$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa File: 35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa (raw, json) Hash identifier: oHR4LJiP0t6VB+NAxQtKa9T0z6Z777RFSss0BRAoyVA= Subject key identifier: 72:CC:CA:39:3E:2B:2B:34:46:98:46:43:AF:9E:7C:1A:66:2B:E9:B7 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584EA78833D1D1A2758136EC1D00 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63023 IP address blocks: 2602:fec3:f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:33:d1:d1:a2:75:81:36:ec:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=52a66ffb-35ae-493e-a04f-a362f1ba36f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:67:3f:39:9c:08:0f:fa:70:74:97:4f:9e: 40:15:3e:0c:61:13:82:e6:2d:74:cf:8f:a8:c5:82: 03:90:88:3d:55:f4:cf:52:49:bc:b6:78:5d:b3:dd: 89:3c:31:bd:d9:60:e3:a4:58:b6:25:0b:cc:94:ce: c0:0f:ea:ed:77:9e:b0:56:15:5e:7c:e7:77:60:ea: 32:b5:c8:65:01:ad:23:dc:81:9a:74:28:1a:a2:c1: ba:e3:ef:47:4a:c4:a0:b5:1d:b3:d9:e7:2a:a5:79: 45:8f:ab:86:42:77:94:be:ad:3a:32:4a:d5:7d:ca: 3a:f4:dc:f0:c9:68:53:cf:8d:aa:3c:88:a8:68:ae: 97:97:93:fc:8b:b0:ff:4a:ef:71:dd:e8:a2:98:9e: 82:41:11:50:a9:cc:1d:75:09:91:ed:90:e4:26:d1: 1b:74:1c:1c:5f:93:12:a5:88:b5:25:d3:0d:e7:00: 19:97:a8:6f:5e:76:a1:1d:5f:5d:1c:c6:5e:c3:56: 86:fe:c6:67:6c:11:6f:8f:d7:cf:18:fe:0b:db:41: 1e:32:12:4c:36:16:fa:e8:c5:b0:72:8f:a5:6b:a8: 78:b1:a1:b7:af:9e:ca:5c:42:5c:ad:20:cc:99:98: 8f:b2:ed:60:67:3f:3b:62:50:88:49:87:51:80:8d: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CC:CA:39:3E:2B:2B:34:46:98:46:43:AF:9E:7C:1A:66:2B:E9:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/35aa9a7c-ef44-3b9e-bcc9-15c6f1eb9c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv6: 2602:fec3:f00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:13:95:de:13:0d:b7:23:78:a3:84:f3:7a:e1:df:e0:ed:26: b2:67:30:4a:5b:b5:50:5b:e8:a7:26:7a:d0:f4:d7:6d:10:39: 7e:8d:7e:a7:a0:e0:f0:60:d5:b6:d1:87:a4:a1:6d:27:fb:ba: db:f7:f7:33:a9:41:44:64:ed:26:17:e5:35:a7:da:f8:99:e4: 9c:83:d7:ec:a7:a2:0c:45:aa:7a:20:a2:fa:82:aa:91:4f:20: ef:e2:59:ea:a5:b5:73:99:bc:d4:34:90:4e:da:1f:a4:de:fd: b2:72:49:41:f0:27:09:94:10:63:5c:4c:45:00:78:c7:6b:13: 1d:bc:4b:bb:05:b2:9d:0d:c8:44:98:97:1a:e0:35:ae:1e:8e: 7f:84:72:c3:ba:36:f6:c6:2a:dd:7f:fa:d5:45:8d:35:54:94: b8:34:81:4e:cf:f8:8f:19:26:4a:7e:25:7e:09:17:ff:d1:c2: 60:b8:c9:b1:4c:35:e7:f4:88:6d:ef:81:4b:81:ac:46:a6:5d: 36:66:ff:86:ac:43:df:8c:bf:fa:3b:98:ca:5c:0b:03:6e:ae: fc:1e:43:cd:c7:f2:e0:53:d8:eb:54:ec:63:97:52:f8:b5:1e: 6f:89:48:6b:7b:b4:9d:17:f4:ee:60:7b:6d:53:42:10:5e:26: fc:87:1d:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niDPR0aJ1gTbsHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTJhNjZmZmItMzVhZS00OTNlLWEwNGYtYTM2MmYxYmEzNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BnPzmcCA/6cHSXT55AFT4MYROC5i10z4+o xYIDkIg9VfTPUkm8tnhds92JPDG92WDjpFi2JQvMlM7AD+rtd56wVhVefOd3YOoy tchlAa0j3IGadCgaosG64+9HSsSgtR2z2ecqpXlFj6uGQneUvq06MkrVfco69Nzw yWhTz42qPIioaK6Xl5P8i7D/Su9x3eiimJ6CQRFQqcwddQmR7ZDkJtEbdBwcX5MS pYi1JdMN5wAZl6hvXnahHV9dHMZew1aG/sZnbBFvj9fPGP4L20EeMhJMNhb66MWw co+la6h4saG3r57KXEJcrSDMmZiPsu1gZz87YlCISYdRgI2ogQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHLMyjk+Kys0RphGQ6+efBpmK+m3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMzVhYTlhN2MtZWY0NC0z YjllLWJjYzktMTVjNmYxZWI5YzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL+ww8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACsTld4TDbcjeKOE83rh3+DtJrJnMEpbtVBb6KcmetD0120QOX6N fqeg4PBg1bbRh6ShbSf7utv39zOpQURk7SYX5TWn2viZ5JyD1+ynogxFqnogovqC qpFPIO/iWeqltXOZvNQ0kE7aH6Te/bJySUHwJwmUEGNcTEUAeMdrEx28S7sFsp0N yESYlxrgNa4ejn+EcsO6NvbGKt1/+tVFjTVUlLg0gU7P+I8ZJkp+JX4JF//RwmC4 ybFMNef0iG3vgUuBrEamXTZm/4asQ9+Mv/o7mMpcCwNurvweQ83H8uBT2OtU7GOX Uvi1Hm+JSGt7tJ0X9O5ge21TQhBeJvyHHYE= -----END CERTIFICATE-----Generated at Wed Jul 29 12:06:23 2026 by rpki-client