$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa File: 3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa (raw, json) Hash identifier: ejl9/K/BTsDzM6vkhJ++wNfinU/fmmHmKpMsLv7/2Is= Subject key identifier: B8:E0:F7:B5:17:D5:DE:11:2A:28:B2:13:51:D1:50:4F:84:05:7D:06 Certificate issuer: /CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Certificate serial: 010D0C9F4328584E3069AC942DD27511DC49E200 Authority key identifier: 91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 20382 IP address blocks: 2604:2da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:ac:94:2d:d2:75:11:dc:49:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1255ad84-f9f2-464b-b50a-a9d268c5bb4e Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=9f7c0041-b597-4479-a2dc-2c7000804d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:95:8b:89:28:de:67:26:fc:d4:61:25:50: 21:7e:68:62:c5:47:18:46:18:87:b4:e5:f3:8f:81: b5:81:da:2f:9c:d9:1f:c9:4a:34:29:1d:73:f9:a3: 82:c2:bf:44:17:a1:92:71:06:f0:ea:d5:62:1d:74: 81:53:90:1a:17:a5:40:01:2f:32:9b:61:1e:ba:06: 6a:07:67:4d:fe:11:da:aa:38:c7:7a:81:f2:6f:b3: 88:19:23:74:3d:f1:be:ae:f4:78:ec:97:94:2c:c1: fe:06:0e:75:1f:36:f8:14:63:c6:84:0e:96:a8:12: f4:ee:0c:f1:e5:03:04:2b:a2:d6:40:cd:c8:b9:11: ee:29:89:34:e8:11:0d:27:d9:ff:ce:b0:d0:6a:6b: c4:fa:87:42:47:f6:23:1c:4e:6c:4b:65:ee:84:aa: d5:4f:1e:37:88:d0:9e:bb:12:38:14:d9:2d:8f:ee: 33:a2:e9:d2:40:a1:e2:6e:0e:40:5f:1c:c3:e4:39: 7a:2c:05:a3:e0:60:c9:bd:51:5f:ae:39:2d:89:a5: d6:d9:10:79:52:85:13:b1:cd:5d:b8:50:67:32:54: 0f:f8:ad:23:6d:60:17:8d:e6:73:5f:a7:75:19:8a: b3:7e:4c:31:3e:55:43:dd:3b:fc:79:ff:6b:b0:8b: 10:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:F7:B5:17:D5:DE:11:2A:28:B2:13:51:D1:50:4F:84:05:7D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/3bfde92c-28f4-3074-8e54-b6ea5d7f73db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.crl X509v3 Authority Key Identifier: keyid:91:74:E7:CC:21:3F:4A:46:CA:D5:70:12:3D:1A:49:DF:27:46:4E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1255ad84-f9f2-464b-b50a-a9d268c5bb4e.cer sbgp-ipAddrBlock: critical IPv6: 2604:2da0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:46:73:47:2a:ae:ed:93:af:17:d7:15:a3:99:d3:c0:d0:df: 55:0f:83:37:cf:72:f8:3b:6a:dc:21:cf:b4:9f:3f:a0:8f:75: d2:a5:68:48:2f:81:45:ea:7a:08:29:6f:0e:54:16:7e:b2:7c: 4e:70:a7:48:0e:9f:08:83:05:ae:f2:43:c3:c8:7a:6b:80:7f: cb:63:69:4b:6b:32:88:ed:c2:7f:46:a4:16:d7:80:3f:25:aa: f4:b7:d9:3a:5e:3f:5b:5b:7a:78:fe:d6:3d:8a:9b:26:28:28: 0c:71:38:bc:84:10:ce:d8:01:c1:5c:1d:d3:9a:41:b0:16:63: f9:93:43:5d:8d:29:22:78:fb:83:de:c7:1f:29:11:7b:d5:6c: 22:f0:17:de:d4:ca:61:74:aa:f0:bf:fc:6a:a7:bc:af:51:2f: 5f:61:d1:47:24:af:f3:16:8b:69:cd:ad:d5:a7:d7:3f:5f:43: 3d:31:2f:2a:b2:53:33:59:12:ce:89:1d:5b:1a:ef:52:10:90: 5b:38:f8:f7:f7:1f:70:c2:e7:eb:10:3c:16:0c:46:57:22:a5: 44:43:47:6e:c3:56:f4:80:f3:23:e7:e3:fc:58:16:c0:f1:36: d3:a7:70:84:bb:1e:33:d0:05:d9:a7:5f:a4:05:6e:b8:c3:42: 02:63:41:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4waayULdJ1EdxJ4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI1NWFkODQtZjlmMi00NjRiLWI1MGEtYTlkMjY4YzVi YjRlMB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk OWY3YzAwNDEtYjU5Ny00NDc5LWEyZGMtMmM3MDAwODA0ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5iVi4ko3mcm/NRhJVAhfmhixUcYRhiHtOXz j4G1gdovnNkfyUo0KR1z+aOCwr9EF6GScQbw6tViHXSBU5AaF6VAAS8ym2EeugZq B2dN/hHaqjjHeoHyb7OIGSN0PfG+rvR47JeULMH+Bg51Hzb4FGPGhA6WqBL07gzx 5QMEK6LWQM3IuRHuKYk06BENJ9n/zrDQamvE+odCR/YjHE5sS2XuhKrVTx43iNCe uxI4FNktj+4zounSQKHibg5AXxzD5Dl6LAWj4GDJvVFfrjktiaXW2RB5UoUTsc1d uFBnMlQP+K0jbWAXjeZzX6d1GYqzfkwxPlVD3Tv8ef9rsIsQSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLjg97UX1d4RKiiyE1HRUE+EBX0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1 YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQyNjhjNWJiNGUvM2JmZGU5MmMtMjhmNC0z MDc0LThlNTQtYjZlYTVkN2Y3M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTI1NWFkODQtZjlmMi00NjRiLWI1 MGEtYTlkMjY4YzViYjRlLzEyNTVhZDg0LWY5ZjItNDY0Yi1iNTBhLWE5ZDI2OGM1 YmI0ZS5jcmwwHwYDVR0jBBgwFoAUkXTnzCE/SkbK1XASPRpJ3ydGTiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xMjU1YWQ4NC1mOWYyLTQ2NGItYjUwYS1hOWQy NjhjNWJiNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQtoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDGRnNHKq7tk68X1xWjmdPA0N9VD4M3z3L4O2rcIc+0nz+gj3XSpWhI L4FF6noIKW8OVBZ+snxOcKdIDp8IgwWu8kPDyHprgH/LY2lLazKI7cJ/RqQW14A/ Jar0t9k6Xj9bW3p4/tY9ipsmKCgMcTi8hBDO2AHBXB3TmkGwFmP5k0NdjSkiePuD 3scfKRF71Wwi8Bfe1MphdKrwv/xqp7yvUS9fYdFHJK/zFotpza3Vp9c/X0M9MS8q slMzWRLOiR1bGu9SEJBbOPj39x9wwufrEDwWDEZXIqVEQ0duw1b0gPMj5+P8WBbA 8TbTp3CEux4z0AXZp1+kBW64w0ICY0Gb -----END CERTIFICATE-----Generated at Mon Jul 13 02:44:50 2026 by rpki-client