$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa File: bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa (raw, json) Hash identifier: MUnFq3eljB7ZKVA6yxdDpblQpx/UCMR8/M/OkKZ102o= Subject key identifier: E9:C1:43:ED:91:00:FE:E0:F7:8F:AD:CA:07:57:5A:83:A1:D6:29:A0 Certificate issuer: /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Certificate serial: 010D0C9F4328584E4AEF3D0B687401515486F680 Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 14159 IP address blocks: 2604:aa00::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:3d:0b:68:74:01:51:54:86:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=3dff630b-bf0a-4a23-986a-735758ed3752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:78:1c:c9:2a:52:fd:3b:4a:b5:bd:43:89:07: d5:bb:a4:aa:e9:7a:ad:2d:55:ba:b4:c0:4e:d8:e6: 99:4f:0b:8a:f2:57:15:50:13:4f:9c:e7:66:5b:ce: 4d:d6:94:ce:27:66:55:d0:bf:44:d4:a2:6c:0d:4d: e2:44:d8:05:fa:31:d1:6a:4f:1d:fe:35:77:06:a1: 87:56:e7:72:34:7c:c5:34:93:84:15:7d:41:80:71: 2e:88:b6:bc:9f:15:b9:3f:74:c3:a7:12:06:18:01: 15:46:a2:a3:d8:f5:7b:49:41:04:81:a0:c2:e6:91: f9:96:91:4f:07:c8:87:aa:f5:be:34:83:41:15:c0: 14:1d:63:9f:18:8d:61:7d:17:41:ea:c3:8f:d4:39: ff:bf:bb:0f:cc:5a:b8:94:37:34:8a:a8:a6:1c:4b: 28:d6:c8:cb:57:c2:03:99:5c:79:e1:28:e9:1d:0d: 24:4a:a3:e4:2b:54:b5:74:50:51:71:63:a5:b6:a8: 1d:b2:90:e2:ce:00:ff:8b:3c:9c:05:31:c2:b0:1f: b9:54:d2:d4:7d:5a:a3:95:32:41:96:29:f5:59:12: d9:c5:4e:3e:9c:0f:b5:18:f3:0f:0e:14:95:c6:62: 48:34:85:b8:20:49:59:a5:74:6a:e0:f8:e9:53:ad: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:43:ED:91:00:FE:E0:F7:8F:AD:CA:07:57:5A:83:A1:D6:29:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/bbc0b940-a0b0-357f-9c12-e3747f91a6e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl X509v3 Authority Key Identifier: keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer sbgp-ipAddrBlock: critical IPv6: 2604:aa00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:17:37:1e:03:d2:31:ec:d4:c8:70:d0:cc:42:07:7c:e5:27: 23:97:f4:87:59:db:9a:21:3a:d7:83:92:e4:81:b1:40:80:3e: ca:cd:0f:75:8e:da:85:bd:42:86:d0:7a:46:de:54:56:90:9b: f2:75:d2:e9:e4:c2:ec:de:ea:a9:f5:f1:8f:2c:f7:1d:11:64: 59:4c:5f:bf:4c:da:51:3b:0f:e9:ed:f3:c5:dd:5f:de:a0:6f: e0:5f:6d:09:4e:12:64:01:9c:8b:1a:e6:5f:3c:bc:b6:08:00: 08:e1:4f:e1:e8:f5:31:c2:7f:61:38:73:02:4d:39:a9:17:47: f5:fa:56:c2:22:37:62:cf:46:3e:cd:31:f7:89:e1:c8:6d:01: 93:38:38:99:39:67:12:7a:ce:10:7a:3c:69:e1:95:e8:ea:39: 6c:90:e5:58:e6:66:5d:4e:9d:80:ff:9b:57:fe:38:42:c0:ef: 62:4e:20:9d:f6:86:70:fb:d5:c8:f5:59:f4:31:9f:23:b4:9e: be:9f:5f:9d:86:db:9e:ca:f2:d0:24:48:22:11:66:e2:47:6d: 7e:6b:6e:a2:71:ec:47:36:87:ef:66:37:67:75:f0:21:43:9c: 8c:15:e9:64:ef:9b:98:21:e6:91:db:7d:aa:74:70:08:16:3f: 10:9a:fc:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5K7z0LaHQBUVSG9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw Y2Y5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk M2RmZjYzMGItYmYwYS00YTIzLTk4NmEtNzM1NzU4ZWQzNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ngcySpS/TtKtb1DiQfVu6Sq6XqtLVW6tMBO 2OaZTwuK8lcVUBNPnOdmW85N1pTOJ2ZV0L9E1KJsDU3iRNgF+jHRak8d/jV3BqGH VudyNHzFNJOEFX1BgHEuiLa8nxW5P3TDpxIGGAEVRqKj2PV7SUEEgaDC5pH5lpFP B8iHqvW+NINBFcAUHWOfGI1hfRdB6sOP1Dn/v7sPzFq4lDc0iqimHEso1sjLV8ID mVx54SjpHQ0kSqPkK1S1dFBRcWOltqgdspDizgD/izycBTHCsB+5VNLUfVqjlTJB lin1WRLZxU4+nA+1GPMPDhSVxmJINIW4IElZpXRq4PjpU62W1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOnBQ+2RAP7g94+tygdXWoOh1imgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvYmJjMGI5NDAtYTBiMC0z NTdmLTljMTItZTM3NDdmOTFhNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1 OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3 ZWJmYzBjZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBFzceA9Ix7NTIcNDMQgd85Scjl/SHWduaITrXg5LkgbFAgD7KzQ91 jtqFvUKG0HpG3lRWkJvyddLp5MLs3uqp9fGPLPcdEWRZTF+/TNpROw/p7fPF3V/e oG/gX20JThJkAZyLGuZfPLy2CAAI4U/h6PUxwn9hOHMCTTmpF0f1+lbCIjdiz0Y+ zTH3ieHIbQGTODiZOWcSes4Qejxp4ZXo6jlskOVY5mZdTp2A/5tX/jhCwO9iTiCd 9oZw+9XI9Vn0MZ8jtJ6+n1+dhtueyvLQJEgiEWbiR21+a26icexHNofvZjdndfAh Q5yMFelk75uYIeaR232qdHAIFj8Qmvxf -----END CERTIFICATE-----Generated at Wed Jul 8 15:48:32 2026 by rpki-client