$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: vGJxzyNYFgT6PO+eNu5kSVkQUdoP4NdgvzJxO6OMx8w= Subject key identifier: 36:C5:C1:1B:0B:37:C7:55:5B:E8:61:E7:BD:C0:90:60:25:82:4B:60 Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F4328584EA79091198A190F5E113B7CC0 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:91:19:8a:19:0f:5e:11:3b:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c8c6bde3-2efb-4bc1-b1cb-2462b4f3349b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:47:1e:49:38:a0:d4:06:1d:ae:6e:56:62: a0:66:74:b8:19:df:15:07:2a:4b:87:ff:5c:07:19: 57:3e:e5:00:7a:6c:26:f4:2a:ad:e4:a8:ed:c6:40: 72:1b:52:cd:dc:c4:08:52:fb:0c:64:55:82:79:f2: b0:f7:62:ab:e3:72:a8:64:d7:b4:bf:16:17:c2:03: b0:02:36:81:02:c7:1c:5e:32:5a:db:b2:3e:e5:ea: 90:a3:fa:39:5c:01:cf:2a:d8:d3:21:63:35:b3:2f: 22:c5:f8:8c:c8:64:a1:bc:1b:2f:9f:a6:f1:3f:28: 6c:9d:f6:f4:35:d9:10:3a:02:aa:99:72:f3:db:69: 9a:d5:e4:b8:6b:76:3e:2f:03:9b:39:fa:de:a1:f4: 12:a5:9c:66:7e:ef:0c:10:3a:dc:47:c0:f7:bf:fb: db:3d:ee:e6:a6:f3:3a:e8:57:a0:d9:6e:6a:50:e2: 21:4c:3b:7a:2f:ca:c5:67:47:17:6f:a6:5c:ff:3e: f4:3f:5c:b8:45:fd:87:a9:4c:6b:ae:9b:3a:9a:e1: 05:ce:53:11:06:88:b9:7a:5a:81:30:96:56:b1:70: 5a:ab:11:75:76:13:d2:cf:45:a5:71:36:ac:b4:33: 0b:89:3d:fa:38:c2:7b:ed:c8:6e:ee:1d:93:f3:2c: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:C1:1B:0B:37:C7:55:5B:E8:61:E7:BD:C0:90:60:25:82:4B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cc:3d:be:73:2b:83:4c:89:01:4c:c6:8b:7b:ea:d5:a4:8b: c8:ee:56:06:0f:fc:84:44:e7:95:5e:79:d5:7a:31:8a:43:55: 67:6e:0f:28:a9:9f:10:9b:1c:e6:6d:99:30:cb:63:3e:ad:42: 7a:8f:1c:d9:9c:d3:37:63:82:e4:ca:b8:2d:5c:28:53:2b:81: a4:a9:0c:ed:90:20:c3:22:a0:ab:ab:cb:48:b6:fc:98:81:71: ef:31:39:af:10:ab:cf:91:74:57:ad:a5:a3:02:fb:3c:24:be: c1:0c:f7:43:90:ef:30:f1:35:ed:66:18:4d:e7:87:a3:60:9b: 1d:85:39:92:af:fc:62:88:6c:f6:dd:f2:a2:71:d5:08:0d:e6: 07:b3:bb:90:bf:06:60:74:47:f4:8c:77:24:ba:b2:3f:da:e2: f6:e6:5f:26:29:7d:f0:da:2d:d8:cc:57:3c:8f:ca:46:9f:5c: ee:24:d7:6a:e9:d8:71:d7:55:a8:d2:58:be:16:2c:86:bf:e8: 90:7b:09:ea:26:04:d2:56:90:b4:f2:7a:78:d8:f1:b3:48:c5: 95:98:44:b2:58:8e:2c:7d:57:9e:16:b6:02:04:3f:79:09:e3: 5f:85:0c:44:e8:3e:78:68:26:aa:70:a5:21:bc:bd:ed:29:5c: 60:33:7f:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkJEZihkPXhE7fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzhjNmJkZTMtMmVmYi00YmMxLWIxY2ItMjQ2MmI0ZjMzNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI5HHkk4oNQGHa5uVmKgZnS4Gd8VBypLh/9c BxlXPuUAemwm9Cqt5KjtxkByG1LN3MQIUvsMZFWCefKw92Kr43KoZNe0vxYXwgOw AjaBAsccXjJa27I+5eqQo/o5XAHPKtjTIWM1sy8ixfiMyGShvBsvn6bxPyhsnfb0 NdkQOgKqmXLz22ma1eS4a3Y+LwObOfreofQSpZxmfu8MEDrcR8D3v/vbPe7mpvM6 6Feg2W5qUOIhTDt6L8rFZ0cXb6Zc/z70P1y4Rf2HqUxrrps6muEFzlMRBoi5elqB MJZWsXBaqxF1dhPSz0WlcTastDMLiT36OMJ77chu7h2T8yz7BwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDbFwRsLN8dVW+hh573AkGAlgktgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDzD2+cyuDTIkBTMaLe+rVpIvI7lYGD/yEROeVXnnVejGKQ1Vnbg8o qZ8QmxzmbZkwy2M+rUJ6jxzZnNM3Y4LkyrgtXChTK4GkqQztkCDDIqCrq8tItvyY gXHvMTmvEKvPkXRXraWjAvs8JL7BDPdDkO8w8TXtZhhN54ejYJsdhTmSr/xiiGz2 3fKicdUIDeYHs7uQvwZgdEf0jHckurI/2uL25l8mKX3w2i3YzFc8j8pGn1zuJNdq 6dhx11Wo0li+FiyGv+iQewnqJgTSVpC08np42PGzSMWVmESyWI4sfVeeFrYCBD95 CeNfhQxE6D54aCaqcKUhvL3tKVxgM3+q -----END CERTIFICATE-----Generated at Wed Jul 29 11:00:46 2026 by rpki-client