$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa File: de150f3e-630a-34f4-a9f4-8aae30296160.roa (raw, json) Hash identifier: 2cxh9hjRFDdfC3yqj0imbAegoQX8ibJtimSloQHpS9c= Subject key identifier: AD:A5:7A:06:9D:5F:74:80:2E:E9:93:3D:BE:33:A3:DD:B2:39:6D:33 Certificate issuer: /CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Certificate serial: 010D0C9F4328584EA78776D94359F38BC4D81B80 Authority key identifier: 75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 2620:197:de0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:76:d9:43:59:f3:8b:c4:d8:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e08deb7-db4d-4298-bfe7-8df00db48dc3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dc1fb01b-38cf-4866-8c9f-7ff00f46372b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:37:b5:07:85:a5:25:99:33:97:be:82:a8:17: c4:ef:d8:fc:57:91:30:ab:a7:0c:db:40:96:ca:3b: fb:1b:ff:64:4f:97:65:c2:b2:e3:a2:6c:79:ed:80: 6a:9a:22:19:90:6e:8a:22:7e:49:a2:5b:4a:57:cb: 2e:c3:9c:2f:cd:bf:67:da:7b:5a:97:7f:bb:3e:ab: d3:e9:c4:cd:54:73:0a:ac:c0:7d:c6:d2:06:d4:bd: 9c:26:6a:81:b3:6c:0c:43:c9:c3:da:4b:af:41:f4: 11:b1:d0:40:2b:f7:48:b5:ce:c8:8e:7c:ae:fe:e1: ef:20:65:20:2a:f2:21:e5:14:76:2a:78:41:4c:7a: 48:ed:59:ee:59:68:4f:d5:d0:9c:d2:89:5d:3b:0f: 48:d4:35:5b:2d:a7:f3:d5:a6:a6:35:e3:63:fe:d6: 4f:4b:9f:a7:bd:8d:94:72:18:cd:89:37:d2:c9:fd: af:60:fc:89:0c:a9:7d:08:3d:78:60:75:38:ac:26: 55:04:58:44:4a:4e:e7:17:d2:44:6e:95:95:fa:a3: b3:9e:c7:fe:cb:76:0d:30:02:d3:d6:f2:d4:ca:5e: 0e:4e:59:28:90:29:f8:37:2c:b0:a9:46:42:08:d0: 8a:94:28:2c:ee:48:4f:38:de:62:8b:fa:cb:94:c2: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A5:7A:06:9D:5F:74:80:2E:E9:93:3D:BE:33:A3:DD:B2:39:6D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/de150f3e-630a-34f4-a9f4-8aae30296160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3/0e08deb7-db4d-4298-bfe7-8df00db48dc3.crl X509v3 Authority Key Identifier: keyid:75:29:E0:2C:22:9F:1A:8D:00:71:EC:92:B2:35:02:2E:62:59:30:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e08deb7-db4d-4298-bfe7-8df00db48dc3.cer sbgp-ipAddrBlock: critical IPv6: 2620:197:de0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:80:71:b7:bc:b9:87:f7:87:ff:85:57:fe:11:98:ae:72:9d: 13:66:cd:0d:64:ff:56:23:5d:9e:17:9b:90:f4:5c:f2:57:3d: 55:cd:80:ac:b4:92:c2:85:22:fd:ac:9a:1a:37:80:2d:12:16: 66:3f:c3:c0:7f:7f:9f:aa:13:37:3f:54:1b:79:ba:b4:07:71: e0:84:ce:99:cf:ff:01:4d:8a:07:4d:37:a1:f3:3b:12:24:d5: bd:57:73:87:74:dc:fa:e9:45:ba:04:9d:6f:f8:f0:6b:dd:78: 46:40:6f:81:00:33:86:22:f0:41:92:a8:fc:f1:ad:e2:6a:a9: 5a:2d:de:c0:9a:96:64:ea:5b:c8:fb:a4:2d:7c:a0:8b:ae:aa: c3:37:c4:46:35:54:82:56:2d:ea:58:e5:5e:17:e1:63:1d:6a: b6:14:bc:29:c7:43:1f:5c:ba:1e:42:1e:37:01:5c:5b:0a:db: a4:23:9d:52:53:03:d0:d0:be:47:ae:d2:a1:17:00:84:da:9a: e1:35:7f:b0:f8:b3:ad:4b:de:60:be:f3:d6:76:27:09:04:08: 37:1e:07:4f:e0:9b:ab:15:b9:d1:77:14:91:1a:3c:a5:30:9d: 2a:28:8e:11:83:fd:33:40:a0:c5:9f:bd:5f:05:39:90:44:c3: 85:9e:45:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nh3bZQ1nzi8TYG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwOGRlYjctZGI0ZC00Mjk4LWJmZTctOGRmMDBkYjQ4 ZGMzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGMxZmIwMWItMzhjZi00ODY2LThjOWYtN2ZmMDBmNDYzNzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDe1B4WlJZkzl76CqBfE79j8V5Ewq6cM20CW yjv7G/9kT5dlwrLjomx57YBqmiIZkG6KIn5JoltKV8suw5wvzb9n2ntal3+7PqvT 6cTNVHMKrMB9xtIG1L2cJmqBs2wMQ8nD2kuvQfQRsdBAK/dItc7Ijnyu/uHvIGUg KvIh5RR2KnhBTHpI7VnuWWhP1dCc0oldOw9I1DVbLafz1aamNeNj/tZPS5+nvY2U chjNiTfSyf2vYPyJDKl9CD14YHU4rCZVBFhESk7nF9JEbpWV+qOznsf+y3YNMALT 1vLUyl4OTlkokCn4NyywqUZCCNCKlCgs7khPON5ii/rLlMKhwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK2legadX3SALumTPb4zo92yOW0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4 ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYwMGRiNDhkYzMvZGUxNTBmM2UtNjMwYS0z NGY0LWE5ZjQtOGFhZTMwMjk2MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGUwOGRlYjctZGI0ZC00Mjk4LWJm ZTctOGRmMDBkYjQ4ZGMzLzBlMDhkZWI3LWRiNGQtNDI5OC1iZmU3LThkZjAwZGI0 OGRjMy5jcmwwHwYDVR0jBBgwFoAUdSngLCKfGo0AceySsjUCLmJZMEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTA4ZGViNy1kYjRkLTQyOTgtYmZlNy04ZGYw MGRiNDhkYzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABlw3g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWAcbe8uYf3h/+FV/4RmK5ynRNmzQ1k/1YjXZ4Xm5D0XPJXPVXN gKy0ksKFIv2smho3gC0SFmY/w8B/f5+qEzc/VBt5urQHceCEzpnP/wFNigdNN6Hz OxIk1b1Xc4d03PrpRboEnW/48GvdeEZAb4EAM4Yi8EGSqPzxreJqqVot3sCalmTq W8j7pC18oIuuqsM3xEY1VIJWLepY5V4X4WMdarYUvCnHQx9cuh5CHjcBXFsK26Qj nVJTA9DQvkeu0qEXAITamuE1f7D4s61L3mC+89Z2JwkECDceB0/gm6sVudF3FJEa PKUwnSoojhGD/TNAoMWfvV8FOZBEw4WeRSk= -----END CERTIFICATE-----Generated at Thu Jul 30 00:28:34 2026 by rpki-client