$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa File: 9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa (raw, json) Hash identifier: dVKLDkXBeageVTnc+ZtPgktfTAnUVYTpgZDRTnkgBGs= Subject key identifier: 59:21:BE:F2:1C:39:F2:33:1D:9C:88:E3:D0:68:90:05:46:BD:23:CA Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F4328584EA79A4AE4D093095FEA453800 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11067 IP address blocks: 2605:d800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:4a:e4:d0:93:09:5f:ea:45:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5cf4fead-e69d-4b38-adbc-c1e2f29d0932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:76:f8:37:10:85:14:23:1e:ca:8b:ea:77: 73:11:27:cb:7e:7c:10:3d:b4:34:1f:1b:64:74:cb: ff:da:c6:4e:36:5a:f5:ee:cd:7c:a7:c8:b5:af:49: 79:28:85:62:63:b4:a9:c3:b3:3f:2a:33:33:6f:a2: 32:0d:25:eb:ce:ce:3e:40:41:33:d7:e2:6d:d9:10: ee:a9:3b:35:52:96:65:50:f4:7b:94:a0:87:9e:2f: 7f:ed:96:1b:9f:ac:36:32:f0:64:b9:75:4c:77:86: 41:c3:7a:d5:f4:d5:29:e0:35:a9:78:bc:dc:4c:60: fe:d2:94:92:c5:ef:06:f3:ec:08:9a:3a:79:f2:80: fb:d6:f7:be:34:aa:d4:2e:52:da:bd:24:4b:59:6c: a5:cf:18:5c:0a:ef:be:97:10:4d:f1:f6:f8:61:22: a3:d1:9b:34:eb:73:c3:32:07:38:09:0b:8e:b3:ec: 7d:4d:71:55:44:fd:fd:38:c7:ee:36:ae:3e:e5:14: 0f:d7:b0:bb:f0:b8:bf:4a:5e:b9:81:ac:09:03:58: 25:03:e8:bb:7b:46:d6:e1:69:af:c0:f7:05:f5:d3: 31:f0:9a:68:58:16:41:58:ea:f3:f5:49:3a:ad:64: 68:78:8b:eb:3c:ea:aa:8c:42:7b:38:99:a5:d8:53: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:21:BE:F2:1C:39:F2:33:1D:9C:88:E3:D0:68:90:05:46:BD:23:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/9da5af4e-dae6-3a10-96e3-e83ea4c9052a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:d800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:63:92:5c:33:be:f6:5b:2b:b8:9e:23:1d:d9:ca:08:f2:c5: a0:5a:77:60:7b:ae:42:76:bc:8b:20:7c:5d:44:75:68:ea:c5: f7:18:a1:53:aa:1d:b6:fa:01:65:ce:08:94:4c:91:d7:11:4c: be:75:26:70:a8:02:83:ba:48:20:61:c4:41:fb:38:42:ee:cc: e3:6b:68:9b:0e:0c:3e:5d:c6:88:7a:1a:a4:d7:ce:e5:7c:22: 04:33:aa:4e:f3:cf:ed:38:43:c0:91:27:e7:39:19:d9:ec:59: 93:09:f2:bf:31:e7:f6:38:6c:7b:6a:90:eb:af:b5:f0:bb:8d: e3:66:b4:b0:5b:c8:ed:21:45:60:3e:49:85:79:a2:46:99:e6: 6c:8e:e3:54:8b:21:f4:70:26:4e:9c:e3:9e:6c:6c:47:09:d3: 5d:d4:6a:bf:dd:2d:7b:d3:18:5b:45:6d:a7:49:a7:2f:ed:84: 0f:7c:0c:b4:1e:52:d7:37:bf:da:96:a5:f1:90:fc:f9:c2:06: 03:ea:e6:53:3f:9f:c4:c9:77:70:99:8f:d6:a4:c2:e8:fb:03: f7:cc:17:09:78:f6:39:c0:cf:2b:b8:7b:ca:92:78:3b:1c:ae: 95:5a:dd:d2:d2:e7:7a:89:10:79:19:18:66:f0:df:3e:4a:e5: a4:8f:a7:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nmkrk0JMJX+pFOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWNmNGZlYWQtZTY5ZC00YjM4LWFkYmMtYzFlMmYyOWQwOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxJ2+DcQhRQjHsqL6ndzESfLfnwQPbQ0Hxtk dMv/2sZONlr17s18p8i1r0l5KIViY7Spw7M/KjMzb6IyDSXrzs4+QEEz1+Jt2RDu qTs1UpZlUPR7lKCHni9/7ZYbn6w2MvBkuXVMd4ZBw3rV9NUp4DWpeLzcTGD+0pSS xe8G8+wImjp58oD71ve+NKrULlLavSRLWWylzxhcCu++lxBN8fb4YSKj0Zs063PD Mgc4CQuOs+x9TXFVRP39OMfuNq4+5RQP17C78Li/Sl65gawJA1glA+i7e0bW4Wmv wPcF9dMx8JpoWBZBWOrz9Uk6rWRoeIvrPOqqjEJ7OJml2FOnnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFkhvvIcOfIzHZyI49BokAVGvSPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvOWRhNWFmNGUtZGFlNi0z YTEwLTk2ZTMtZTgzZWE0YzkwNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXYADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTY5JcM772Wyu4niMd2coI8sWgWndge65CdryLIHxdRHVo6sX3GKFT qh22+gFlzgiUTJHXEUy+dSZwqAKDukggYcRB+zhC7szja2ibDgw+XcaIehqk187l fCIEM6pO88/tOEPAkSfnORnZ7FmTCfK/Mef2OGx7apDrr7Xwu43jZrSwW8jtIUVg PkmFeaJGmeZsjuNUiyH0cCZOnOOebGxHCdNd1Gq/3S170xhbRW2nSacv7YQPfAy0 HlLXN7/alqXxkPz5wgYD6uZTP5/EyXdwmY/WpMLo+wP3zBcJePY5wM8ruHvKkng7 HK6VWt3S0ud6iRB5GRhm8N8+SuWkj6cF -----END CERTIFICATE-----Generated at Thu Jul 30 00:30:01 2026 by rpki-client