$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa File: 1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa (raw, json) Hash identifier: COTUMBSqdvGFi9j5cDOlxGUSh9QZqvL/fHb6u4JwkwM= Subject key identifier: E2:C6:2F:6B:A7:F0:67:98:EB:EE:42:26:32:BC:63:5F:CE:42:C1:F2 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584EA786E8BCD4324AF7DA942C40 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 395388 IP address blocks: 2620:c2:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e8:bc:d4:32:4a:f7:da:94:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=28e90d12-dd39-47b4-ac61-9e4e891c4968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:06:25:8d:cd:63:8e:35:f4:ea:ab:66:34: 3b:ac:16:59:17:dc:5f:67:88:34:d5:8a:6f:91:a8: 27:02:4e:d9:31:65:c0:74:db:31:bc:da:f1:77:4a: f8:48:d0:6b:ed:a8:55:23:87:d4:cc:f9:75:59:10: 1d:c3:1d:a1:4c:b2:5d:d5:fd:82:0e:06:bb:5b:d3: 70:9d:40:fd:51:fb:b4:60:3b:5e:72:0a:85:db:e0: 6f:cd:71:70:51:fb:87:7d:a2:b6:95:85:e0:4b:e0: 54:29:b0:25:d4:2f:3c:87:94:a6:4b:b1:d7:f1:2e: 48:ca:02:1b:e1:10:58:61:d2:69:af:49:9e:8b:63: 4d:f5:9d:56:08:19:6d:81:fe:b6:5d:f2:ae:ac:31: 1f:ec:f6:28:0f:5c:c7:94:b8:62:8b:b4:74:7a:14: 77:7a:02:1d:82:a1:52:bf:84:ae:9d:be:4a:5a:d5: 94:43:6c:32:f9:96:df:5c:59:70:e9:f3:a1:85:9c: a5:eb:f6:0d:76:d0:f8:49:b4:84:fb:d1:e7:0c:22: 6d:a1:15:d5:8a:23:8a:88:8d:00:82:53:e1:b9:1f: 02:e2:4b:eb:48:e8:c3:78:a3:03:5d:44:70:90:71: e4:59:13:7c:00:25:73:27:0e:4b:8d:66:80:fb:8b: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C6:2F:6B:A7:F0:67:98:EB:EE:42:26:32:BC:63:5F:CE:42:C1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/1cdc08f9-9a58-3f7a-aea2-713c294b41ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv6: 2620:c2:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f3:8d:7a:cc:38:15:38:73:7f:f7:87:8c:22:b0:7c:02:c8: b7:2f:73:85:37:5a:03:37:ed:21:b1:a6:f7:42:c0:b8:f1:c0: d0:78:03:62:ee:ea:06:67:da:f9:89:79:8d:31:87:fc:33:f2: 93:a0:ae:d6:47:e4:c4:22:ef:68:d0:fb:5c:98:65:7f:7d:a9: ec:7a:21:c3:27:70:cb:3c:c9:d4:72:34:54:9a:45:c8:5d:a2: a4:93:b0:df:43:9c:33:ee:35:07:ce:08:8e:1a:32:65:7a:02: 3e:c4:89:a3:e9:b4:85:78:a4:e3:75:38:b6:06:79:7d:69:01: ba:d5:14:5b:f5:2e:1d:78:fb:36:ee:c7:6a:e0:68:65:96:29: a6:ea:dc:d6:10:6d:66:5b:20:41:ad:5d:18:1e:58:be:69:a7: 05:99:d6:ed:36:fa:72:f6:4e:93:15:6f:77:39:b6:fb:06:1e: 58:6b:92:94:9d:8e:fc:f3:ef:d0:85:fd:1b:1f:6c:98:4e:10: 5a:6c:5a:43:b5:b5:39:f0:27:4d:c5:4b:cd:d6:f4:04:71:1f: 1d:54:7f:d3:98:3f:b3:42:e2:48:09:14:ea:e3:92:14:dd:8b: 5a:fc:f5:4b:70:b1:b9:f9:be:fe:0b:43:d3:e0:5e:d0:4d:50: 6e:40:7e:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nhui81DJK99qULEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjhlOTBkMTItZGQzOS00N2I0LWFjNjEtOWU0ZTg5MWM0OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HsGJY3NY4419OqrZjQ7rBZZF9xfZ4g01Ypv kagnAk7ZMWXAdNsxvNrxd0r4SNBr7ahVI4fUzPl1WRAdwx2hTLJd1f2CDga7W9Nw nUD9Ufu0YDtecgqF2+BvzXFwUfuHfaK2lYXgS+BUKbAl1C88h5SmS7HX8S5IygIb 4RBYYdJpr0mei2NN9Z1WCBltgf62XfKurDEf7PYoD1zHlLhii7R0ehR3egIdgqFS v4Sunb5KWtWUQ2wy+ZbfXFlw6fOhhZyl6/YNdtD4SbSE+9HnDCJtoRXViiOKiI0A glPhuR8C4kvrSOjDeKMDXURwkHHkWRN8ACVzJw5LjWaA+4s0GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLGL2un8GeY6+5CJjK8Y1/OQsHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMWNkYzA4ZjktOWE1OC0z ZjdhLWFlYTItNzEzYzI5NGI0MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwiAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFbzjXrMOBU4c3/3h4wisHwCyLcvc4U3WgM37SGxpvdCwLjxwNB4 A2Lu6gZn2vmJeY0xh/wz8pOgrtZH5MQi72jQ+1yYZX99qex6IcMncMs8ydRyNFSa RchdoqSTsN9DnDPuNQfOCI4aMmV6Aj7EiaPptIV4pON1OLYGeX1pAbrVFFv1Lh14 +zbux2rgaGWWKabq3NYQbWZbIEGtXRgeWL5ppwWZ1u02+nL2TpMVb3c5tvsGHlhr kpSdjvzz79CF/RsfbJhOEFpsWkO1tTnwJ03FS83W9ARxHx1Uf9OYP7NC4kgJFOrj khTdi1r89Utwsbn5vv4LQ9PgXtBNUG5Afvg= -----END CERTIFICATE-----Generated at Thu Jul 30 00:32:36 2026 by rpki-client