$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json) Hash identifier: YcYDkLoRG4ieMtjaNKS3yN9uOX433hHx/BZStdD5WyY= Subject key identifier: 90:95:80:BC:33:4A:43:06:38:4F:CA:41:43:89:83:00:75:7B:07:3B Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F4328584E2D9F1795ADFB52F482028980 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 6491 IP address blocks: 2620:67:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:17:95:ad:fb:52:f4:82:02:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=c2705dc8-5a43-466c-8cea-827adbe9479e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:43:d8:ac:f3:f7:39:d6:c4:70:00:f4:93: 52:ee:fb:55:d5:bf:0f:1c:3e:58:e1:0b:78:e7:6a: d0:5f:ef:57:01:f5:a3:d0:82:95:ad:16:09:b3:29: 63:c1:08:b3:eb:e2:ab:60:e0:64:be:8f:ab:2a:ea: 52:4b:4e:21:0a:38:e1:d1:fb:eb:d0:27:b3:df:74: d2:a2:a3:e3:00:f8:89:e9:71:47:51:d5:72:d2:9c: d6:4d:bb:f2:32:31:fe:69:d6:30:6a:58:8e:81:10: dd:40:f7:69:48:98:83:37:15:72:cc:e5:d0:8e:17: b8:a7:29:ad:a3:cc:f5:b3:19:a5:c0:25:03:85:ab: 78:e8:36:68:61:c1:d1:45:b4:8b:c1:91:6b:f5:2d: c3:3d:b2:dc:36:46:52:e7:19:d5:ed:5e:c0:01:c4: dd:7f:60:a0:b5:17:3e:85:6c:5a:98:4c:51:da:3b: 15:27:0a:53:ec:65:81:3d:b1:8a:e9:a2:32:0a:a0: da:94:0b:d6:3d:94:95:18:2c:18:5e:f0:bf:ff:4d: 00:cf:fd:77:38:c2:40:0f:80:a0:06:85:56:90:39: 40:4b:58:5a:b2:8f:17:a4:01:11:04:b8:95:85:a2: 5d:cc:d8:94:eb:ff:a1:d0:b6:f5:8d:1e:b4:af:c8: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:80:BC:33:4A:43:06:38:4F:CA:41:43:89:83:00:75:7B:07:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:67:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e1:8f:c5:3c:1f:61:b6:5b:22:48:54:57:b0:3f:2e:72:a9: 92:7b:5f:41:26:e8:ab:4b:df:31:38:ae:4e:5e:db:11:7f:09: e0:c0:64:7e:f5:1f:52:15:c7:e3:2f:37:e8:a2:d4:b1:70:ee: 50:52:57:f9:0f:ed:bd:21:dc:96:7b:72:c3:5e:56:04:7b:24: 35:d2:6b:05:9d:d8:2b:5c:0a:08:bf:14:a3:c9:7e:6b:65:89: 7d:c4:fc:1a:08:c1:69:5c:cd:e1:cf:cc:73:77:b2:06:dc:55: a4:d9:f2:cb:0f:cf:0f:c9:8d:98:f5:6d:95:a9:94:83:ee:e1: 48:79:08:3a:4c:5c:c5:c4:b0:0c:d9:be:6a:28:98:40:71:8d: 32:7e:83:9a:1d:1e:61:35:15:ac:dc:93:b0:5d:c8:66:31:bb: 21:d7:79:c7:67:bd:28:10:f3:43:87:12:cc:85:cf:17:65:91: a8:2b:01:77:32:c4:79:a3:14:6b:11:82:d8:a0:24:16:13:8f: 3a:48:74:58:08:4d:37:43:2f:e7:ac:2e:cc:38:ab:cd:e6:b3: 94:55:48:80:94:9c:d0:01:b2:1e:b0:1d:e0:a7:ab:48:6f:a4: 7b:0d:7e:c7:0c:79:83:a7:e3:37:58:47:44:7e:06:9e:8b:51: 6c:0f:ba:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4tnxeVrftS9IICiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk YzI3MDVkYzgtNWE0My00NjZjLThjZWEtODI3YWRiZTk0NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbtD2Kzz9znWxHAA9JNS7vtV1b8PHD5Y4Qt4 52rQX+9XAfWj0IKVrRYJsyljwQiz6+KrYOBkvo+rKupSS04hCjjh0fvr0Cez33TS oqPjAPiJ6XFHUdVy0pzWTbvyMjH+adYwaliOgRDdQPdpSJiDNxVyzOXQjhe4pymt o8z1sxmlwCUDhat46DZoYcHRRbSLwZFr9S3DPbLcNkZS5xnV7V7AAcTdf2CgtRc+ hWxamExR2jsVJwpT7GWBPbGK6aIyCqDalAvWPZSVGCwYXvC//00Az/13OMJAD4Cg BoVWkDlAS1haso8XpAERBLiVhaJdzNiU6/+h0Lb1jR60r8jQ9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJCVgLwzSkMGOE/KQUOJgwB1ewc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvODcwYjM1NTUtNDc3MC0z NTdhLTgzYTQtMTUwODA3MDk3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAZ6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrhj8U8H2G2WyJIVFewPy5yqZJ7X0Em6KtL3zE4rk5e2xF/CeDA ZH71H1IVx+MvN+ii1LFw7lBSV/kP7b0h3JZ7csNeVgR7JDXSawWd2CtcCgi/FKPJ fmtliX3E/BoIwWlczeHPzHN3sgbcVaTZ8ssPzw/JjZj1bZWplIPu4Uh5CDpMXMXE sAzZvmoomEBxjTJ+g5odHmE1Fazck7BdyGYxuyHXecdnvSgQ80OHEsyFzxdlkagr AXcyxHmjFGsRgtigJBYTjzpIdFgITTdDL+esLsw4q83ms5RVSICUnNABsh6wHeCn q0hvpHsNfscMeYOn4zdYR0R+Bp6LUWwPus0= -----END CERTIFICATE-----Generated at Tue Jun 16 11:24:25 2026 by rpki-client