$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f33de91-4046-36f6-a8f4-2d84caab313c.roa File: 4f33de91-4046-36f6-a8f4-2d84caab313c.roa (raw, json) Hash identifier: vPYnNOtzB5t+JgTVs3gnY+b7UO2A9znHIBk3En88mJk= Subject key identifier: 2C:CA:D9:4F:8D:7B:1D:54:02:85:0D:B0:87:BA:A5:02:1E:39:3F:B2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA5AA73FD2EC57AA4B5708B40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f33de91-4046-36f6-a8f4-2d84caab313c.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 19905 IP address blocks: 2604:2e88:b400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:73:fd:2e:c5:7a:a4:b5:70:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=775a566a-4e76-43a1-8c6e-2190557f0781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:d6:8b:c2:55:c3:bf:95:d9:ed:40:2c:10: 0d:76:25:b9:02:ca:6d:7a:21:f3:82:34:48:61:9b: 57:ba:da:d8:cb:10:de:e7:70:4c:ab:fc:a6:98:0d: f7:de:2d:07:cb:8e:c0:ce:3e:28:53:40:55:a5:f1: c2:a0:a6:08:cf:99:23:67:04:40:f7:31:5c:9d:03: 0b:18:fb:72:43:8e:ee:ca:79:18:49:7e:b4:74:a3: be:3f:2d:61:b3:4a:23:79:70:5a:05:65:6d:74:9f: dc:41:ae:dc:07:a6:19:35:df:60:63:07:f1:bb:79: 3c:cf:d9:a7:60:6c:76:be:bd:04:d0:b3:f9:78:20: f9:41:8d:09:02:49:1d:b2:4f:e1:cc:38:9f:1e:da: 55:5d:5d:e9:ed:c1:6d:a1:79:c8:84:a3:57:51:e1: b6:57:54:8d:ef:4e:37:c1:72:4b:86:10:0c:ad:27: db:e8:34:00:1d:35:ef:3f:4d:54:77:34:64:a2:21: 9d:3d:93:ae:a5:fb:fc:d4:e4:74:5c:6c:e8:b3:c9: 11:f2:07:b0:2c:c2:35:1d:61:de:f1:75:2f:3e:ab: ed:97:bb:cc:5c:56:4a:d6:57:43:24:9a:2a:7c:89: a0:36:11:69:10:f3:08:90:1e:2d:17:c9:ae:5b:31: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CA:D9:4F:8D:7B:1D:54:02:85:0D:B0:87:BA:A5:02:1E:39:3F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4f33de91-4046-36f6-a8f4-2d84caab313c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e88:b400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:18:2a:82:c5:14:c5:cc:71:9b:22:8c:77:09:02:e1:00:6e: f8:9e:6c:54:98:7b:70:6c:a6:b1:b0:dd:a3:89:f7:2e:69:d5: cf:7e:56:34:34:20:13:e2:57:82:f8:cb:e2:5f:92:40:0b:6c: 94:30:4d:b9:64:f6:1e:0b:e3:7c:3f:c6:a8:f1:c6:7a:98:ad: a3:b4:cc:a1:fd:74:38:56:50:98:fd:08:a5:7e:59:d2:f6:50: 7b:0f:f0:f2:3b:25:b0:6f:98:8e:2d:04:02:c9:96:53:7b:c7: 20:b5:8e:56:93:7a:32:b8:c3:46:af:9a:82:90:93:90:09:f9: f0:14:b1:f5:82:40:fc:49:fd:9c:3f:17:e8:32:93:e4:65:14: b3:fe:10:f2:92:82:be:18:56:08:31:09:cd:e9:65:06:26:e3: 91:42:9f:87:31:56:71:80:4b:91:47:f2:b8:46:57:bb:e2:a6: 54:d8:40:42:76:ff:58:25:ce:07:9e:29:0c:67:4c:0f:35:fa: 50:0d:8a:d4:e0:1a:8d:d9:54:ca:b2:a8:c1:2c:70:1f:f5:60: e4:9d:bf:8d:b3:52:08:55:e6:4a:2d:b9:2f:b9:1b:a2:2c:e2: da:a1:df:8e:27:37:a2:da:ed:e0:0a:b1:97:4d:52:10:63:e6: 42:35:d3:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6lqnP9LsV6pLVwi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk Nzc1YTU2NmEtNGU3Ni00M2ExLThjNmUtMjE5MDU1N2YwNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVvWi8JVw7+V2e1ALBANdiW5AspteiHzgjRI YZtXutrYyxDe53BMq/ymmA333i0Hy47Azj4oU0BVpfHCoKYIz5kjZwRA9zFcnQML GPtyQ47uynkYSX60dKO+Py1hs0ojeXBaBWVtdJ/cQa7cB6YZNd9gYwfxu3k8z9mn YGx2vr0E0LP5eCD5QY0JAkkdsk/hzDifHtpVXV3p7cFtoXnIhKNXUeG2V1SN7043 wXJLhhAMrSfb6DQAHTXvP01UdzRkoiGdPZOupfv81OR0XGzos8kR8gewLMI1HWHe 8XUvPqvtl7vMXFZK1ldDJJoqfImgNhFpEPMIkB4tF8muWzEwUQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCzK2U+Nex1UAoUNsIe6pQIeOT+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGYzM2RlOTEtNDA0Ni0z NmY2LWE4ZjQtMmQ4NGNhYWIzMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiLQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAOxgqgsUUxcxxmyKMdwkC4QBu+J5sVJh7cGymsbDdo4n3LmnVz35W NDQgE+JXgvjL4l+SQAtslDBNuWT2HgvjfD/GqPHGepito7TMof10OFZQmP0IpX5Z 0vZQew/w8jslsG+Yji0EAsmWU3vHILWOVpN6MrjDRq+agpCTkAn58BSx9YJA/En9 nD8X6DKT5GUUs/4Q8pKCvhhWCDEJzellBibjkUKfhzFWcYBLkUfyuEZXu+KmVNhA Qnb/WCXOB54pDGdMDzX6UA2K1OAajdlUyrKowSxwH/Vg5J2/jbNSCFXmSi25L7kb oizi2qHfjic3otrt4Aqxl01SEGPmQjXT9g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:57 2026 by rpki-client