$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa File: bf7f3f32-7977-3022-acfe-63176d0b6222.roa (raw, json) Hash identifier: OvMzFLF4dfMR49il0AYlpj/Qu4zszMkT7rS/uOlHkq0= Subject key identifier: 8E:5B:F1:E4:1A:30:CE:15:24:ED:78:44:ED:69:3C:AB:22:FF:52:6C Certificate issuer: /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Certificate serial: 010D0C9F4328584E2D9F1D6A0AB9834CB8AC1258 Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 63290 IP address blocks: 2605:c880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:1d:6a:0a:b9:83:4c:b8:ac:12:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=d228ac67-7076-4c97-9bf3-13bcf374c33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0b:89:10:6c:b6:6d:de:18:44:62:8d:1d:70: 03:1f:b8:03:10:c0:8d:0e:9f:88:32:93:fb:1b:0d: 66:a4:00:79:23:fb:4f:0c:50:9c:a6:ca:e0:9d:30: 84:b2:ab:65:b1:93:0b:fc:08:f0:c0:fd:32:e9:14: 43:f1:db:2f:f7:6e:01:8f:2b:18:dd:b2:32:b7:3c: 07:b8:97:ef:7b:e2:99:8d:ec:75:7f:6d:a7:5e:c7: 10:65:87:54:d2:e3:5d:f7:9a:ad:fc:e8:e1:58:78: 4c:d7:a1:20:5d:29:ae:d1:ce:dd:5f:12:a0:18:a4: da:f2:cc:cf:96:61:98:a3:8e:57:5e:8c:68:ae:1e: a9:29:33:5f:69:fd:04:18:d2:14:5f:ea:8e:61:b6: 7d:fd:1f:36:26:be:6a:d1:d3:a9:e7:7c:f4:92:a3: e7:38:77:13:a3:79:8a:f6:e5:ce:0c:a9:72:e6:c7: a6:3a:87:5f:0f:16:0c:88:34:5b:b7:3d:08:af:a8: a1:f9:74:37:96:1c:a2:c2:81:0d:e3:29:c0:d7:96: d2:59:c8:43:b2:24:6e:e1:59:a6:07:a0:a1:ad:96: 80:af:3f:dc:f2:10:7f:9a:89:23:b1:1a:3e:91:d2: 3c:6c:03:4e:0d:fd:c1:02:40:5b:c9:ef:f7:d2:37: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5B:F1:E4:1A:30:CE:15:24:ED:78:44:ED:69:3C:AB:22:FF:52:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl X509v3 Authority Key Identifier: keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer sbgp-ipAddrBlock: critical IPv6: 2605:c880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:28:b9:d0:16:01:aa:9f:23:3c:8a:4f:07:d5:52:c6:43:21: 45:c4:f7:97:24:fa:7e:26:c3:a4:8a:82:69:c7:60:f7:c3:9c: e9:12:56:0c:e5:a4:29:ff:c1:1a:45:42:9a:cf:43:e6:05:ae: 96:8d:e6:6b:30:ed:72:93:65:85:80:7e:16:3d:7a:ac:23:c0: 4a:33:ae:e1:28:6c:b6:97:93:93:47:fc:b7:57:c0:65:0e:79: e0:58:5d:ad:f6:40:25:3e:15:07:48:6e:f0:7a:10:e0:97:a9: e1:68:96:b0:77:b3:31:d2:56:b4:68:f3:72:b2:51:04:ac:85: 48:41:31:58:8f:54:b2:5c:38:d5:80:e3:a0:6d:15:95:b8:3d: c9:e2:ef:c2:2f:36:a7:9c:b9:68:d4:9c:d2:02:f8:41:ce:bd: 40:c9:35:21:85:bf:12:02:b5:a1:87:c4:7c:0d:e6:9d:44:74: ff:f5:7b:56:4c:1e:89:d1:69:c6:50:0e:d7:ee:87:be:a2:6d: c4:b0:8a:09:71:8c:58:cb:9c:b1:8a:09:bf:35:ef:7e:c9:d9: ea:3f:da:5b:58:00:38:35:13:04:7c:bd:e8:9c:dd:64:78:67: 29:69:92:05:b3:c8:c0:91:cb:32:cc:9e:53:24:c0:c6:08:6c: 92:70:26:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4tnx1qCrmDTLisElgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkOWU0NGUtOWEyZi00YWUzLWI4MGItNTUwZjkwZjE1 ZjY0MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZDIyOGFjNjctNzA3Ni00Yzk3LTliZjMtMTNiY2YzNzRjMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AuJEGy2bd4YRGKNHXADH7gDEMCNDp+IMpP7 Gw1mpAB5I/tPDFCcpsrgnTCEsqtlsZML/AjwwP0y6RRD8dsv924BjysY3bIytzwH uJfve+KZjex1f22nXscQZYdU0uNd95qt/OjhWHhM16EgXSmu0c7dXxKgGKTa8szP lmGYo45XXoxorh6pKTNfaf0EGNIUX+qOYbZ9/R82Jr5q0dOp53z0kqPnOHcTo3mK 9uXODKly5semOodfDxYMiDRbtz0Ir6ih+XQ3lhyiwoEN4ynA15bSWchDsiRu4Vmm B6ChrZaArz/c8hB/mokjsRo+kdI8bANODf3BAkBbye/30jcedwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5b8eQaMM4VJO14RO1pPKsi/1JsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5 ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBmOTBmMTVmNjQvYmY3ZjNmMzItNzk3Ny0z MDIyLWFjZmUtNjMxNzZkMGI2MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBkOWU0NGUtOWEyZi00YWUzLWI4 MGItNTUwZjkwZjE1ZjY0LzMwZDllNDRlLTlhMmYtNGFlMy1iODBiLTU1MGY5MGYx NWY2NC5jcmwwHwYDVR0jBBgwFoAUK0zB0+E17IWkg8WIud8sdPkUMb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGQ5ZTQ0ZS05YTJmLTRhZTMtYjgwYi01NTBm OTBmMTVmNjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCkKLnQFgGqnyM8ik8H1VLGQyFFxPeXJPp+JsOkioJpx2D3w5zpElYM 5aQp/8EaRUKaz0PmBa6WjeZrMO1yk2WFgH4WPXqsI8BKM67hKGy2l5OTR/y3V8Bl DnngWF2t9kAlPhUHSG7wehDgl6nhaJawd7Mx0la0aPNyslEErIVIQTFYj1SyXDjV gOOgbRWVuD3J4u/CLzannLlo1JzSAvhBzr1AyTUhhb8SArWhh8R8DeadRHT/9XtW TB6J0WnGUA7X7oe+om3EsIoJcYxYy5yxigm/Ne9+ydnqP9pbWAA4NRMEfL3onN1k eGcpaZIFs8jAkcsyzJ5TJMDGCGyScCb/ -----END CERTIFICATE-----Generated at Wed Jun 24 03:51:11 2026 by rpki-client