$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa File: 20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa (raw, json) Hash identifier: ZP3gleBKjS/sf4cW+4/izGa9iXlgsM/hJJYm4xIBZOU= Subject key identifier: D9:1E:A6:57:80:73:8B:BD:1A:DC:71:92:16:D4:2F:C3:3E:22:2C:90 Certificate issuer: /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Certificate serial: 010D0C9F4328584E4989D8E74BC7F9FFA339A670 Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa Signing time: Thu 25 Jun 2026 09:00:13 +0000 ROA not before: Thu 25 Jun 2026 09:00:13 +0000 ROA not after: Wed 23 Sep 2026 09:00:13 +0000 asID: 62468 IP address blocks: 2602:f506::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:49:89:d8:e7:4b:c7:f9:ff:a3:39:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Validity Not Before: Jun 25 09:00:13 2026 GMT Not After : Sep 23 09:00:13 2026 GMT Subject: CN=1b294e7c-738c-4e3a-a5e9-285d93be1eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:a9:2f:18:23:7b:47:ae:c4:81:f8:a6:1a: ed:2b:05:87:ab:3a:9a:4f:f7:34:df:89:5f:1c:a5: 1f:c5:b4:98:1a:f1:e7:ee:3a:07:45:d6:8c:47:2b: ca:36:5b:56:b2:9c:a6:38:6d:f6:cc:90:c1:ba:81: c3:e6:9e:34:05:50:21:b3:a8:0b:6c:3e:be:d9:76: 21:81:2f:e6:0e:27:c2:a9:54:e3:a1:b3:fc:ff:cc: 98:e5:ff:d6:41:e3:71:1f:75:b3:57:e2:5d:c6:16: 9e:d5:0d:2f:49:b5:5c:c7:4a:7c:e4:9f:92:d9:21: 38:2c:2a:2a:da:33:4f:28:04:7c:88:20:1f:d6:2f: 56:5f:6d:2e:cd:4f:67:f7:c9:ff:91:63:82:c1:12: dd:d6:2b:c9:b7:6e:0c:39:c9:2a:33:b4:ef:a7:4a: 82:50:4b:d1:ef:fa:ab:01:82:fa:85:9c:4b:cd:70: b3:c1:1e:10:6d:cc:91:c6:55:82:b7:91:2c:66:e8: 1f:4d:2f:64:a5:68:b0:81:78:7c:05:9a:7c:10:2e: 93:ef:1a:fd:ac:42:f9:44:c1:c5:82:1e:75:f6:1d: 81:39:ec:ba:fa:ac:8e:ee:0c:f7:bd:0c:7e:0b:ea: 19:19:fc:4e:cd:3d:db:00:26:2c:fe:2f:21:cb:67: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1E:A6:57:80:73:8B:BD:1A:DC:71:92:16:D4:2F:C3:3E:22:2C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl X509v3 Authority Key Identifier: keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer sbgp-ipAddrBlock: critical IPv6: 2602:f506::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b1:f0:75:b6:fd:44:73:5e:eb:3a:73:f1:91:ba:2e:5d:1f: 3e:6e:45:f2:69:18:c6:94:0b:78:12:0a:1a:b2:ae:28:15:91: 99:06:b2:8c:bc:85:a1:16:5f:5f:02:c2:ce:d4:04:fb:b7:64: 01:5f:50:6b:fe:78:99:8f:a7:7d:0d:ad:99:d5:44:0b:31:e7: 00:ca:c0:da:0c:7b:3c:2d:8d:ad:30:16:8b:a3:d5:c9:2d:9b: 3d:b1:0e:d2:f4:89:14:84:64:42:fb:08:69:12:ec:8e:a3:33: 63:73:aa:9a:51:e6:b4:ea:48:04:92:99:f6:41:1c:0c:74:a3: 9e:36:ca:d0:1e:4f:8a:13:16:e3:6f:f4:16:e5:a2:4f:6e:04: 4e:85:ab:6f:f1:a1:b1:ce:90:1a:64:1a:a4:d8:ca:80:f0:2b: fd:7d:6f:0b:82:ab:cc:ce:25:45:73:65:2a:f3:21:a8:cb:ea: 46:41:3e:9c:21:ac:bd:29:cc:b2:31:81:6b:cc:23:54:8b:91: 9c:1f:13:f3:28:3e:ef:7b:56:c0:ea:a7:7f:7b:57:b3:85:5c: 3a:7c:11:96:f8:9e:55:cf:d9:2e:1b:ae:a4:75:1c:6c:97:fc: 3d:24:d2:bb:0e:2a:c5:53:24:56:43:d8:a3:20:9e:2d:cd:65: b2:9d:6e:e0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5JidjnS8f5/6M5pnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlOWM1MGMtZTMyNy00MjQzLThjMWUtMDY3YmQzZDRl YmVhMB4XDTI2MDYyNTA5MDAxM1oXDTI2MDkyMzA5MDAxM1owLzEtMCsGA1UEAxMk MWIyOTRlN2MtNzM4Yy00ZTNhLWE1ZTktMjg1ZDkzYmUxZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZypLxgje0euxIH4phrtKwWHqzqaT/c034lf HKUfxbSYGvHn7joHRdaMRyvKNltWspymOG32zJDBuoHD5p40BVAhs6gLbD6+2XYh gS/mDifCqVTjobP8/8yY5f/WQeNxH3WzV+Jdxhae1Q0vSbVcx0p85J+S2SE4LCoq 2jNPKAR8iCAf1i9WX20uzU9n98n/kWOCwRLd1ivJt24MOckqM7Tvp0qCUEvR7/qr AYL6hZxLzXCzwR4QbcyRxlWCt5EsZugfTS9kpWiwgXh8BZp8EC6T7xr9rEL5RMHF gh519h2BOey6+qyO7gz3vQx+C+oZGfxOzT3bACYs/i8hy2f7bQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNkepleAc4u9GtxxkhbUL8M+IiyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5 YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdiZDNkNGViZWEvMjBhZTVjMzgtNWRiOS0z MDEyLThhMjQtODFlNjJmZjhlN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNlOWM1MGMtZTMyNy00MjQzLThj MWUtMDY3YmQzZDRlYmVhLzFjZTljNTBjLWUzMjctNDI0My04YzFlLTA2N2JkM2Q0 ZWJlYS5jcmwwHwYDVR0jBBgwFoAUBkpk6d+UydZAem4SVdEMXbE1qCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdi ZDNkNGViZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL1BgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAc7Hwdbb9RHNe6zpz8ZG6Ll0fPm5F8mkYxpQLeBIKGrKuKBWRmQay jLyFoRZfXwLCztQE+7dkAV9Qa/54mY+nfQ2tmdVECzHnAMrA2gx7PC2NrTAWi6PV yS2bPbEO0vSJFIRkQvsIaRLsjqMzY3OqmlHmtOpIBJKZ9kEcDHSjnjbK0B5PihMW 42/0FuWiT24EToWrb/Ghsc6QGmQapNjKgPAr/X1vC4KrzM4lRXNlKvMhqMvqRkE+ nCGsvSnMsjGBa8wjVIuRnB8T8yg+73tWwOqnf3tXs4VcOnwRlvieVc/ZLhuupHUc bJf8PSTSuw4qxVMkVkPYoyCeLc1lsp1u4A== -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:56 2026 by rpki-client