$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa File: de7bd649-b19a-3283-9c2c-13c94d00554e.roa (raw, json) Hash identifier: gAEAyl/fEEgPC0JeAg2FWs/YUJHO6bRaCkG2HTu2dkQ= Subject key identifier: 84:AE:09:C8:28:0D:6B:D3:98:45:8F:F9:75:8F:ED:A1:02:24:34:A1 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584EA79271980C7BF5EAC2538310 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 800 IP address blocks: 2604:fdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:71:98:0c:7b:f5:ea:c2:53:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=421a7bc3-4de0-47b8-82be-ebb61fed3356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:f4:c4:2e:c8:97:e3:7f:77:a0:72:1a:79: 38:87:52:ea:b1:88:ef:8e:05:f4:1f:c0:6a:bc:ea: fd:f6:0a:37:42:37:aa:eb:4e:82:76:d3:cb:99:2a: ed:d7:e6:f6:ee:04:35:05:3b:6b:35:8b:9c:80:ce: bc:c2:27:7d:7e:98:a6:fc:18:f4:38:a2:71:51:80: f2:eb:11:bf:d3:c0:6c:21:c6:bf:32:4c:d7:11:dd: 6c:5b:5a:53:a3:6c:d7:cc:74:b9:a3:8a:20:64:1d: 3b:59:b6:a7:39:c1:8b:d8:5f:f5:68:fd:44:86:d3: 18:89:16:ad:64:21:d0:e1:84:0b:be:72:15:03:6f: 24:d7:05:24:f6:e0:86:6b:5b:57:56:86:c1:13:57: b8:df:16:45:8b:f1:c8:ef:d4:3b:f3:41:25:bf:79: b7:4d:b7:39:33:43:bd:2f:e9:5a:be:0f:4f:f0:8b: 73:fa:95:83:85:57:43:b2:10:2b:a5:5a:80:2a:7c: b3:f3:8e:2a:28:d5:25:f7:55:da:db:f2:5f:ab:51: 04:c1:39:c7:fd:ef:19:b3:66:e1:fc:8c:c7:19:0c: a0:c0:57:6a:55:b0:88:74:bd:68:bb:82:17:ba:ef: 45:70:08:88:40:5a:33:5a:97:1e:d6:4e:8b:ce:87: b3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:09:C8:28:0D:6B:D3:98:45:8F:F9:75:8F:ED:A1:02:24:34:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv6: 2604:fdc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:94:82:e8:cc:9f:35:02:de:98:23:84:40:f2:2f:93:8d:86: a0:83:2b:a0:98:e3:16:58:ea:3d:46:46:9e:c5:70:37:b3:fb: 65:82:39:e3:bb:6f:e1:e7:69:11:cd:a1:2f:cf:de:43:5c:06: 09:51:51:1f:d7:d0:05:96:d5:ff:a9:3b:3c:c6:ca:9e:f0:4b: b8:fe:bd:28:b4:3d:69:d5:33:36:b0:3a:5c:b3:1e:7c:c6:51: ab:7c:c7:e4:a6:c1:94:dd:d7:04:f5:28:95:4f:64:a1:f1:48: f4:0c:bc:7b:4a:0d:11:20:43:0b:7d:61:11:f5:27:87:41:17: f9:aa:b6:41:b1:7a:07:86:fb:62:f4:bc:55:a9:79:1d:94:55: 7a:80:33:ea:56:08:6f:52:99:c2:25:8d:c9:38:85:d1:d9:48: 1d:2f:5c:b3:9a:15:01:a9:b6:ca:60:be:c7:84:43:24:d6:f1: e7:85:6b:4a:df:c7:c1:31:6d:29:4f:7f:77:e7:b6:6e:89:81: 23:24:8c:70:c8:f6:78:91:a4:08:d4:cd:a5:fc:6d:96:0f:76: 5b:ac:76:76:dd:76:74:d4:bd:6b:e4:17:72:27:0d:0b:16:a5: 94:d8:a1:5f:97:86:d6:aa:48:bd:30:8d:67:c1:c5:c7:8a:5f: 87:9a:84:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nknGYDHv16sJTgxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDIxYTdiYzMtNGRlMC00N2I4LTgyYmUtZWJiNjFmZWQzMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrj0xC7Il+N/d6ByGnk4h1LqsYjvjgX0H8Bq vOr99go3Qjeq606CdtPLmSrt1+b27gQ1BTtrNYucgM68wid9fpim/Bj0OKJxUYDy 6xG/08BsIca/MkzXEd1sW1pTo2zXzHS5o4ogZB07WbanOcGL2F/1aP1EhtMYiRat ZCHQ4YQLvnIVA28k1wUk9uCGa1tXVobBE1e43xZFi/HI79Q780Elv3m3Tbc5M0O9 L+lavg9P8Itz+pWDhVdDshArpVqAKnyz844qKNUl91Xa2/Jfq1EEwTnH/e8Zs2bh /IzHGQygwFdqVbCIdL1ou4IXuu9FcAiIQFozWpce1k6Lzoez9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFISuCcgoDWvTmEWP+XWP7aECJDShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvZGU3YmQ2NDktYjE5YS0z MjgzLTljMmMtMTNjOTRkMDA1NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT9wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABlILozJ81At6YI4RA8i+TjYaggyugmOMWWOo9RkaexXA3s/tlgjnj u2/h52kRzaEvz95DXAYJUVEf19AFltX/qTs8xsqe8Eu4/r0otD1p1TM2sDpcsx58 xlGrfMfkpsGU3dcE9SiVT2Sh8Uj0DLx7Sg0RIEMLfWER9SeHQRf5qrZBsXoHhvti 9LxVqXkdlFV6gDPqVghvUpnCJY3JOIXR2UgdL1yzmhUBqbbKYL7HhEMk1vHnhWtK 38fBMW0pT39357ZuiYEjJIxwyPZ4kaQI1M2l/G2WD3ZbrHZ23XZ01L1r5BdyJw0L FqWU2KFfl4bWqki9MI1nwcXHil+HmoTf -----END CERTIFICATE-----Generated at Wed Jul 29 06:10:58 2026 by rpki-client