$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa File: 8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa (raw, json) Hash identifier: YmsEk2RvCpDKj8H+5O2Nu7RDDFWEtfNnwAv+R1Qe7t4= Subject key identifier: 80:2B:D0:3F:E4:9C:5F:A6:78:FB:C7:FB:C8:57:60:E2:D3:27:6F:E6 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F4328584E9BE50735B9EA9EF5D568A380 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 237 IP address blocks: 2001:48a8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:07:35:b9:ea:9e:f5:d5:68:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=03786721-f435-432e-93fb-ba77edbde3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:81:f3:22:04:cf:3e:7e:cf:8d:b7:37:32: ac:7d:cd:05:6f:c2:3b:6f:19:dd:1e:cf:14:08:b3: fc:56:f4:96:05:54:c3:44:60:0d:1a:f6:b2:77:66: 19:33:8b:80:41:ac:f6:47:06:52:3c:da:2b:2a:5c: 14:19:19:73:dc:b4:77:d9:ee:7a:84:46:2d:4a:65: a5:b1:21:aa:66:14:b8:78:d9:7a:75:f4:1d:d5:1c: bc:5c:3e:a4:ed:f7:03:3e:1c:b4:25:00:7d:35:6a: dc:6c:33:f1:4b:7e:32:ea:2a:d5:ce:0c:d3:48:ff: 69:c8:23:a4:c9:bd:3b:ed:a8:93:50:9b:13:cb:f1: aa:43:db:f8:3e:54:dc:b6:36:42:b3:7f:4c:98:bb: cb:6e:c4:46:f0:fc:24:ed:50:8a:3e:dd:fc:3f:45: 1c:51:e0:34:a0:34:09:93:88:dc:80:c3:12:5a:ef: 40:31:d1:a4:0e:89:ff:df:88:6e:b5:27:59:bf:ef: b4:25:d3:00:00:ac:e1:52:82:e1:ee:fc:48:2d:04: 99:2c:11:af:c1:98:53:09:cc:d8:6f:6f:93:e8:17: 6b:68:4e:d2:bf:ed:09:e0:a0:e3:e0:e6:9f:2d:47: a2:7a:da:4a:6b:d2:e2:79:b1:4b:31:1a:88:fe:90: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:D0:3F:E4:9C:5F:A6:78:FB:C7:FB:C8:57:60:E2:D3:27:6F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/8e29d75c-ea6f-32dc-ad7f-56d0f4a3195f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:0f:e8:2f:0d:76:54:9e:6e:35:0b:1e:4a:b4:3a:43:84: b7:23:cb:38:77:37:7e:05:45:fa:3a:7b:c9:e7:46:65:f1:e6: d7:af:a5:11:ea:c6:e3:a8:a4:ab:24:b7:0b:0c:4c:59:7d:fb: d9:e1:aa:64:b5:e6:fc:df:c8:53:5e:6e:b9:bf:ea:24:e1:58: 36:5a:95:da:13:a0:ca:9f:54:3f:6e:04:ff:e5:8d:3c:ea:e7: 44:4f:f0:1b:a4:61:48:ce:71:6f:00:a7:2c:0f:e0:0a:27:fa: 0a:f6:2c:b3:ff:c6:1d:70:ec:fc:bd:56:d3:f7:96:11:0d:7d: 6e:f6:b9:f6:6e:cc:c3:b9:e4:35:2c:4e:4b:e8:95:66:5c:f2: 30:60:8d:3c:c3:5e:5c:c8:71:66:c5:fa:12:b6:a3:73:48:db: 68:4c:c1:39:81:91:50:0d:e6:2b:d9:d2:8b:99:d2:62:c7:9e: bd:72:d7:fb:fd:11:f8:2a:a3:7a:51:06:d9:97:b8:d2:50:05: db:a4:df:eb:34:6b:1a:bd:e9:bb:69:e3:d1:98:10:36:6b:e0: 14:98:67:28:e8:16:22:95:9d:82:5f:21:10:cb:80:56:b9:fa: 0d:6f:02:f8:e2:23:7d:04:70:4d:42:e4:b6:09:fd:ff:3c:68: 67:b9:fa:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6b5Qc1ueqe9dVoo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MDM3ODY3MjEtZjQzNS00MzJlLTkzZmItYmE3N2VkYmRlM2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRiB8yIEzz5+z423NzKsfc0Fb8I7bxndHs8U CLP8VvSWBVTDRGANGvayd2YZM4uAQaz2RwZSPNorKlwUGRlz3LR32e56hEYtSmWl sSGqZhS4eNl6dfQd1Ry8XD6k7fcDPhy0JQB9NWrcbDPxS34y6irVzgzTSP9pyCOk yb077aiTUJsTy/GqQ9v4PlTctjZCs39MmLvLbsRG8Pwk7VCKPt38P0UcUeA0oDQJ k4jcgMMSWu9AMdGkDon/34hutSdZv++0JdMAAKzhUoLh7vxILQSZLBGvwZhTCczY b2+T6BdraE7Sv+0J4KDj4OafLUeietpKa9LiebFLMRqI/pBCYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIAr0D/knF+mePvH+8hXYOLTJ2/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvOGUyOWQ3NWMtZWE2Zi0z MmRjLWFkN2YtNTZkMGY0YTMxOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAFIqDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvtg/oLw12VJ5uNQseSrQ6Q4S3I8s4dzd+BUX6OnvJ50Zl8ebXr6UR 6sbjqKSrJLcLDExZffvZ4apkteb838hTXm65v+ok4Vg2WpXaE6DKn1Q/bgT/5Y08 6udET/AbpGFIznFvAKcsD+AKJ/oK9iyz/8YdcOz8vVbT95YRDX1u9rn2bszDueQ1 LE5L6JVmXPIwYI08w15cyHFmxfoStqNzSNtoTME5gZFQDeYr2dKLmdJix569ctf7 /RH4KqN6UQbZl7jSUAXbpN/rNGsavem7aePRmBA2a+AUmGco6BYilZ2CXyEQy4BW ufoNbwL44iN9BHBNQuS2Cf3/PGhnufqf -----END CERTIFICATE-----Generated at Wed Jul 29 03:29:21 2026 by rpki-client