$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa File: 408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json) Hash identifier: MpwLxfzhN7zyegO25iU+2f/J3QMyaqrXgWxQL39B8gM= Subject key identifier: 9A:FE:BC:2A:DD:DF:27:A4:34:03:8A:80:48:CC:FC:D2:81:49:39:E8 Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8 Certificate serial: 010D0C9F4328584EA78867E5AC1C4E9C90D40300 Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401457 IP address blocks: 2602:f7bb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:67:e5:ac:1c:4e:9c:90:d4:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f188afaa-d018-4615-bffe-c3f92d9d62a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:e5:5f:16:47:1d:01:cd:30:17:8b:4f:b0: 5f:48:53:e5:a2:04:eb:e7:65:e0:f2:4f:46:a6:a2: 96:28:3b:53:45:ad:e0:f7:09:e5:55:d1:bb:6b:8c: 65:32:55:c3:8f:e1:ea:72:c0:82:18:bd:07:16:ec: 30:97:ab:c2:9b:84:e6:08:8a:d0:a6:48:66:ea:42: c7:ae:2a:5f:0c:8c:ec:2c:6c:51:d2:fb:32:51:24: 51:ec:de:91:8b:ab:40:83:e8:85:7a:4f:40:48:36: e3:7e:5d:ad:f8:b7:77:73:f7:63:c1:b7:dc:e5:5f: 4e:dd:87:64:bc:4a:d7:7d:71:ba:34:11:b1:a6:d5: bf:8f:35:44:ea:1f:a3:a4:69:df:5d:da:9e:54:ca: 89:1a:6b:fa:17:db:75:90:d0:ef:3d:91:9e:9d:ed: 0a:41:df:5a:78:d0:95:88:a0:54:36:88:2a:76:b0: 29:42:08:a5:c2:60:8f:44:e3:10:d5:ef:8e:b5:19: b8:91:48:41:38:63:16:ab:8e:f0:3b:d2:d2:0c:3d: d9:42:20:8d:4e:83:21:35:5d:15:91:b4:83:af:54: c1:0c:5a:31:60:3f:87:01:6f:08:e5:de:bd:bf:f5: 60:fd:67:b6:31:24:dd:d9:a4:76:cc:4c:bb:34:a9: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FE:BC:2A:DD:DF:27:A4:34:03:8A:80:48:CC:FC:D2:81:49:39:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl X509v3 Authority Key Identifier: keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7bb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:46:9e:5a:d0:5e:3c:d9:b3:c2:f7:ed:2e:8d:1c:a6:d7:1a: dc:00:00:c6:c2:09:69:d3:fd:a8:22:ca:5b:0f:33:34:0f:e0: f2:10:5c:f1:d7:0d:e3:62:0c:1a:4d:7c:48:e7:73:07:4c:53: f1:e3:38:dd:eb:3c:2d:04:bb:7a:53:82:66:0e:01:c1:4a:b1: f6:0d:29:ff:17:d5:67:2d:16:4d:61:0b:41:a9:18:36:3c:14: e5:a9:87:3b:1a:5d:72:72:29:81:9d:d5:b9:9d:f3:d5:77:28: 72:9b:50:4b:ba:b5:84:c0:f0:ff:94:f1:95:82:ab:ed:c8:34: 22:63:6a:a5:86:e1:c2:b9:f1:58:69:ae:c7:c3:5f:42:e6:d7: 0e:80:71:3f:38:c2:a3:fa:29:d2:90:13:df:ec:a8:bd:54:17: 65:d9:95:d9:2e:07:15:55:8b:ae:7a:92:7d:56:ea:1a:7b:89: 2c:d0:e0:db:31:e1:08:b2:55:38:5f:6e:61:78:a1:68:bc:b2: 41:69:d4:9a:d9:e7:d4:e4:0c:ae:d2:5f:99:af:7e:65:e6:32: 02:a6:40:21:ad:24:2a:26:8d:13:02:f3:ea:0c:be:46:d7:89: bc:c3:b4:96:99:fe:05:21:d0:fb:c7:8c:cc:58:8a:0b:45:9d: 05:fa:c5:4c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niGflrBxOnJDUAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4YTBhMjEtZDEwMS00NjRjLTg3MDYtMjViYjE1NzU0 NWM4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE4OGFmYWEtZDAxOC00NjE1LWJmZmUtYzNmOTJkOWQ2MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLlXxZHHQHNMBeLT7BfSFPlogTr52Xg8k9G pqKWKDtTRa3g9wnlVdG7a4xlMlXDj+HqcsCCGL0HFuwwl6vCm4TmCIrQpkhm6kLH ripfDIzsLGxR0vsyUSRR7N6Ri6tAg+iFek9ASDbjfl2t+Ld3c/djwbfc5V9O3Ydk vErXfXG6NBGxptW/jzVE6h+jpGnfXdqeVMqJGmv6F9t1kNDvPZGene0KQd9aeNCV iKBUNogqdrApQgilwmCPROMQ1e+OtRm4kUhBOGMWq47wO9LSDD3ZQiCNToMhNV0V kbSDr1TBDFoxYD+HAW8I5d69v/Vg/We2MSTd2aR2zEy7NKmRvwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJr+vCrd3yekNAOKgEjM/NKBSTnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80Nzhh MGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJiMTU3NTQ1YzgvNDA4ZTk1OGUtYjYwZS0z MGQzLWJjYTktNDU5NmFmZWNjY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDc4YTBhMjEtZDEwMS00NjRjLTg3 MDYtMjViYjE1NzU0NWM4LzQ3OGEwYTIxLWQxMDEtNDY0Yy04NzA2LTI1YmIxNTc1 NDVjOC5jcmwwHwYDVR0jBBgwFoAUNcXLPqvEc4Whq6zjIWHTNz4I6RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NzhhMGEyMS1kMTAxLTQ2NGMtODcwNi0yNWJi MTU3NTQ1YzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL3uwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmUaeWtBePNmzwvftLo0cptca3AAAxsIJadP9qCLKWw8zNA/g8hBc 8dcN42IMGk18SOdzB0xT8eM43es8LQS7elOCZg4BwUqx9g0p/xfVZy0WTWELQakY NjwU5amHOxpdcnIpgZ3VuZ3z1XcocptQS7q1hMDw/5TxlYKr7cg0ImNqpYbhwrnx WGmux8NfQubXDoBxPzjCo/op0pAT3+yovVQXZdmV2S4HFVWLrnqSfVbqGnuJLNDg 2zHhCLJVOF9uYXihaLyyQWnUmtnn1OQMrtJfma9+ZeYyAqZAIa0kKiaNEwLz6gy+ RteJvMO0lpn+BSHQ+8eMzFiKC0WdBfrFTA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:56:49 2026 by rpki-client