$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa File: db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa (raw, json) Hash identifier: QwPhgQCEmbAJKDSN9Fr76HZ9oLz+IlioSUTyaUiM/3Y= Subject key identifier: 8C:FE:38:75:77:AE:66:39:AC:34:5C:EA:F0:45:FB:7D:70:82:66:D5 Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584EA787DB40F36E06C538DA2700 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 29838 IP address blocks: 2602:ffb5::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:db:40:f3:6e:06:c5:38:da:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=846f7b2a-a4a7-4ab4-845c-cf6e2f1c862d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:c5:39:8a:fe:29:1e:fa:d5:43:7a:3b:bb: a9:7b:f2:54:e6:da:48:b1:03:98:9f:d2:7f:3b:7e: 06:57:75:85:09:c6:55:81:66:1b:61:fc:f1:1b:7d: db:e1:22:6c:64:d0:83:db:8d:cb:44:db:82:8e:0e: 9e:1d:30:46:cb:67:d5:c6:52:80:71:ba:4b:fb:4a: 50:11:f8:dc:c6:15:af:8f:95:94:83:b9:a8:f3:45: b1:9c:83:ca:52:0d:03:d1:b3:2a:c0:88:a2:c6:af: c5:fc:44:3f:69:75:0e:d0:42:5f:66:23:92:0a:2e: f7:12:98:73:5b:83:e8:72:ba:7d:14:a6:57:7f:05: bd:38:bb:43:dd:8b:47:9e:0e:7e:5c:f1:94:58:83: 95:df:a0:d5:3f:08:d5:19:e2:fd:26:54:92:be:91: d4:4e:fc:de:fd:27:3c:d3:9c:30:8c:e6:8e:e8:04: 1d:b3:6a:29:67:a5:1d:f5:44:05:53:3a:2f:12:63: ad:19:3f:2c:78:24:00:b4:11:a2:a2:c9:15:31:94: ed:6e:b1:2d:e7:a8:0e:f9:ab:01:14:f2:31:71:8e: 63:ef:da:c2:a2:84:fa:0f:04:38:dd:36:8f:11:3c: b4:9e:7d:7b:bf:48:b3:65:6c:c5:1e:b9:84:fa:c8: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FE:38:75:77:AE:66:39:AC:34:5C:EA:F0:45:FB:7D:70:82:66:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/db48cbec-4811-31a3-98cf-ab8a3dde22c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv6: 2602:ffb5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2b:c6:85:66:42:03:79:df:b2:7b:24:d4:80:a4:04:6f:f0: 95:bb:b2:76:5d:c3:54:bc:5b:29:d4:86:fa:f5:19:8c:bf:ea: af:9e:39:ac:89:81:dc:7e:0b:07:72:14:63:d6:f0:c2:e6:94: 58:7d:fc:98:92:7e:e2:6c:ae:f2:0e:4e:85:f2:e7:1d:5c:b4: 79:39:c7:8d:83:75:72:a0:61:86:7f:2a:94:32:95:2c:4a:94: ed:81:ae:95:71:47:88:00:f5:e8:92:53:40:d9:11:be:bd:e2: 8e:c9:ca:fe:d8:eb:7a:6e:bb:17:4f:72:70:39:ba:aa:fc:f4: 85:65:fb:b6:94:ce:5d:25:12:17:d3:90:6b:d3:ae:ec:9a:1a: df:c6:b5:85:d1:b1:f2:d2:f1:60:88:e7:4e:5e:ea:a0:b6:0f: 84:a8:97:24:10:61:50:4a:90:2b:1f:a0:90:7b:45:aa:84:51: c6:f1:02:77:58:1e:7a:1b:4e:49:74:d4:25:a7:79:60:7a:b4: 2d:c3:5d:e2:fe:52:e4:79:fa:a1:d5:19:5b:c6:66:2d:d3:fc: 4c:ea:c2:2d:f3:b8:ec:da:25:a5:63:83:42:6d:ad:d8:92:f8: 30:82:2b:67:78:5e:18:8e:66:9f:10:c2:de:71:04:8e:8b:ae: 01:be:6e:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nh9tA824GxTjaJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODQ2ZjdiMmEtYTRhNy00YWI0LTg0NWMtY2Y2ZTJmMWM4NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvETFOYr+KR761UN6O7upe/JU5tpIsQOYn9J/ O34GV3WFCcZVgWYbYfzxG33b4SJsZNCD243LRNuCjg6eHTBGy2fVxlKAcbpL+0pQ EfjcxhWvj5WUg7mo80WxnIPKUg0D0bMqwIiixq/F/EQ/aXUO0EJfZiOSCi73Ephz W4Pocrp9FKZXfwW9OLtD3YtHng5+XPGUWIOV36DVPwjVGeL9JlSSvpHUTvze/Sc8 05wwjOaO6AQds2opZ6Ud9UQFUzovEmOtGT8seCQAtBGioskVMZTtbrEt56gO+asB FPIxcY5j79rCooT6DwQ43TaPETy0nn17v0izZWzFHrmE+sjEhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIz+OHV3rmY5rDRc6vBF+31wgmbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvZGI0OGNiZWMtNDgxMS0z MWEzLTk4Y2YtYWI4YTNkZGUyMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/tQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAeivGhWZCA3nfsnsk1ICkBG/wlbuydl3DVLxbKdSG+vUZjL/qr545 rImB3H4LB3IUY9bwwuaUWH38mJJ+4myu8g5OhfLnHVy0eTnHjYN1cqBhhn8qlDKV LEqU7YGulXFHiAD16JJTQNkRvr3ijsnK/tjrem67F09ycDm6qvz0hWX7tpTOXSUS F9OQa9Ou7Joa38a1hdGx8tLxYIjnTl7qoLYPhKiXJBBhUEqQKx+gkHtFqoRRxvEC d1geehtOSXTUJad5YHq0LcNd4v5S5Hn6odUZW8ZmLdP8TOrCLfO47NolpWODQm2t 2JL4MIIrZ3heGI5mnxDC3nEEjouuAb5utw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:53:05 2026 by rpki-client