$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa File: d6380c44-3d1d-381d-b9e1-f4928664013c.roa (raw, json) Hash identifier: m3V9kJhsJ+N9upDlyWMWj/l5nloCn8Pkj9nXnr3Z3Yk= Subject key identifier: 90:D6:77:DD:2E:CF:41:AD:53:A6:A4:74:B0:3E:24:EA:63:6F:8A:EB Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584EA33B64608E514545910AD290 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa Signing time: Mon 27 Jul 2026 12:04:56 +0000 ROA not before: Mon 27 Jul 2026 12:04:56 +0000 ROA not after: Thu 22 Oct 2026 00:13:09 +0000 asID: 46733 IP address blocks: 2602:f9f4:20::/48 maxlen: 48 2602:f9f4:21::/48 maxlen: 48 2602:f9f4:22::/48 maxlen: 48 2602:f9f4:23::/48 maxlen: 48 2602:f9f4:24::/48 maxlen: 48 2602:f9f4:25::/48 maxlen: 48 2602:f9f4:26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:3b:64:60:8e:51:45:45:91:0a:d2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jul 27 12:04:56 2026 GMT Not After : Oct 22 00:13:09 2026 GMT Subject: CN=76014c6d-f43c-4076-9b8b-732304f49ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:00:8e:8f:23:6d:a5:a7:3c:de:8c:9c:76: 5d:80:3e:a4:67:8e:70:5e:50:b3:d6:df:ef:bf:9f: 81:23:bd:24:4b:84:42:b1:6f:40:30:6f:a9:8b:81: 9d:84:91:cd:0c:a8:3a:fd:f9:c3:f8:9f:31:cd:bb: 0b:13:ad:70:37:06:7d:15:02:85:da:fd:64:2a:41: e4:99:a1:38:63:ac:77:d0:40:ff:c3:e7:92:9f:ed: a5:b8:83:1d:4e:bf:7c:8d:01:da:48:9e:4f:d2:48: 10:40:af:90:05:c3:ae:05:a8:97:24:b3:c1:0e:70: fe:51:5a:6a:4c:df:47:bd:83:7f:34:6c:27:78:97: 33:7e:9a:73:03:20:fc:ed:15:5e:ea:d2:98:ad:99: cd:e9:c6:02:79:ec:91:dd:d5:71:04:5b:0d:29:a3: 4c:47:1a:bf:ce:1e:9d:81:2d:88:4c:61:be:89:81: c9:98:ae:3e:31:5c:6c:91:e4:63:58:72:c9:b2:ef: b1:87:2f:19:89:4c:9c:b8:18:06:0c:82:3b:57:84: 32:a1:df:a8:c3:0f:d2:a4:12:3f:42:34:cb:1f:4f: a2:77:71:0d:f6:e8:7c:a5:15:4f:e7:1a:88:62:5a: 2f:88:4f:d1:d2:ab:02:b0:e7:8f:e5:9f:57:d0:e9: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D6:77:DD:2E:CF:41:AD:53:A6:A4:74:B0:3E:24:EA:63:6F:8A:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:20::-2602:f9f4:26:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c7:17:52:fb:9c:b2:11:ae:4b:0d:19:a7:2b:5f:e9:21:c3: 95:30:fa:34:82:26:a0:cc:20:10:49:32:5e:99:f6:cc:1f:fc: 15:6d:2e:3f:53:74:4c:9e:e8:c2:ea:12:59:88:85:c9:11:53: 86:90:64:84:90:43:d0:7f:8d:9b:f4:25:5f:30:a9:99:dc:4c: 3b:99:76:39:b3:32:7b:e8:33:fc:05:aa:cd:4d:ed:e4:7b:55: b5:ac:15:d3:49:14:af:f9:b2:13:44:df:e1:84:6f:33:50:ed: bd:0c:c3:96:38:fd:fb:de:6b:18:b9:47:91:69:3c:bc:ad:e5: 73:c0:1c:18:cf:31:49:41:f6:17:17:dc:f2:ea:a7:3c:43:ac: 68:b1:b8:7d:3f:a8:65:54:02:34:b0:ec:30:65:81:06:f1:68: 58:9c:08:8b:60:5c:c3:e8:81:6a:06:1f:ab:48:c8:59:df:b1: d5:d6:30:61:7b:51:19:0b:83:6a:cd:11:41:5d:27:b7:f3:41: 84:83:71:6e:24:34:7a:97:bc:c1:33:1f:00:74:03:c2:8c:04: fa:21:d9:0d:f5:d1:bc:da:e5:96:88:14:ee:2b:e4:20:0e:6f: c5:b1:bd:94:9a:62:6e:e6:01:81:55:6a:b8:16:e6:78:14:d9: fd:d4:1b:52 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6jO2RgjlFFRZEK0pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDcyNzEyMDQ1NloXDTI2MTAyMjAwMTMwOVowLzEtMCsGA1UEAxMk NzYwMTRjNmQtZjQzYy00MDc2LTliOGItNzMyMzA0ZjQ5Y2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKYAjo8jbaWnPN6MnHZdgD6kZ45wXlCz1t/v v5+BI70kS4RCsW9AMG+pi4GdhJHNDKg6/fnD+J8xzbsLE61wNwZ9FQKF2v1kKkHk maE4Y6x30ED/w+eSn+2luIMdTr98jQHaSJ5P0kgQQK+QBcOuBaiXJLPBDnD+UVpq TN9HvYN/NGwneJczfppzAyD87RVe6tKYrZnN6cYCeeyR3dVxBFsNKaNMRxq/zh6d gS2ITGG+iYHJmK4+MVxskeRjWHLJsu+xhy8ZiUycuBgGDII7V4Qyod+oww/SpBI/ QjTLH0+id3EN9uh8pRVP5xqIYloviE/R0qsCsOeP5Z9X0OlovQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFJDWd90uz0GtU6akdLA+JOpjb4rrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvZDYzODBjNDQtM2QxZC0z ODFkLWI5ZTEtZjQ5Mjg2NjQwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUmAvn0 ACADBwAmAvn0ACYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEALccXUvucshGuSw0Zpytf6SHDlTD6NIImoMwg EEkyXpn2zB/8FW0uP1N0TJ7owuoSWYiFyRFThpBkhJBD0H+Nm/QlXzCpmdxMO5l2 ObMye+gz/AWqzU3t5HtVtawV00kUr/myE0Tf4YRvM1DtvQzDljj9+95rGLlHkWk8 vK3lc8AcGM8xSUH2Fxfc8uqnPEOsaLG4fT+oZVQCNLDsMGWBBvFoWJwIi2Bcw+iB agYfq0jIWd+x1dYwYXtRGQuDas0RQV0nt/NBhINxbiQ0epe8wTMfAHQDwowE+iHZ DfXRvNrllogU7ivkIA5vxbG9lJpibuYBgVVquBbmeBTZ/dQbUg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:37:13 2026 by rpki-client