$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa File: 4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa (raw, json) Hash identifier: xIXOmgrk3sGXK30oDzeeZ7ZBWtBn66R5BJrepetkt8M= Subject key identifier: 6E:88:1D:DB:62:75:81:E6:5C:8C:46:67:1A:A5:8F:64:22:E4:C4:EF Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F4328584E9BE52E2443FF3384D9DA0000 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 212001 IP address blocks: 2602:fd50:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2e:24:43:ff:33:84:d9:da:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=ba3f1e43-d715-44db-817d-52c8b3f7509a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:3e:6b:52:7b:ad:8b:12:a8:e9:42:39:f0: e9:de:1a:8c:0c:c2:0c:cf:00:a0:9a:cb:38:83:5a: de:e7:8c:ad:6a:05:08:8c:10:f1:17:aa:ee:87:63: be:99:78:02:15:ea:a6:c2:d3:11:2f:9c:bf:ad:04: c2:f5:c5:e0:3e:be:72:9d:33:74:46:af:52:63:de: a7:e0:47:c9:87:d3:22:9f:b3:9c:99:58:b9:9c:8e: a8:11:ca:1d:21:d2:46:4d:a8:b9:ef:b7:6b:2c:3c: eb:7f:5f:c1:b5:87:63:cb:65:3c:8b:94:42:07:70: 59:9a:47:02:df:d8:06:16:a3:30:b1:ed:e4:c0:39: 64:6d:70:d5:53:37:f8:7d:6f:52:8f:e9:61:fc:3e: 82:2e:40:77:a6:25:01:40:1c:e1:ad:4a:6a:8a:79: b6:ea:b9:8e:e3:ee:19:0c:53:25:87:6d:3d:d3:3a: 24:57:bf:74:7b:58:2e:1c:9d:cf:6c:61:9a:4b:2c: ca:38:66:43:e6:f8:b4:5d:66:6c:fb:6d:77:02:3d: f9:d7:8d:8a:64:3f:d7:e6:86:cc:08:2d:d0:af:c5: 48:1d:b5:af:8d:b2:f9:fa:26:32:16:67:d4:b5:12: 48:ad:68:97:3f:9c:26:f4:c5:00:f4:6b:f4:9e:9b: 58:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:88:1D:DB:62:75:81:E6:5C:8C:46:67:1A:A5:8F:64:22:E4:C4:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4391cfe2-c442-38a3-bc5b-60cea8f4e631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd50:8000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b4:eb:31:67:43:a5:2c:1c:c6:73:8f:81:90:85:ef:41:b3: c1:a4:9c:75:65:4a:28:3b:40:60:98:cf:28:fe:79:0f:48:ca: ae:95:17:57:30:22:29:65:81:40:2a:ba:94:6f:12:23:da:b8: ec:36:be:61:96:da:c5:94:67:41:58:56:7a:4d:5c:e0:7f:f3: 4e:25:fe:07:f8:03:fe:15:41:32:74:bc:01:d1:db:29:b9:a9: a1:23:8d:52:39:e1:40:6a:45:a8:72:9f:82:f2:94:d7:51:7d: 54:bb:fd:72:08:5e:0a:e7:43:21:d9:b4:04:0f:67:8b:5d:3e: d7:19:de:74:7b:82:9d:84:92:ac:7f:d4:52:cd:56:5b:2b:c6: a0:c0:d6:a5:bc:b1:76:2e:2e:78:23:d2:dd:db:f3:81:88:48: d1:a5:a7:0c:3c:36:76:64:be:f2:3b:6c:09:0a:fa:d1:2f:f8: ef:23:10:0b:fe:a0:c8:46:07:57:59:6b:a5:5f:f2:83:f7:8e: e7:b9:e6:da:b6:5d:d3:d1:8d:19:4e:5a:c9:bd:db:b6:87:02: 67:a9:f8:7f:91:55:e3:ea:42:1d:8a:13:42:28:a0:a2:7a:05: e1:51:a7:33:57:04:f0:a2:43:cb:8c:c8:6a:12:f5:87:02:7f: dd:18:0d:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6b5S4kQ/8zhNnaAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YmEzZjFlNDMtZDcxNS00NGRiLTgxN2QtNTJjOGIzZjc1MDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9s+a1J7rYsSqOlCOfDp3hqMDMIMzwCgmss4 g1re54ytagUIjBDxF6ruh2O+mXgCFeqmwtMRL5y/rQTC9cXgPr5ynTN0Rq9SY96n 4EfJh9Min7OcmVi5nI6oEcodIdJGTai577drLDzrf1/BtYdjy2U8i5RCB3BZmkcC 39gGFqMwse3kwDlkbXDVUzf4fW9Sj+lh/D6CLkB3piUBQBzhrUpqinm26rmO4+4Z DFMlh2090zokV790e1guHJ3PbGGaSyzKOGZD5vi0XWZs+213Aj35142KZD/X5obM CC3Qr8VIHbWvjbL5+iYyFmfUtRJIrWiXP5wm9MUA9Gv0nptYyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG6IHdtidYHmXIxGZxqlj2Qi5MTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDM5MWNmZTItYzQ0Mi0z OGEzLWJjNWItNjBjZWE4ZjRlNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL9UIAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA206zFnQ6UsHMZzj4GQhe9Bs8GknHVlSig7QGCYzyj+eQ9Iyq6V F1cwIillgUAqupRvEiPauOw2vmGW2sWUZ0FYVnpNXOB/804l/gf4A/4VQTJ0vAHR 2ym5qaEjjVI54UBqRahyn4LylNdRfVS7/XIIXgrnQyHZtAQPZ4tdPtcZ3nR7gp2E kqx/1FLNVlsrxqDA1qW8sXYuLngj0t3b84GISNGlpww8NnZkvvI7bAkK+tEv+O8j EAv+oMhGB1dZa6Vf8oP3jue55tq2XdPRjRlOWsm927aHAmep+H+RVePqQh2KE0Io oKJ6BeFRpzNXBPCiQ8uMyGoS9YcCf90YDaM= -----END CERTIFICATE-----Generated at Wed Jul 29 02:10:45 2026 by rpki-client