$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa File: cd63a45e-2751-3074-836a-cb6f05c00e47.roa (raw, json) Hash identifier: umgISe+w8FeIE7dWCxocAiMk/lzJ+yDkB4jV7TqmjCY= Subject key identifier: 4A:EA:A7:09:04:9F:FB:8D:68:23:6D:A3:22:E1:2D:D3:8A:18:70:A9 Certificate issuer: /CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Certificate serial: 010D0C9F4328584EA794829EFF56809B0B68C450 Authority key identifier: 4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30144 IP address blocks: 2604:9b80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:82:9e:ff:56:80:9b:0b:68:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b83d5bd-d1f5-4f10-b856-389ebf4a62dc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9ac58b81-e882-4164-8298-dd4f7655e022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:95:be:19:6e:c0:52:ca:c2:0d:07:ab:ea: 70:29:bf:51:ad:92:84:f5:47:c8:51:03:fe:db:14: 67:f4:2a:e6:fc:0f:30:3c:1c:e9:9d:4e:05:a2:d0: a0:23:94:88:31:3e:6b:80:09:1b:3c:a5:36:08:38: b8:c1:fb:0f:29:7f:9d:0f:51:23:6a:aa:c8:b3:78: a8:21:4c:5f:1b:be:28:b2:2d:8e:5a:11:03:5c:8d: d3:ca:3b:fa:c0:40:37:2b:3c:49:1f:be:bf:f1:42: 83:f0:84:c5:96:f8:17:e3:b3:80:55:77:8a:e2:f9: 80:c2:cf:08:7a:fe:1e:31:6b:9f:d6:c2:bc:b2:13: 86:8d:23:62:f3:c4:8e:fb:41:a2:8c:79:5b:b0:ed: b7:cb:aa:7c:68:87:98:42:a2:37:d8:f4:21:c1:ad: 4a:e1:87:19:42:d9:21:3d:0b:78:47:26:45:0c:d6: f7:d2:69:e6:6c:85:87:cc:2e:b2:bc:8a:5b:c2:df: 47:02:d3:73:a5:fe:90:17:e6:fe:43:3d:4b:94:5c: f4:21:67:77:76:f8:d6:6c:2c:3e:9f:4c:0d:af:e5: 2d:55:60:38:73:53:09:c7:df:35:e8:27:d7:90:30: e4:9b:32:9f:fc:bf:5b:c0:5b:a5:16:18:5e:fc:ce: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:A7:09:04:9F:FB:8D:68:23:6D:A3:22:E1:2D:D3:8A:18:70:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/cd63a45e-2751-3074-836a-cb6f05c00e47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.crl X509v3 Authority Key Identifier: keyid:4F:BF:D5:D7:B3:DD:D2:CB:F7:C7:EA:9C:1A:CE:98:DA:DA:48:B8:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b83d5bd-d1f5-4f10-b856-389ebf4a62dc.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4c:e1:82:9c:2f:7e:92:8d:4f:47:9a:d6:f5:1f:1f:97:ed: 6a:2b:09:00:7f:bd:a3:9d:3f:e5:47:f1:2f:87:04:4b:2c:00: b7:ec:60:ea:7f:06:8c:83:eb:65:3a:65:6a:a5:90:2f:ad:4e: 3a:be:98:ee:37:f5:7a:17:83:fb:63:67:35:a9:a7:49:7d:64: 6e:ec:84:0c:91:b3:da:40:33:19:2f:68:71:86:2c:29:ba:ab: 84:f5:3d:a8:3e:54:15:4e:03:35:d9:f0:6e:71:9b:47:8c:66: eb:9e:79:fa:2d:35:67:c7:b9:da:6d:d3:60:3d:c1:90:92:5f: c3:8c:0d:95:79:fb:39:f6:de:9a:ce:9b:bf:c4:51:74:c7:8e: f6:e9:3e:e1:73:5b:d4:19:02:bb:6d:14:42:8f:9e:c8:c3:25: 91:3e:ec:02:ae:55:45:53:b5:de:63:25:df:51:bc:d5:f6:30: cd:59:c1:79:27:40:f9:05:b8:b2:4d:60:77:a8:58:2f:62:cb: bf:44:f9:81:d2:40:f0:7e:a2:82:78:8b:80:0c:49:62:5c:50: 28:da:a2:fd:ab:76:31:1c:70:e5:40:28:ed:f1:79:0e:69:09: 38:a5:f5:b5:e6:5a:d0:0b:94:70:72:8b:09:ba:91:5b:0e:7b: 16:de:33:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlIKe/1aAmwtoxFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4M2Q1YmQtZDFmNS00ZjEwLWI4NTYtMzg5ZWJmNGE2 MmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWFjNThiODEtZTg4Mi00MTY0LTgyOTgtZGQ0Zjc2NTVlMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozmVvhluwFLKwg0Hq+pwKb9RrZKE9UfIUQP+ 2xRn9Crm/A8wPBzpnU4FotCgI5SIMT5rgAkbPKU2CDi4wfsPKX+dD1EjaqrIs3io IUxfG74osi2OWhEDXI3Tyjv6wEA3KzxJH76/8UKD8ITFlvgX47OAVXeK4vmAws8I ev4eMWuf1sK8shOGjSNi88SO+0GijHlbsO23y6p8aIeYQqI32PQhwa1K4YcZQtkh PQt4RyZFDNb30mnmbIWHzC6yvIpbwt9HAtNzpf6QF+b+Qz1LlFz0IWd3dvjWbCw+ n0wNr+UtVWA4c1MJx9816CfXkDDkmzKf/L9bwFulFhhe/M7emwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFErqpwkEn/uNaCNtoyLhLdOKGHCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgz ZDViZC1kMWY1LTRmMTAtYjg1Ni0zODllYmY0YTYyZGMvY2Q2M2E0NWUtMjc1MS0z MDc0LTgzNmEtY2I2ZjA1YzAwZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4M2Q1YmQtZDFmNS00ZjEwLWI4 NTYtMzg5ZWJmNGE2MmRjLzNiODNkNWJkLWQxZjUtNGYxMC1iODU2LTM4OWViZjRh NjJkYy5jcmwwHwYDVR0jBBgwFoAUT7/V17Pd0sv3x+qcGs6Y2tpIuHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjgzZDViZC1kMWY1LTRmMTAtYjg1Ni0zODll YmY0YTYyZGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGTOGCnC9+ko1PR5rW9R8fl+1qKwkAf72jnT/lR/EvhwRLLAC37GDq fwaMg+tlOmVqpZAvrU46vpjuN/V6F4P7Y2c1qadJfWRu7IQMkbPaQDMZL2hxhiwp uquE9T2oPlQVTgM12fBucZtHjGbrnnn6LTVnx7nabdNgPcGQkl/DjA2Vefs59t6a zpu/xFF0x4726T7hc1vUGQK7bRRCj57IwyWRPuwCrlVFU7XeYyXfUbzV9jDNWcF5 J0D5BbiyTWB3qFgvYsu/RPmB0kDwfqKCeIuADEliXFAo2qL9q3YxHHDlQCjt8XkO aQk4pfW15lrQC5RwcosJupFbDnsW3jMW -----END CERTIFICATE-----Generated at Wed Jul 29 08:57:02 2026 by rpki-client