$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0ffb5f5e-1ed8-315b-9806-a458c20cf405.roa File: 0ffb5f5e-1ed8-315b-9806-a458c20cf405.roa (raw, json) Hash identifier: 2lcbkHWJZUrC1rBSHaVH5LwiF4kfCPFU5cTVGf5IxeI= Subject key identifier: 53:C3:AA:62:AA:C7:AD:E5:36:80:94:6E:27:66:E6:2D:95:15:84:60 Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56 Certificate serial: 010D0C9F4328584EA795038B3AC739D27DB16900 Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0ffb5f5e-1ed8-315b-9806-a458c20cf405.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 70 IP address blocks: 2607:f220:41e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:03:8b:3a:c7:39:d2:7d:b1:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b456c81e-3a91-45ef-9ade-7f99e1f01f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0f:00:c4:5c:5b:6f:41:2a:b8:e9:ff:7c:06: f4:48:99:72:dc:a2:77:8b:e1:51:e9:79:6d:c1:02: ea:54:99:d9:17:2f:b2:02:36:8e:5d:4f:f1:26:03: 32:35:79:44:bc:ad:57:2b:da:4d:4e:05:9b:b0:a2: 47:ad:36:5f:48:c0:4e:dc:ad:57:a1:73:d8:3b:f7: 61:40:2a:19:e2:dd:76:7e:92:62:00:ef:33:1b:7c: b7:4d:56:be:94:5c:d8:38:df:8a:1b:a0:ca:1e:f2: 7d:95:77:5a:e8:a0:15:1a:b4:54:24:6b:c0:b2:74: 5d:c1:a9:d1:e7:84:40:1f:4c:d8:fe:8e:76:97:0e: 58:66:52:c4:de:7e:1e:76:5e:2a:91:1e:a3:d4:09: bd:af:b6:18:00:3d:8f:f0:91:b1:d1:b3:fd:e1:c0: ec:2a:fc:07:07:16:84:f8:28:2a:a5:a1:ec:60:96: 44:67:83:e5:75:49:32:24:30:33:e1:52:d6:ca:02: fd:ea:8d:72:cf:69:c6:b5:50:9a:09:a0:a9:14:a3: 19:6c:5f:72:ca:43:05:b4:5d:84:38:bd:b2:52:be: bd:a5:eb:86:3a:4e:a6:82:30:b3:c2:e8:d1:0c:ab: 74:60:56:9d:98:1f:de:14:d7:76:50:66:95:01:fd: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:AA:62:AA:C7:AD:E5:36:80:94:6E:27:66:E6:2D:95:15:84:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0ffb5f5e-1ed8-315b-9806-a458c20cf405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl X509v3 Authority Key Identifier: keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer sbgp-ipAddrBlock: critical IPv6: 2607:f220:41e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d3:c5:f9:96:87:7c:9a:40:de:6c:a7:33:5a:ea:f4:bf:de: 84:b5:3c:8a:05:52:76:e2:21:4b:27:2f:56:f7:b7:44:6d:79: 35:74:2a:cb:6c:3d:27:5b:ec:a4:1d:39:98:86:5e:64:d9:12: a0:92:dc:6f:60:99:f4:cb:fc:0e:83:a6:70:51:82:01:8b:e3: e4:36:f5:6f:cb:98:fb:12:15:fc:68:5f:ff:5a:81:48:dd:47: 0e:ec:6f:19:53:6d:aa:26:63:39:be:a6:0b:e3:54:88:f0:24: 60:bf:bb:cd:58:77:cd:0b:56:0e:02:97:0a:3a:c2:db:ff:12: ce:ff:aa:74:9b:7d:75:cc:49:72:b8:ae:db:14:54:db:97:60: 7f:e6:97:3d:81:f2:2f:8e:a9:7e:95:7e:97:8e:de:94:43:ab: ce:6e:70:99:e3:dd:08:59:d5:3b:73:a0:8c:d3:0f:35:7d:13: 6c:e1:79:45:60:52:cc:88:15:73:55:23:8d:bf:2c:26:a1:b5: ea:6c:5c:5f:38:6b:44:97:1b:50:22:7f:fc:36:da:dd:f5:ab: 82:f4:ab:8d:28:57:c3:20:32:2f:f0:da:38:fc:f9:a3:b0:53: e8:c9:fb:60:23:93:15:fa:91:1a:40:bc:b7:dc:e1:4a:7d:0b: 36:5f:17:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlQOLOsc50n2xaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzMGIyMDctZGUwNC00MjVmLTk0ZTktZWUxMmQ0NTI5 ZjU2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjQ1NmM4MWUtM2E5MS00NWVmLTlhZGUtN2Y5OWUxZjAxZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg8AxFxbb0EquOn/fAb0SJly3KJ3i+FR6Xlt wQLqVJnZFy+yAjaOXU/xJgMyNXlEvK1XK9pNTgWbsKJHrTZfSMBO3K1XoXPYO/dh QCoZ4t12fpJiAO8zG3y3TVa+lFzYON+KG6DKHvJ9lXda6KAVGrRUJGvAsnRdwanR 54RAH0zY/o52lw5YZlLE3n4edl4qkR6j1Am9r7YYAD2P8JGx0bP94cDsKvwHBxaE +CgqpaHsYJZEZ4PldUkyJDAz4VLWygL96o1yz2nGtVCaCaCpFKMZbF9yykMFtF2E OL2yUr69peuGOk6mgjCzwujRDKt0YFadmB/eFNd2UGaVAf0hCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPDqmKqx63lNoCUbidm5i2VFYRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YTMw YjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEyZDQ1MjlmNTYvMGZmYjVmNWUtMWVkOC0z MTViLTk4MDYtYTQ1OGMyMGNmNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmEzMGIyMDctZGUwNC00MjVmLTk0 ZTktZWUxMmQ0NTI5ZjU2LzZhMzBiMjA3LWRlMDQtNDI1Zi05NGU5LWVlMTJkNDUy OWY1Ni5jcmwwHwYDVR0jBBgwFoAUT/I+sSc3DCrh5M6hhc6s7CFLddYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YTMwYjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEy ZDQ1MjlmNTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfyIAQe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArTxfmWh3yaQN5spzNa6vS/3oS1PIoFUnbiIUsnL1b3t0RteTV0 KstsPSdb7KQdOZiGXmTZEqCS3G9gmfTL/A6DpnBRggGL4+Q29W/LmPsSFfxoX/9a gUjdRw7sbxlTbaomYzm+pgvjVIjwJGC/u81Yd80LVg4Clwo6wtv/Es7/qnSbfXXM SXK4rtsUVNuXYH/mlz2B8i+OqX6VfpeO3pRDq85ucJnj3QhZ1TtzoIzTDzV9E2zh eUVgUsyIFXNVI42/LCahtepsXF84a0SXG1Aif/w22t31q4L0q40oV8MgMi/w2jj8 +aOwU+jJ+2AjkxX6kRpAvLfc4Up9CzZfF0k= -----END CERTIFICATE-----Generated at Wed Jul 29 10:15:53 2026 by rpki-client