$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa File: bf56dedf-58f6-3a50-a772-a07b6c69189c.roa (raw, json) Hash identifier: pQWvIPlFcl9lI1+kkgZ0b+jwpiHWnDwmCmFZtp9xO1Y= Subject key identifier: 55:1C:3F:44:09:79:84:E3:F8:00:48:62:72:A7:3D:D3:6A:6D:A8:6E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EA79C375C65DDBBD9A237C780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 2604:2e89:4400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:37:5c:65:dd:bb:d9:a2:37:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a5f70008-633d-443b-bebf-aa248e014eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:0a:6a:62:cb:17:1b:34:25:eb:b9:17:8d: 7e:cb:c5:80:5d:e6:b8:ba:86:c6:0b:41:45:a9:34: 76:01:21:41:8b:32:12:d0:99:d2:0a:3c:05:cf:82: da:97:14:c7:6e:8c:b1:e7:05:4e:c6:39:c6:d4:fb: 47:8f:2f:c7:67:9e:46:8f:15:f6:3d:df:b5:dc:fb: 01:0a:31:21:03:fa:ed:0a:01:25:18:49:1f:55:45: 32:0c:40:8f:18:91:af:76:0a:30:1b:08:51:58:f6: b3:d7:03:e9:57:94:9c:2a:d2:5f:35:e2:6c:63:05: 8c:a4:45:e4:ce:97:ed:9f:d5:01:64:73:97:23:49: 51:c0:0e:63:5a:d7:8c:3f:b7:80:d1:3f:43:33:ce: 5b:15:36:78:50:f7:ae:dc:a8:6f:21:d2:47:96:a1: d2:22:e3:d8:01:82:47:76:c6:57:65:30:eb:36:98: 89:da:af:a1:0c:e1:79:a1:49:82:b5:63:7f:6e:20: c2:b1:4c:ff:3b:c7:23:85:d4:76:9c:04:09:b8:5e: 82:aa:7f:a9:86:7a:2d:f4:eb:c3:cf:e2:db:a1:74: 16:90:8b:ca:25:6a:0f:3c:62:38:4f:ab:ae:d7:61: 92:ac:25:95:3e:cc:ff:d8:da:d5:65:ff:42:fe:12: ad:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1C:3F:44:09:79:84:E3:F8:00:48:62:72:A7:3D:D3:6A:6D:A8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf56dedf-58f6-3a50-a772-a07b6c69189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e89:4400::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:52:c6:0a:a6:52:9d:c8:7e:03:27:f1:93:31:65:4a:17: 89:63:e8:ec:9c:3b:c7:91:41:e3:9e:4e:c7:25:90:f7:03:0e: a2:a1:4c:35:d1:c6:5b:98:e2:1a:e7:5b:88:eb:a0:af:84:2f: 45:b5:a3:53:ba:c5:fa:cb:bc:49:78:63:38:d4:44:be:5b:25: 14:6a:8b:9d:f4:4a:88:51:bf:af:e6:ef:77:76:45:f7:76:03: b2:4e:36:29:99:30:ec:c1:26:b3:93:68:ee:79:1f:21:9f:49: db:8a:29:5f:af:d0:78:1d:26:f1:cb:47:76:1f:0f:a9:b2:ae: 0d:55:0c:69:4f:a3:84:0c:70:0e:2c:d6:cf:6a:75:af:94:1a: db:cb:95:03:37:ed:ce:90:76:f1:7f:7e:54:ce:bb:ee:05:e2: db:ef:f5:3a:0f:57:de:63:7a:6e:1d:ff:75:5c:c5:9f:32:6a: 61:8f:41:e7:6c:55:7d:49:47:ed:fd:5c:bb:b2:7f:87:6e:3e: 7a:8c:e5:3a:e3:70:54:c4:7d:74:44:f3:16:43:b1:cf:dd:73: e1:66:e7:69:12:69:d7:3d:93:96:75:b5:fd:08:2f:5e:c4:f4: d5:33:58:bf:0c:a7:51:5d:38:9c:ba:9b:12:22:1e:26:e8:6d: b2:2b:1f:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nnDdcZd272aI3x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTVmNzAwMDgtNjMzZC00NDNiLWJlYmYtYWEyNDhlMDE0ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkYKamLLFxs0Jeu5F41+y8WAXea4uobGC0FF qTR2ASFBizIS0JnSCjwFz4LalxTHboyx5wVOxjnG1PtHjy/HZ55GjxX2Pd+13PsB CjEhA/rtCgElGEkfVUUyDECPGJGvdgowGwhRWPaz1wPpV5ScKtJfNeJsYwWMpEXk zpftn9UBZHOXI0lRwA5jWteMP7eA0T9DM85bFTZ4UPeu3KhvIdJHlqHSIuPYAYJH dsZXZTDrNpiJ2q+hDOF5oUmCtWN/biDCsUz/O8cjhdR2nAQJuF6Cqn+phnot9OvD z+LboXQWkIvKJWoPPGI4T6uu12GSrCWVPsz/2NrVZf9C/hKtewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFUcP0QJeYTj+ABIYnKnPdNqbahuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmY1NmRlZGYtNThmNi0z YTUwLWE3NzItYTA3YjZjNjkxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAA/JSxgqmUp3IfgMn8ZMxZUoXiWPo7Jw7x5FB455OxyWQ9wMOoqFM NdHGW5jiGudbiOugr4QvRbWjU7rF+su8SXhjONREvlslFGqLnfRKiFG/r+bvd3ZF 93YDsk42KZkw7MEms5No7nkfIZ9J24opX6/QeB0m8ctHdh8PqbKuDVUMaU+jhAxw DizWz2p1r5Qa28uVAzftzpB28X9+VM677gXi2+/1Og9X3mN6bh3/dVzFnzJqYY9B 52xVfUlH7f1cu7J/h24+eozlOuNwVMR9dETzFkOxz91z4WbnaRJp1z2TlnW1/Qgv XsT01TNYvwynUV04nLqbEiIeJuhtsisf9Q== -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:54 2026 by rpki-client