$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa File: 0454ffd6-368c-3998-b5bc-582cda1db8b6.roa (raw, json) Hash identifier: CjCXix+FNPWavxpeCzrsjerdeDJ45q2an3OUPoRzQks= Subject key identifier: C4:45:7A:D0:07:61:22:DE:54:6A:2E:83:38:CE:9E:C7:4C:3C:6B:43 Certificate issuer: /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Certificate serial: 010D0C9F4328584E3E5F264228686FFEA8735240 Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 399214 IP address blocks: 2602:809:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:26:42:28:68:6f:fe:a8:73:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=4a2b386e-f17e-4327-8be7-83668cea8f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:e3:c3:09:c8:38:7f:76:27:13:f0:f8:8b: ef:22:95:aa:d8:e7:2c:05:32:bc:13:71:13:02:eb: 3f:e1:cb:b0:fa:17:76:8d:15:be:2e:e4:1a:f1:ac: 78:0c:53:c3:55:b8:45:c7:78:0d:32:44:e5:c6:04: 1e:fd:b3:d4:4f:c3:35:96:4a:43:5a:5a:58:30:c1: 15:a0:69:07:2e:58:3b:de:9b:76:2a:11:66:99:37: cf:3f:c3:cc:6c:8d:e6:d7:fd:08:e1:a2:29:c0:13: 33:40:ec:61:31:93:bd:60:e0:99:ac:3d:8f:e9:8a: 6b:c3:6a:e8:4d:19:fc:ad:b3:fb:40:dc:bb:d9:c4: f6:d1:c6:07:00:02:d8:32:74:27:c1:23:1e:d4:d0: ea:03:ad:60:c9:14:78:c9:e9:34:f0:f9:df:7d:f8: 3a:f7:ba:15:b5:83:3f:c2:45:19:ae:0c:c6:cb:45: 3f:0e:ad:0c:ea:1f:aa:88:e3:e6:75:d2:fa:1a:73: 48:ce:ce:0b:4d:43:09:eb:1d:82:97:84:95:1a:4a: eb:8e:de:d5:d9:3f:49:ae:4e:a3:ac:e7:cc:5d:ed: a7:83:f7:60:67:78:cb:d0:dd:46:88:87:4a:56:82: 81:e4:cc:80:cd:aa:5b:49:f1:31:d8:3c:68:88:ae: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:45:7A:D0:07:61:22:DE:54:6A:2E:83:38:CE:9E:C7:4C:3C:6B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/0454ffd6-368c-3998-b5bc-582cda1db8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl X509v3 Authority Key Identifier: keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer sbgp-ipAddrBlock: critical IPv6: 2602:809:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bd:d5:8c:06:00:64:df:c3:e4:40:1c:ba:01:3f:d5:ed:a2: 07:aa:f9:85:e3:67:b8:3d:34:ee:0f:3e:a2:fb:37:2c:c3:37: 13:94:79:fd:b7:96:4a:5a:10:dd:54:af:4c:d6:71:e2:bd:fd: a6:34:ea:35:fc:63:f8:6e:5b:b0:50:84:85:74:87:ed:de:38: ab:31:b0:dd:d7:a8:53:6d:b8:a4:50:ed:18:b8:57:95:f2:70: 9f:81:dd:09:bf:da:ea:1a:62:aa:c8:e5:98:3f:e2:23:7e:79: 40:b6:bb:87:3e:e1:08:cb:df:cc:1a:00:37:45:6c:ae:2c:b8: bb:ea:27:ef:79:49:f5:5a:80:be:75:53:9c:e1:e4:50:90:9e: a9:b9:c2:7b:41:fc:30:1b:3a:57:be:b5:5b:06:e3:a3:ab:32: 4e:12:70:08:b4:89:25:68:36:b7:94:24:8b:83:ab:05:78:3b: d5:67:9c:af:80:7f:2a:4d:a1:ce:09:2b:dd:c6:8f:3e:89:34: 84:5c:08:e6:e2:ee:84:b6:74:56:5a:b8:98:23:c4:40:e9:92: 25:67:d7:d0:76:9b:0a:f9:80:8a:93:28:d7:bc:00:38:d3:fe: a0:af:fe:a3:e7:22:6f:74:f3:5e:52:de:0d:28:2f:1c:b7:47: ed:04:a4:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+XyZCKGhv/qhzUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk ZmQxMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NGEyYjM4NmUtZjE3ZS00MzI3LThiZTctODM2NjhjZWE4ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlXjwwnIOH92JxPw+IvvIpWq2OcsBTK8E3ET Aus/4cuw+hd2jRW+LuQa8ax4DFPDVbhFx3gNMkTlxgQe/bPUT8M1lkpDWlpYMMEV oGkHLlg73pt2KhFmmTfPP8PMbI3m1/0I4aIpwBMzQOxhMZO9YOCZrD2P6Yprw2ro TRn8rbP7QNy72cT20cYHAALYMnQnwSMe1NDqA61gyRR4yek08Pnfffg697oVtYM/ wkUZrgzGy0U/Dq0M6h+qiOPmddL6GnNIzs4LTUMJ6x2Cl4SVGkrrjt7V2T9Jrk6j rOfMXe2ng/dgZ3jL0N1GiIdKVoKB5MyAzapbSfEx2DxoiK7DbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMRFetAHYSLeVGougzjOnsdMPGtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvMDQ1NGZmZDYtMzY4Yy0z OTk4LWI1YmMtNTgyY2RhMWRiOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4 OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh ODlmMmRmZDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIICWAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIu91YwGAGTfw+RAHLoBP9Xtogeq+YXjZ7g9NO4PPqL7NyzDNxOU ef23lkpaEN1Ur0zWceK9/aY06jX8Y/huW7BQhIV0h+3eOKsxsN3XqFNtuKRQ7Ri4 V5XycJ+B3Qm/2uoaYqrI5Zg/4iN+eUC2u4c+4QjL38waADdFbK4suLvqJ+95SfVa gL51U5zh5FCQnqm5wntB/DAbOle+tVsG46OrMk4ScAi0iSVoNreUJIuDqwV4O9Vn nK+AfypNoc4JK93Gjz6JNIRcCObi7oS2dFZauJgjxEDpkiVn19B2mwr5gIqTKNe8 ADjT/qCv/qPnIm90815S3g0oLxy3R+0EpEc= -----END CERTIFICATE-----Generated at Mon Jun 29 10:42:28 2026 by rpki-client