$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa File: 9012ed63-878a-3814-ab32-db7d7578b57a.roa (raw, json) Hash identifier: 7HmAcGqSRbk/w06bRfVVLCAkRDImR4PR+ZgwCF/T0/o= Subject key identifier: 58:6D:77:C2:D1:C9:26:FC:CA:5E:09:C0:92:D5:8E:58:0C:AF:4E:23 Certificate issuer: /CN=bb3e1744-5186-489a-9b86-cb31cef73874 Certificate serial: 010D0C9F4328584E66DA1481D025130D8A95F540 Authority key identifier: 6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 2620:20:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:14:81:d0:25:13:0d:8a:95:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb3e1744-5186-489a-9b86-cb31cef73874 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=d2cf941e-4e6e-4bfa-b96b-54e959ecf2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:03:21:dc:66:8b:f2:18:d8:87:99:4a:6d: 12:be:e8:fa:90:c1:0e:97:65:16:e2:39:76:3e:56: 61:70:40:72:35:40:82:aa:c6:22:05:5e:8e:cb:f7: 98:7b:0f:43:05:45:ec:24:76:a8:dd:f8:87:d5:74: dd:dd:87:37:fc:37:11:82:6a:9d:ec:8b:23:db:dd: cb:ec:0b:04:f9:ae:27:e5:e4:de:52:ef:0c:62:43: 56:9d:2a:3d:79:79:48:8e:ae:a9:ef:b2:45:ed:b9: 43:43:95:a5:c6:a0:96:f8:dc:83:7d:d5:9d:45:ba: 15:c9:af:33:4d:99:fa:cc:d7:8e:6a:02:c5:0f:18: af:ef:a5:25:9c:ed:7b:4c:1f:22:3d:24:a1:df:f7: 22:06:cc:09:83:5e:80:04:39:9e:c4:ca:c7:42:16: 35:bf:b9:4a:6f:81:d1:87:49:41:79:9f:37:1d:98: f3:f8:5a:92:3f:fe:cb:fa:ad:98:f5:a6:55:e9:59: 20:d7:ad:11:a4:96:b1:ab:ff:7e:0a:f6:c9:c4:51: 22:42:55:82:50:0e:9d:0e:df:a9:c6:07:a1:e4:96: 32:59:69:6f:5a:83:6f:5e:02:69:cd:8e:de:dd:72: 7a:60:b4:ce:f0:43:6c:0d:82:0d:82:c5:2a:34:e3: 05:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:77:C2:D1:C9:26:FC:CA:5E:09:C0:92:D5:8E:58:0C:AF:4E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/9012ed63-878a-3814-ab32-db7d7578b57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874/bb3e1744-5186-489a-9b86-cb31cef73874.crl X509v3 Authority Key Identifier: keyid:6F:2C:C6:AA:C8:5C:8C:82:ED:09:05:C9:E5:AD:0F:99:CE:1E:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb3e1744-5186-489a-9b86-cb31cef73874.cer sbgp-ipAddrBlock: critical IPv6: 2620:20:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ac:ae:e9:2b:a1:d7:69:4e:33:de:b6:dd:65:6f:87:d6:30: e4:69:05:93:12:0e:47:c4:3e:87:fc:88:da:52:5e:a3:7d:cc: 6b:c5:8d:bc:c1:ce:e3:d7:c1:a8:d4:b7:ad:03:d7:ec:25:bd: b4:d7:03:1e:bd:9a:28:62:06:8d:fe:94:e5:a4:2b:f2:79:e5: 71:9a:63:7b:55:90:8a:75:5b:e6:e2:c5:40:77:23:5d:21:71: ad:11:a8:56:e9:7e:30:c1:9c:f1:ae:84:b6:45:2b:28:00:d0: aa:17:ef:eb:13:71:03:d6:4f:b3:75:80:35:75:cb:e9:e3:88: 47:78:6b:ec:6d:e8:79:38:23:21:42:7f:47:46:fc:16:1b:2b: 21:ca:9b:dc:16:ff:27:7e:4e:dd:64:73:ae:e1:6d:fe:f3:e3: 0e:1c:55:32:48:3c:6d:a6:2a:85:75:21:41:09:e2:03:8c:b6: 88:17:3b:a2:62:69:a0:2f:b6:ba:f5:ac:6e:6b:5b:c0:12:c5: 71:a3:28:72:22:1d:6e:ad:67:78:84:28:60:0c:34:09:bb:89: 18:be:89:09:99:a8:18:38:a7:1e:92:65:d1:0c:a3:d1:3c:a5: 69:83:65:47:22:fc:fc:1f:88:d5:bc:29:74:0a:45:61:4e:4e: 77:c1:d3:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2hSB0CUTDYqV9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzZTE3NDQtNTE4Ni00ODlhLTliODYtY2IzMWNlZjcz ODc0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZDJjZjk0MWUtNGU2ZS00YmZhLWI5NmItNTRlOTU5ZWNmMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUDIdxmi/IY2IeZSm0Svuj6kMEOl2UW4jl2 PlZhcEByNUCCqsYiBV6Oy/eYew9DBUXsJHao3fiH1XTd3Yc3/DcRgmqd7Isj293L 7AsE+a4n5eTeUu8MYkNWnSo9eXlIjq6p77JF7blDQ5WlxqCW+NyDfdWdRboVya8z TZn6zNeOagLFDxiv76UlnO17TB8iPSSh3/ciBswJg16ABDmexMrHQhY1v7lKb4HR h0lBeZ83HZjz+FqSP/7L+q2Y9aZV6Vkg160RpJaxq/9+CvbJxFEiQlWCUA6dDt+p xgeh5JYyWWlvWoNvXgJpzY7e3XJ6YLTO8ENsDYINgsUqNOMFGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFhtd8LRySb8yl4JwJLVjlgMr04jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNl MTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMxY2VmNzM4NzQvOTAxMmVkNjMtODc4YS0z ODE0LWFiMzItZGI3ZDc1NzhiNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIzZTE3NDQtNTE4Ni00ODlhLTli ODYtY2IzMWNlZjczODc0L2JiM2UxNzQ0LTUxODYtNDg5YS05Yjg2LWNiMzFjZWY3 Mzg3NC5jcmwwHwYDVR0jBBgwFoAUbyzGqshcjILtCQXJ5a0Pmc4eB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjNlMTc0NC01MTg2LTQ4OWEtOWI4Ni1jYjMx Y2VmNzM4NzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWsrukroddpTjPett1lb4fWMORpBZMSDkfEPof8iNpSXqN9zGvF jbzBzuPXwajUt60D1+wlvbTXAx69mihiBo3+lOWkK/J55XGaY3tVkIp1W+bixUB3 I10hca0RqFbpfjDBnPGuhLZFKygA0KoX7+sTcQPWT7N1gDV1y+njiEd4a+xt6Hk4 IyFCf0dG/BYbKyHKm9wW/yd+Tt1kc67hbf7z4w4cVTJIPG2mKoV1IUEJ4gOMtogX O6JiaaAvtrr1rG5rW8ASxXGjKHIiHW6tZ3iEKGAMNAm7iRi+iQmZqBg4px6SZdEM o9E8pWmDZUci/PwfiNW8KXQKRWFOTnfB00A= -----END CERTIFICATE-----Generated at Mon Jul 6 21:36:55 2026 by rpki-client