$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa File: 11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa (raw, json) Hash identifier: DeIrAE/nWAdQ95lQd0VcgH7jP0bafriG/d+oFxJEznY= Subject key identifier: DD:4B:12:57:F4:84:E9:AD:D4:3D:58:59:29:8F:D9:36:5D:53:18:4F Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F4328584E104EE7555A236F49ACEC0680 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 27299 IP address blocks: 2001:500:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:e7:55:5a:23:6f:49:ac:ec:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=f4d411c8-d227-468a-873c-1442fcec1a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:8a:8d:10:a0:96:fb:b5:a7:18:50:43:8c: 15:0a:e6:2c:d4:06:de:29:9b:eb:cb:50:13:5d:08: bf:87:39:1c:be:c7:7e:94:62:d0:20:2a:fe:fe:58: a3:ab:fb:7b:48:29:b5:14:62:99:50:20:99:ea:e9: 08:4e:7e:d7:df:b9:5d:56:f6:42:63:fb:ef:01:d4: 77:e0:0b:b2:e2:e8:da:88:4a:e9:c6:f1:50:d4:cb: 3e:81:ba:24:7d:9e:7a:85:e2:9d:4d:16:9c:32:92: 85:e4:23:e3:15:b6:bd:dc:66:5f:bf:eb:33:47:08: 4f:f7:25:53:f7:db:8c:e7:dc:e2:fb:8b:6f:c5:33: be:37:da:67:01:d7:be:9b:9b:4a:d2:08:ae:a0:ef: d9:bb:c6:f8:42:67:b2:ec:3a:8d:02:14:e6:07:b5: 7e:ca:dc:ad:41:9c:ae:9e:f2:2b:9d:c2:6b:44:fa: e1:ce:f0:6b:53:e7:b5:a0:e3:ae:8c:af:12:14:86: c3:1c:ba:69:e2:3b:5a:b0:e6:ea:6e:73:86:3b:35: 68:83:c2:5f:45:0b:df:e4:6e:de:b8:f6:e1:c6:3d: dd:ca:15:52:f9:a8:b0:ed:0d:b1:79:34:f1:36:32: dc:6a:fd:2f:a9:78:15:75:a5:9c:cb:76:61:97:29: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:12:57:F4:84:E9:AD:D4:3D:58:59:29:8F:D9:36:5D:53:18:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/11587f2c-5b06-3ebc-baa2-e2ef4e026427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d5:bd:32:ee:b6:a3:8d:25:c2:76:55:5d:4d:51:18:1a:01: 83:47:36:99:eb:e2:ef:34:52:d4:2f:e4:8b:5c:9f:11:81:67: 91:e5:f0:33:a6:08:66:4c:8c:4f:98:5f:dd:03:1d:fd:61:42: d0:ab:46:1b:45:7e:82:1f:dd:98:9d:7f:d6:1c:29:9b:bc:fd: 12:3f:49:38:bd:bd:3a:f2:04:4f:08:40:21:d1:f5:ff:9d:92: 64:13:f6:14:1b:4c:cb:58:38:50:40:e0:78:48:28:52:51:32: a7:7b:16:cd:71:df:71:01:70:68:f7:e7:fa:f6:bb:48:e9:4c: fb:0e:18:07:a7:61:66:ab:59:61:b5:4a:76:70:ac:ab:77:fa: 10:ce:13:01:34:4a:bc:91:fc:e3:64:15:bc:6f:12:b2:3d:ae: b7:e5:ff:13:c8:33:66:8e:07:38:bf:7b:e9:8c:5a:f2:04:2f: 48:d0:f3:15:15:af:4a:8d:02:29:2d:02:2c:7e:ec:de:67:6e: 60:0e:5d:15:03:e5:8e:a1:4f:83:7b:01:e5:fb:79:df:1c:d2: cc:3f:4b:69:c7:ca:40:9b:39:96:0e:3f:09:ec:1e:81:2f:cf: fa:d8:62:0b:ac:cb:38:b1:e5:4e:5e:dc:53:11:f2:74:82:3e: d9:0d:8f:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4QTudVWiNvSazsBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjRkNDExYzgtZDIyNy00NjhhLTg3M2MtMTQ0MmZjZWMxYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh2KjRCglvu1pxhQQ4wVCuYs1AbeKZvry1AT XQi/hzkcvsd+lGLQICr+/lijq/t7SCm1FGKZUCCZ6ukITn7X37ldVvZCY/vvAdR3 4Auy4ujaiErpxvFQ1Ms+gbokfZ56heKdTRacMpKF5CPjFba93GZfv+szRwhP9yVT 99uM59zi+4tvxTO+N9pnAde+m5tK0giuoO/Zu8b4Qmey7DqNAhTmB7V+ytytQZyu nvIrncJrRPrhzvBrU+e1oOOujK8SFIbDHLpp4jtasObqbnOGOzVog8JfRQvf5G7e uPbhxj3dyhVS+aiw7Q2xeTTxNjLcav0vqXgVdaWcy3Zhlym2KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1LElf0hOmt1D1YWSmP2TZdUxhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMTE1ODdmMmMtNWIwNi0z ZWJjLWJhYTItZTJlZjRlMDI2NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHVvTLutqONJcJ2VV1NURgaAYNHNpnr4u80UtQv5ItcnxGBZ5Hl 8DOmCGZMjE+YX90DHf1hQtCrRhtFfoIf3Zidf9YcKZu8/RI/STi9vTryBE8IQCHR 9f+dkmQT9hQbTMtYOFBA4HhIKFJRMqd7Fs1x33EBcGj35/r2u0jpTPsOGAenYWar WWG1SnZwrKt3+hDOEwE0SryR/ONkFbxvErI9rrfl/xPIM2aOBzi/e+mMWvIEL0jQ 8xUVr0qNAiktAix+7N5nbmAOXRUD5Y6hT4N7AeX7ed8c0sw/S2nHykCbOZYOPwns HoEvz/rYYgusyzix5U5e3FMR8nSCPtkNj5g= -----END CERTIFICATE-----Generated at Fri Jun 5 18:45:20 2026 by rpki-client