:6b:8c:33:20:da: 8a:0a:fa:cc:ed:41:61:24:9f:54:3f:58:bc:8b:e4:b7:3f:42: f9:33:8e:a1:01:1d:ed:42:cd:59:6c:90:1d:e9:f9:ce:15:33: b4:32:ca:89:3a:47:5e:2b:2e:bd:4d:22:c0:a8:40:f2:3c:44: 3b:70:f3:b2:e5:ad:0e:28:0c:5c:33:72:28:9a:ed:64:65:94: 1d:42:0f:f3:c6:a2:62:c6:be:b2:a8:52:e6:1d:a3:37:14:d1: a5:53:2c:38:29:95:e1:de:47:45:10:01:83:5d:f6:3b:97:89: 00:3c:b0:a7:f0:27:ee:f8:70:24:7d:a2:e9:10:38:94:92:43: e3:8c:be:e4:14:99:3c:38:25:ab:e1:7c:a7:8b:f6:74:46:56: b9:8c:e2:77:a4:43:c6:5a:89:b1:e3:e9:f8:4a:d2:03:69:61: 91:96:0b:1a:d4:97:5a:89:5d:97:8e:88:58:b0:ca:7c:17:32: 7b:96:b4:c3:06:0b:6f:5d:23:29:29:ee:74:95:9c:34:ea:3d: a6:85:3d:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4q1GpI9a/eXBZk6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk OGY3ZGQ2YmItNjFhNS00YTNjLTkxYWItYTZiMWQ0NTZjY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsrnD4fbI77u0Fohe2SytpQkkJN0Wma73W6A P0g8kvcaxn/JaGmMAkw22LdtLgAc9jKuLDVnW8h0arExA9Jk/dwIfDGc/jzcj15v d7CjvEueEExTHD1891Mu6DH3KEk06zZnexuvHXfvlPQg3/4d7k53gBis+A9LbmST DjkcuerKCRX4r9RT+A/Rgs24cXc/uKekOx/IfwgWvKBVTiITcYguzAz3inIv57IT 7dAAzttyd7udZekGDQWdja/dKLxWydIUJQ92uHQ8qhiLTQkSmRwbJ//SCdhVfzpr LgRq43HZUVT0bFUudC7vSMvoR4Ey+/HAxXYkwixPGYEzwKbfLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyuCZENwVmHW2p9dl5kJHQOCR4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMzc5YTJhOTItNWIyOC0z NWM4LTlkOGQtMDJkMGY0ZTFkOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgS6gAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8JmLDeMrQD2/BywhPPI6PrnJ610N6slICPbPROrJKGlDK4YFKp Utt+AiBi+wnbSE9rjDMg2ooK+sztQWEkn1Q/WLyL5Lc/QvkzjqEBHe1CzVlskB3p +c4VM7Qyyok6R14rLr1NIsCoQPI8RDtw87LlrQ4oDFwzciia7WRllB1CD/PGomLG vrKoUuYdozcU0aVTLDgpleHeR0UQAYNd9juXiQA8sKfwJ+74cCR9oukQOJSSQ+OM vuQUmTw4JavhfKeL9nRGVrmM4nekQ8ZaibHj6fhK0gNpYZGWCxrUl1qJXZeOiFiw ynwXMnuWtMMGC29dIykp7nSVnDTqPaaFPdQ= -----END CERTIFICATE-----Generated at Wed Jun 24 04:23:32 2026 by rpki-client