$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa File: e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa (raw, json) Hash identifier: ICyJ86TNA8T2ihMhgMaeiiwPMrm1gvyHy2mdPlUbrWU= Subject key identifier: 86:E0:C9:ED:DD:5E:88:31:81:F8:27:B2:EB:D9:86:23:07:EA:CF:C7 Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Certificate serial: 010D0C9F4328584EA7888302C2D6C4741629B380 Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20417 IP address blocks: 2602:f7d1::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:83:02:c2:d6:c4:74:16:29:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=170fef96-94bf-49e8-b489-dd4662e337f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:05:f9:1e:4e:4e:c8:1f:e7:83:58:9c:d3: b5:a8:30:b1:41:4b:8f:59:98:5a:fb:e9:3f:e7:24: 6c:62:ac:d2:64:55:b8:ed:15:f5:00:e1:69:ff:ef: 49:50:24:c4:f4:af:f9:b4:39:dd:3d:92:f9:53:27: a7:4a:af:02:56:8a:83:91:43:99:53:f9:d6:37:65: 4d:2c:c8:d9:43:31:f9:4f:88:f1:9d:03:d5:17:8e: 06:cd:75:b9:80:9d:c0:5f:97:b3:9f:48:e0:de:03: 6f:73:a6:08:2b:36:12:7d:cc:d5:96:69:b1:5c:44: 2e:f0:1b:d1:26:bf:12:12:99:b4:ad:8b:38:8b:3d: 19:f2:23:7c:ea:4f:16:27:9f:73:61:7b:6c:5a:cc: 72:20:f3:75:dd:39:ce:56:9f:8b:97:14:ec:e1:b6: 17:eb:d0:30:77:5e:8f:ef:99:2a:06:c2:f7:74:50: 07:b6:d8:da:c1:fc:2b:1a:1a:36:5d:24:b1:01:7b: c9:6d:d3:52:d0:4e:36:38:c7:5c:31:fb:7f:7d:92: 8e:a7:70:05:d4:de:15:e7:9e:81:91:ec:c4:c7:c4: c7:2b:6b:9a:7f:be:58:3c:ca:d8:6c:bb:e0:86:ae: e4:ab:65:fc:e6:0e:ff:69:bd:f5:94:b2:1a:ad:28: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E0:C9:ED:DD:5E:88:31:81:F8:27:B2:EB:D9:86:23:07:EA:CF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl X509v3 Authority Key Identifier: keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7d1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:13:41:bb:54:d6:41:84:8a:dd:fc:6c:b5:3a:8b:a0:09:84: 76:f2:c2:e9:d0:13:45:5a:11:ec:b4:c8:f1:30:68:20:a9:21: 0b:c1:47:83:05:94:0f:90:8c:db:f8:8d:d3:9e:97:a8:24:15: 39:a3:da:d2:24:50:00:34:03:da:67:39:eb:ef:50:b9:f2:68: 34:b5:8d:74:8f:e4:90:b6:b8:7c:0c:00:9f:fc:87:68:c9:ac: d0:c3:8f:7c:9c:09:12:97:b0:20:da:24:3f:1b:b4:70:5c:54: 79:fe:4e:cc:ef:ab:3e:86:fa:12:b0:b0:cc:b2:f7:de:85:fb: d9:26:fc:42:f2:e9:7c:5d:d8:3d:bd:bf:3c:72:f1:d5:e7:75: c2:f8:8b:05:7a:78:83:7b:9c:ab:04:cf:8f:07:63:0d:88:c4: 2d:57:86:68:9b:f0:bb:18:37:5d:02:ad:4b:8b:82:b9:86:65: bc:c1:7b:55:3e:54:4f:04:94:35:05:4a:85:8a:0f:da:4d:29: 07:c8:31:4a:40:1f:7b:5f:7c:56:f7:68:57:cb:b1:88:49:41: 61:dc:dd:e3:6b:67:c6:68:ed:e0:fe:be:07:28:79:8e:c2:1f: b6:d2:10:15:8b:7c:6a:77:34:f7:e8:ea:9f:b3:60:be:04:4a: 9e:5f:ec:b8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niIMCwtbEdBYps4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZiZmUwMGEtM2ZkNy00MGM3LWIzYmUtMTBmOWI2OTY4 ODM2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTcwZmVmOTYtOTRiZi00OWU4LWI0ODktZGQ0NjYyZTMzN2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIYF+R5OTsgf54NYnNO1qDCxQUuPWZha++k/ 5yRsYqzSZFW47RX1AOFp/+9JUCTE9K/5tDndPZL5UyenSq8CVoqDkUOZU/nWN2VN LMjZQzH5T4jxnQPVF44GzXW5gJ3AX5ezn0jg3gNvc6YIKzYSfczVlmmxXEQu8BvR Jr8SEpm0rYs4iz0Z8iN86k8WJ59zYXtsWsxyIPN13TnOVp+LlxTs4bYX69Awd16P 75kqBsL3dFAHttjawfwrGho2XSSxAXvJbdNS0E42OMdcMft/fZKOp3AF1N4V556B kezEx8THK2uaf75YPMrYbLvghq7kq2X85g7/ab31lLIarSh43wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIbgye3dXogxgfgnsuvZhiMH6s/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJm ZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5YjY5Njg4MzYvZTg4OGM5ZTEtY2EzMS0z NzY5LTg5ZmEtNGU4MDk3OWYzZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZiZmUwMGEtM2ZkNy00MGM3LWIz YmUtMTBmOWI2OTY4ODM2L2RmYmZlMDBhLTNmZDctNDBjNy1iM2JlLTEwZjliNjk2 ODgzNi5jcmwwHwYDVR0jBBgwFoAUavSA+gtYKMjGLV4JpbBNL77AUG0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmJmZTAwYS0zZmQ3LTQwYzctYjNiZS0xMGY5 YjY5Njg4MzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL30QAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARxNBu1TWQYSK3fxstTqLoAmEdvLC6dATRVoR7LTI8TBoIKkhC8FH gwWUD5CM2/iN056XqCQVOaPa0iRQADQD2mc56+9QufJoNLWNdI/kkLa4fAwAn/yH aMms0MOPfJwJEpewINokPxu0cFxUef5OzO+rPob6ErCwzLL33oX72Sb8QvLpfF3Y Pb2/PHLx1ed1wviLBXp4g3ucqwTPjwdjDYjELVeGaJvwuxg3XQKtS4uCuYZlvMF7 VT5UTwSUNQVKhYoP2k0pB8gxSkAfe198VvdoV8uxiElBYdzd42tnxmjt4P6+Byh5 jsIfttIQFYt8anc09+jqn7NgvgRKnl/suA== -----END CERTIFICATE-----Generated at Wed Jul 29 10:56:32 2026 by rpki-client