$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa File: 970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json) Hash identifier: gjOA0NxbSOa+6HaQoulTkFhUYHO9xCPvAbt7kaZB/mE= Subject key identifier: 82:AF:73:F8:C4:2F:8F:0A:2C:ED:17:7C:80:0C:5B:AB:B3:75:43:2B Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584E0A6FF2D4D337A625BA2A3680 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 10390 IP address blocks: 2620:10f:400e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:f2:d4:d3:37:a6:25:ba:2a:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=05bae107-db38-4523-90c4-f9f6a8db432c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:90:ce:9e:f8:c6:50:1a:4f:03:9b:86:5b: 10:b8:11:7a:2d:9c:a7:3b:6e:40:15:14:cd:e8:9f: 3b:8f:43:85:01:ce:95:d1:70:35:79:a0:08:8a:1a: 3f:8d:5c:24:50:b0:64:f2:57:22:7d:a9:45:c1:eb: f3:11:1f:65:30:8b:7a:e3:b6:e6:3a:fb:b6:b4:a8: 80:1f:eb:0b:bd:94:8c:01:eb:e2:ce:13:6d:2d:2d: e1:9f:b7:d4:65:61:d8:ff:71:ec:22:0e:df:37:5c: 11:50:a5:83:01:85:11:f8:3c:50:64:0c:39:65:3d: f4:11:69:d2:20:a3:9a:43:81:dc:2a:b5:86:37:1d: 8c:48:a8:e2:22:9a:5b:f0:51:61:b3:39:2b:3b:fe: 62:0b:43:c7:ee:b4:10:b1:35:c6:db:10:04:0b:9b: 9f:0e:62:6f:48:5d:14:df:63:07:a9:cf:86:8b:6f: f3:9a:cb:dc:8e:60:b5:09:04:da:6c:d3:8c:a2:a4: fe:70:6f:94:15:05:43:27:59:89:d9:ca:41:fa:b4: c6:20:87:18:62:95:14:04:03:67:5f:d4:4c:f1:d3: 72:e0:20:aa:1a:83:49:a0:09:33:51:8f:de:11:92: 07:d0:00:c5:1e:95:4b:ad:ef:d5:e9:cc:a8:7c:65: 4a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:73:F8:C4:2F:8F:0A:2C:ED:17:7C:80:0C:5B:AB:B3:75:43:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv6: 2620:10f:400e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f9:7b:72:97:e2:7c:ce:32:99:71:00:d3:13:21:f7:50:e2: 8e:38:5e:f3:ff:c3:10:70:13:34:17:76:e7:62:f2:6d:14:2d: 7f:d6:70:a1:62:52:5a:68:08:8a:81:70:68:0e:34:da:73:05: 9c:b9:e8:0f:5e:ce:f8:be:21:9c:c4:39:2e:8e:dd:7e:70:8e: cf:9b:20:e8:a1:82:5f:ff:b1:71:00:89:83:29:6a:e7:a2:be: ae:7c:34:6b:e8:22:51:b2:6f:ef:c3:69:43:24:13:92:00:7e: e5:0a:e2:34:cd:d6:dc:eb:75:27:72:7a:93:da:36:f4:65:6e: c2:d6:44:d8:dc:28:99:fb:32:58:c9:b1:f4:80:9d:1f:27:de: 31:44:60:67:f3:e9:4f:fb:f6:7b:cc:a3:7d:d1:57:01:9a:02: 9a:12:f8:d1:98:a5:10:26:ab:3d:60:7f:cb:95:27:4f:39:bd: 4c:0f:e5:b6:84:43:6b:5c:b3:fc:ed:0f:79:57:4c:fc:84:91: 6e:93:33:41:52:ec:23:7f:8e:d5:5d:44:39:a6:9d:c8:4a:60: db:46:c4:2c:8a:1a:f8:60:a5:d4:4d:1a:37:2f:2f:cc:cf:90: 95:23:a8:35:61:a6:25:a5:0a:a2:fd:ef:45:4c:13:f9:c0:1a: 91:f2:d3:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Kb/LU0zemJboqNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk MDViYWUxMDctZGIzOC00NTIzLTkwYzQtZjlmNmE4ZGI0MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8mQzp74xlAaTwObhlsQuBF6LZynO25AFRTN 6J87j0OFAc6V0XA1eaAIiho/jVwkULBk8lcifalFwevzER9lMIt647bmOvu2tKiA H+sLvZSMAevizhNtLS3hn7fUZWHY/3HsIg7fN1wRUKWDAYUR+DxQZAw5ZT30EWnS IKOaQ4HcKrWGNx2MSKjiIppb8FFhszkrO/5iC0PH7rQQsTXG2xAEC5ufDmJvSF0U 32MHqc+Gi2/zmsvcjmC1CQTabNOMoqT+cG+UFQVDJ1mJ2cpB+rTGIIcYYpUUBANn X9RM8dNy4CCqGoNJoAkzUY/eEZIH0ADFHpVLre/V6cyofGVKhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIKvc/jEL48KLO0XfIAMW6uzdUMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOTcwYjdlMDQtMDFmMS0z OTI3LTkwYTAtNzlkN2E5MDRmY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABD0AO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACb5e3KX4nzOMplxANMTIfdQ4o44XvP/wxBwEzQXdudi8m0ULX/W cKFiUlpoCIqBcGgONNpzBZy56A9ezvi+IZzEOS6O3X5wjs+bIOihgl//sXEAiYMp aueivq58NGvoIlGyb+/DaUMkE5IAfuUK4jTN1tzrdSdyepPaNvRlbsLWRNjcKJn7 MljJsfSAnR8n3jFEYGfz6U/79nvMo33RVwGaApoS+NGYpRAmqz1gf8uVJ085vUwP 5baEQ2tcs/ztD3lXTPyEkW6TM0FS7CN/jtVdRDmmnchKYNtGxCyKGvhgpdRNGjcv L8zPkJUjqDVhpiWlCqL970VME/nAGpHy00w= -----END CERTIFICATE-----Generated at Sat Jun 6 18:31:50 2026 by rpki-client