$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/614385ea-d139-3e28-a743-f51266137b1b.roa File: 614385ea-d139-3e28-a743-f51266137b1b.roa (raw, json) Hash identifier: EMJAioXK0EFRCRoanCD0ba9v9ejKbsxD+1D5ZtJJ+PU= Subject key identifier: 39:5B:4F:37:1A:B6:A8:BB:26:66:0A:48:8C:D8:5D:42:28:3B:CD:BA Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584EA78FF3D1812C68E06317F900 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/614385ea-d139-3e28-a743-f51266137b1b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40805 IP address blocks: 2605:5580::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:f3:d1:81:2c:68:e0:63:17:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ad1efb0c-f39a-4016-a69c-179f9eae0519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:f5:1a:47:a9:95:b4:92:00:7f:13:29:21: fd:60:63:aa:31:05:11:72:ec:d7:89:57:a7:bb:ef: 00:aa:67:ca:c8:25:91:20:45:9f:a7:25:70:7a:ac: 54:19:f2:b0:f1:9a:47:f3:7d:c0:77:55:fc:63:05: 39:4a:4f:4f:2b:36:81:dc:00:b9:a5:c4:56:50:63: b8:65:3f:83:17:86:9a:59:f4:94:8f:25:b0:c3:5b: db:cf:81:66:65:f1:e5:bc:37:a6:22:56:48:a5:f0: 81:0b:2e:ea:68:c3:f9:fd:b8:ae:50:45:2b:a4:dc: 23:dc:f1:dd:27:83:6d:6e:6f:57:09:73:44:37:cd: b4:20:84:f0:98:b2:76:3d:b7:a5:4f:f2:7f:a5:e0: d0:70:10:20:c4:f8:a3:5f:1f:9e:d8:12:24:35:b1: f0:df:fa:cc:bd:b6:91:1e:36:5b:a2:d2:0e:84:66: fe:fe:f7:50:7d:60:78:85:d1:4d:72:cc:3e:2e:db: d7:85:d7:79:9d:4d:03:3c:3e:f6:f4:ef:a4:74:72: 00:72:42:fd:1c:11:5d:b1:96:18:d2:42:bf:f4:d5: ee:00:31:eb:58:bb:46:3a:aa:88:52:44:30:1d:38: 0f:a2:7c:d2:16:be:b1:65:92:a1:b0:d8:8c:9f:89: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:4F:37:1A:B6:A8:BB:26:66:0A:48:8C:D8:5D:42:28:3B:CD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/614385ea-d139-3e28-a743-f51266137b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv6: 2605:5580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:63:5c:37:7d:84:35:99:56:cd:f8:16:b6:f7:7c:2a:2e:8e: 77:f6:40:84:c2:d6:90:56:4c:36:ee:be:48:dc:fa:91:b9:4b: e5:89:b5:90:55:47:67:78:18:8c:e2:8f:5d:bd:3e:df:b2:f8: 8a:81:a5:7d:ca:3f:fd:d4:8c:ca:33:f8:69:6a:3f:f5:9a:09: aa:d9:01:be:db:51:64:1e:26:58:c0:18:1f:57:dc:ab:03:1e: 2e:bd:86:65:f0:de:60:76:a1:12:10:70:2c:2c:a6:f6:c6:4d: d4:af:1d:af:61:71:b7:0d:4e:0b:8d:21:ba:80:2b:f4:8f:5c: 39:cd:58:91:7f:af:3c:3c:65:fc:f6:d6:be:84:80:8d:84:14: bd:bd:3d:c5:2d:a1:9e:31:13:4e:b6:6a:11:86:c2:07:54:6e: 02:13:5a:b9:6f:b0:f3:e8:b4:e8:b1:09:ac:e3:14:37:19:af: 53:3d:e8:dc:e7:48:16:08:96:ca:ab:12:f6:db:37:6c:e2:77: b4:de:0f:f2:2a:11:6d:c2:2d:3d:78:2f:4c:81:9a:3d:63:92: 42:8f:2d:76:96:69:e3:0f:7b:5d:e8:c8:17:06:57:60:aa:ca: 33:28:04:36:db:2c:2d:76:18:74:6d:fc:c4:cc:08:16:ce:20: 58:9c:0d:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/PRgSxo4GMX+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWQxZWZiMGMtZjM5YS00MDE2LWE2OWMtMTc5ZjllYWUwNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOr1GkeplbSSAH8TKSH9YGOqMQURcuzXiVen u+8AqmfKyCWRIEWfpyVweqxUGfKw8ZpH833Ad1X8YwU5Sk9PKzaB3AC5pcRWUGO4 ZT+DF4aaWfSUjyWww1vbz4FmZfHlvDemIlZIpfCBCy7qaMP5/biuUEUrpNwj3PHd J4Ntbm9XCXNEN820IITwmLJ2PbelT/J/peDQcBAgxPijXx+e2BIkNbHw3/rMvbaR HjZbotIOhGb+/vdQfWB4hdFNcsw+LtvXhdd5nU0DPD729O+kdHIAckL9HBFdsZYY 0kK/9NXuADHrWLtGOqqIUkQwHTgPonzSFr6xZZKhsNiMn4mTDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDlbTzcatqi7JmYKSIzYXUIoO826MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvNjE0Mzg1ZWEtZDEzOS0z ZTI4LWE3NDMtZjUxMjY2MTM3YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVVgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFY1w3fYQ1mVbN+Ba293wqLo539kCEwtaQVkw27r5I3PqRuUvlibWQ VUdneBiM4o9dvT7fsviKgaV9yj/91IzKM/hpaj/1mgmq2QG+21FkHiZYwBgfV9yr Ax4uvYZl8N5gdqESEHAsLKb2xk3Urx2vYXG3DU4LjSG6gCv0j1w5zViRf688PGX8 9ta+hICNhBS9vT3FLaGeMRNOtmoRhsIHVG4CE1q5b7Dz6LTosQms4xQ3Ga9TPejc 50gWCJbKqxL22zds4ne03g/yKhFtwi09eC9MgZo9Y5JCjy12lmnjD3td6MgXBldg qsozKAQ22ywtdhh0bfzEzAgWziBYnA0q -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:05 2026 by rpki-client