$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa File: e2859ca0-5dce-362c-aad8-b0a42f360abe.roa (raw, json) Hash identifier: sD5hQ5djIdp9HQb8Jtjp3HeW9fDi5B5NPiHacdIuUIQ= Subject key identifier: 72:3B:25:EB:67:52:14:47:03:06:3D:D4:B2:AC:DB:41:37:DB:44:B0 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584E296F05694D5B9883B5C17280 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 22742 IP address blocks: 2607:f460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6f:05:69:4d:5b:98:83:b5:c1:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=30020de9-6806-48e9-9187-ee45a727ec68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:da:be:11:aa:5d:b3:b2:c4:a7:97:0f:0d:df: e8:36:82:be:5d:ef:0e:73:db:2a:54:0f:0e:03:fb: f9:b1:1b:d1:06:2c:d8:ef:3c:d8:a2:3a:94:b6:da: 92:fd:ed:d5:fc:ee:06:eb:63:e9:17:bf:a0:3b:78: 40:aa:00:a3:ea:24:08:c9:fb:47:09:4c:8b:6c:04: 90:00:e3:5d:c3:b5:3c:22:42:ef:cc:1f:43:7b:03: aa:85:b4:04:48:ad:2f:77:6f:69:e4:81:44:41:b9: 55:a9:86:69:a1:a0:41:7c:0d:f6:cb:89:1d:f3:6e: 25:bf:0f:0e:24:39:c1:e0:43:4f:cb:fe:d0:7d:13: b5:4d:73:f9:23:93:09:45:ae:42:90:61:69:8d:a0: 3c:7a:f4:46:f9:0f:c7:91:05:6d:32:fb:50:94:99: e4:7b:f6:f7:f2:2d:2e:7e:3e:be:60:6e:09:e8:8b: 6c:7f:a1:1e:13:be:fd:d2:4a:2c:7b:41:aa:22:36: a9:68:83:33:61:1d:f4:69:51:96:fb:fd:55:7c:34: 59:40:a8:5b:50:55:4c:f1:0e:94:d6:28:9e:cf:60: f9:3b:20:70:5a:51:46:41:38:fb:95:c4:16:ab:a6: 0b:6d:f9:43:e1:8d:64:13:2e:03:38:d5:28:7a:54: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3B:25:EB:67:52:14:47:03:06:3D:D4:B2:AC:DB:41:37:DB:44:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e2859ca0-5dce-362c-aad8-b0a42f360abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f460::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5e:9a:43:36:80:c8:cf:f0:84:4b:7a:8b:74:22:05:9a:d4: 73:a9:d1:f3:6c:02:2a:ba:4d:cc:ae:a6:d5:f9:3a:2f:de:8f: 5c:46:25:8e:cb:b9:21:d4:f4:e9:18:f1:d7:cd:28:14:28:ee: 5c:90:12:f3:de:95:36:11:78:f7:ca:85:ea:e1:30:9c:d1:65: 28:d3:f2:f1:4d:b1:02:25:e7:f6:58:66:28:a2:7a:ad:b0:14: a2:56:cc:44:07:7f:e7:f8:66:b3:fc:b3:b2:4d:c1:d9:35:ae: 8c:5a:f8:d4:e0:e1:49:0d:13:69:18:b6:93:fc:60:db:49:44: ae:63:7c:c7:1a:2c:79:1e:a0:dc:06:4f:c9:40:bc:3c:d3:89: da:01:65:48:91:93:d7:30:33:63:94:fd:67:49:f9:00:1c:b8: cc:9c:fe:19:22:92:67:2b:7a:3f:4c:a6:2d:bf:9a:1c:18:1b: c7:41:e4:11:9b:b0:59:dd:d2:46:6b:8b:54:55:97:01:28:14: 34:2d:61:9c:ce:d7:dd:2c:35:8a:6f:75:34:0d:f6:c2:c2:fa: 55:bc:12:e9:47:7d:41:e7:a8:49:72:57:9f:e7:9a:24:0c:e2: 7c:50:ed:45:2e:cb:ef:9c:6f:c8:59:8d:f7:a3:ca:d0:d1:55: 39:ce:c4:77 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4pbwVpTVuYg7XBcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk MzAwMjBkZTktNjgwNi00OGU5LTkxODctZWU0NWE3MjdlYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dq+Eapds7LEp5cPDd/oNoK+Xe8Oc9sqVA8O A/v5sRvRBizY7zzYojqUttqS/e3V/O4G62PpF7+gO3hAqgCj6iQIyftHCUyLbASQ AONdw7U8IkLvzB9DewOqhbQESK0vd29p5IFEQblVqYZpoaBBfA32y4kd824lvw8O JDnB4ENPy/7QfRO1TXP5I5MJRa5CkGFpjaA8evRG+Q/HkQVtMvtQlJnke/b38i0u fj6+YG4J6Itsf6EeE7790kose0GqIjapaIMzYR30aVGW+/1VfDRZQKhbUFVM8Q6U 1iiez2D5OyBwWlFGQTj7lcQWq6YLbflD4Y1kEy4DONUoelSzrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHI7JetnUhRHAwY91LKs20E320SwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZTI4NTljYTAtNWRjZS0z NjJjLWFhZDgtYjBhNDJmMzYwYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWXppDNoDIz/CES3qLdCIFmtRzqdHzbAIquk3MrqbV+Tov3o9cRiWO y7kh1PTpGPHXzSgUKO5ckBLz3pU2EXj3yoXq4TCc0WUo0/LxTbECJef2WGYoonqt sBSiVsxEB3/n+Gaz/LOyTcHZNa6MWvjU4OFJDRNpGLaT/GDbSUSuY3zHGix5HqDc Bk/JQLw804naAWVIkZPXMDNjlP1nSfkAHLjMnP4ZIpJnK3o/TKYtv5ocGBvHQeQR m7BZ3dJGa4tUVZcBKBQ0LWGcztfdLDWKb3U0DfbCwvpVvBLpR31B56hJclef55ok DOJ8UO1FLsvvnG/IWY33o8rQ0VU5zsR3 -----END CERTIFICATE-----Generated at Sun Jun 28 23:02:52 2026 by rpki-client