$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa File: 1b1238eb-e2b9-3136-b32f-5b31006cc966.roa (raw, json) Hash identifier: foo8zYnAqq3BMnr5JuUCoEZLok9fmtQFDR/3QsAjfy8= Subject key identifier: 77:36:CB:3C:07:A8:2A:3B:E8:45:4C:CA:2A:A8:8C:55:30:18:F9:71 Certificate issuer: /CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Certificate serial: 010D0C9F4328584EA7917FABC03BA2C4BD467200 Authority key identifier: F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 897 IP address blocks: 2620:ab:a000::/48 maxlen: 48 2620:ab:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:7f:ab:c0:3b:a2:c4:bd:46:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39b6b2fc-3422-46e7-b637-7b8dcb84bff1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5443876b-4d11-4dcf-9b7c-f83bf6ae0b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8d:f8:70:d6:9e:2c:1e:be:82:db:66:26:52: 32:e0:6d:5b:c0:5a:c8:31:6b:5b:9b:68:af:f7:17: 68:5e:05:81:7e:5e:90:9f:78:0b:98:4a:a0:d6:a8: 5a:20:e3:3b:0f:6c:ba:28:55:1b:a3:0c:9b:79:e5: 42:a7:65:b2:17:9c:45:41:b6:1a:89:f6:1e:46:d5: ac:60:16:72:91:f9:91:8e:21:aa:28:b2:f6:b6:19: 3f:68:17:13:48:b3:a8:97:d1:c7:63:07:bf:17:73: 7e:a7:3a:fc:30:3c:ca:49:2d:71:88:1d:5e:6b:85: ed:74:f8:92:46:0c:95:5e:b0:5b:39:d0:70:3c:02: fe:82:6a:6c:91:11:ae:37:4f:d3:35:63:cd:60:5a: 80:83:e3:a3:aa:7d:6e:f1:d4:32:a0:37:30:49:37: cf:af:47:b5:63:d1:9e:38:93:6d:53:40:a8:d4:60: 4c:cd:8a:c2:a7:8c:66:46:b2:1f:ee:fb:b5:fe:1a: a1:7f:50:1d:6b:ff:e6:bf:cb:39:63:96:da:8c:2f: ce:e5:5e:c2:29:14:b5:01:ad:15:d2:d0:de:70:03: fd:b3:5d:96:d0:51:67:bf:6e:07:9e:76:5b:70:c7: 11:b6:d9:66:18:86:81:2c:1c:d9:ea:cf:0e:b0:46: 9e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:CB:3C:07:A8:2A:3B:E8:45:4C:CA:2A:A8:8C:55:30:18:F9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/1b1238eb-e2b9-3136-b32f-5b31006cc966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.crl X509v3 Authority Key Identifier: keyid:F5:79:B5:2B:5C:12:7C:0B:C8:CD:00:75:42:2C:15:FC:6F:A6:37:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/39b6b2fc-3422-46e7-b637-7b8dcb84bff1.cer sbgp-ipAddrBlock: critical IPv6: 2620:ab:a000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e3:f2:17:46:4c:de:18:6d:1e:d8:b7:fb:be:c2:14:5f:96: d3:31:ad:03:3e:34:48:f3:f1:f0:ce:7b:e1:66:a1:83:1c:22: 7d:f7:db:92:8a:c7:cf:f5:5d:f1:52:07:2c:eb:77:ea:e4:3c: 72:1c:c6:ca:82:bc:95:9a:ef:b6:1e:c2:ef:a9:5a:19:e5:21: 29:60:17:6f:04:55:76:12:ae:8f:8f:59:a4:58:1f:68:0f:ea: 99:58:f2:de:53:f1:50:3f:df:68:ee:da:fe:b1:dc:15:af:49: dd:4f:f8:fe:16:a8:0e:b7:43:5e:a3:d3:1b:3b:4f:4b:11:22: 20:80:78:8c:71:72:ce:e7:a9:4c:ad:7b:01:67:df:a1:1a:03: 20:b9:03:86:66:32:77:05:92:9d:08:dc:96:7c:9c:5f:40:02: f9:6f:06:56:9e:b9:9e:af:fc:0c:1a:b8:7a:d7:1d:2f:a4:5a: 8d:1e:53:f7:e6:35:e0:43:b0:fa:fa:1d:36:a9:c1:df:dc:9c: 9a:45:c5:ce:b4:38:8f:45:ca:fc:a0:5e:0b:87:42:6f:5b:dc: 47:3a:78:7c:d1:82:8a:7a:1d:e6:a2:98:7d:b8:24:0f:31:9e: 55:68:cd:5e:e1:cf:87:16:10:89:84:4d:7d:f1:50:0a:66:da: 77:e5:75:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkX+rwDuixL1GcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzliNmIyZmMtMzQyMi00NmU3LWI2MzctN2I4ZGNiODRi ZmYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTQ0Mzg3NmItNGQxMS00ZGNmLTliN2MtZjgzYmY2YWUwYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI34cNaeLB6+gttmJlIy4G1bwFrIMWtbm2iv 9xdoXgWBfl6Qn3gLmEqg1qhaIOM7D2y6KFUbowybeeVCp2WyF5xFQbYaifYeRtWs YBZykfmRjiGqKLL2thk/aBcTSLOol9HHYwe/F3N+pzr8MDzKSS1xiB1ea4XtdPiS RgyVXrBbOdBwPAL+gmpskRGuN0/TNWPNYFqAg+Ojqn1u8dQyoDcwSTfPr0e1Y9Ge OJNtU0Co1GBMzYrCp4xmRrIf7vu1/hqhf1Ada//mv8s5Y5bajC/O5V7CKRS1Aa0V 0tDecAP9s12W0FFnv24HnnZbcMcRttlmGIaBLBzZ6s8OsEaefwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHc2yzwHqCo76EVMyiqojFUwGPlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zOWI2 YjJmYy0zNDIyLTQ2ZTctYjYzNy03YjhkY2I4NGJmZjEvMWIxMjM4ZWItZTJiOS0z MTM2LWIzMmYtNWIzMTAwNmNjOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzliNmIyZmMtMzQyMi00NmU3LWI2 MzctN2I4ZGNiODRiZmYxLzM5YjZiMmZjLTM0MjItNDZlNy1iNjM3LTdiOGRjYjg0 YmZmMS5jcmwwHwYDVR0jBBgwFoAU9Xm1K1wSfAvIzQB1QiwV/G+mN3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zOWI2YjJmYy0zNDIyLTQ2ZTctYjYzNy03Yjhk Y2I4NGJmZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAq6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3j8hdGTN4YbR7Yt/u+whRfltMxrQM+NEjz8fDOe+FmoYMcIn33 25KKx8/1XfFSByzrd+rkPHIcxsqCvJWa77Yewu+pWhnlISlgF28EVXYSro+PWaRY H2gP6plY8t5T8VA/32ju2v6x3BWvSd1P+P4WqA63Q16j0xs7T0sRIiCAeIxxcs7n qUytewFn36EaAyC5A4ZmMncFkp0I3JZ8nF9AAvlvBlaeuZ6v/AwauHrXHS+kWo0e U/fmNeBDsPr6HTapwd/cnJpFxc60OI9FyvygXguHQm9b3Ec6eHzRgop6HeaimH24 JA8xnlVozV7hz4cWEImETX3xUApm2nfldU0= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:33 2026 by rpki-client