$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa File: fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa (raw, json) Hash identifier: rR+aQrdtYsXF+wNLpVfDT/eKvFEn7OJmFY9YfAndGrI= Subject key identifier: 2B:EF:CA:D4:87:DD:69:30:57:61:48:CF:D6:2B:FF:49:5C:F0:CA:D5 Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584EA790894AD65242BAE3AAA800 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22926 IP address blocks: 2607:f5e8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:89:4a:d6:52:42:ba:e3:aa:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3facda5-4115-4207-af18-d21942850293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:91:11:d9:7c:06:8d:01:85:3c:9a:2c:00: 07:4c:53:d6:d2:da:db:31:75:0d:9d:89:52:56:fb: 59:f4:03:5d:61:1b:ec:b0:e3:88:21:19:6d:68:06: 85:27:9c:a1:32:5f:74:93:4d:1b:6c:b2:69:cc:a8: 72:83:10:8a:78:5e:c1:48:c6:fa:85:be:31:03:49: 07:40:96:76:a3:7c:94:c2:27:78:12:47:0a:3d:e4: 29:40:d5:6f:3d:b0:40:b8:d3:01:b0:d1:33:b8:22: 7e:17:a8:54:45:db:c7:d3:9d:f9:eb:70:e5:7e:2e: 26:6f:88:6e:48:3c:32:ee:11:75:d5:bd:9f:14:0b: 85:70:64:23:8c:86:ad:fa:37:5d:d2:b5:35:68:fc: 92:62:ea:5c:69:66:c4:12:df:de:b5:4a:b6:b8:52: 12:aa:6b:62:b4:b3:69:90:b1:66:5b:39:f3:af:cb: 58:b2:00:a1:90:cd:84:1e:a8:c5:9f:17:7e:58:c5: 13:76:8d:cb:57:c3:48:1e:94:50:ec:bc:20:28:12: b0:98:33:b0:4e:16:68:7d:a5:10:b4:c3:fd:8f:5a: 0c:3a:2d:4f:ac:16:91:34:88:93:17:8e:15:6b:21: eb:d5:b8:18:89:d4:ee:b9:bb:bf:3e:a3:6c:22:7c: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:CA:D4:87:DD:69:30:57:61:48:CF:D6:2B:FF:49:5C:F0:CA:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/fd8fc722-6aa9-306a-ae00-97cae3ebf37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv6: 2607:f5e8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:75:11:cf:d5:0f:20:a2:b1:ef:0f:ba:6d:51:57:15:29:28: 3f:81:36:57:4f:09:6a:3e:23:c9:ea:11:31:65:ab:2e:13:66: 0d:48:ff:df:94:68:6f:d7:04:33:d6:d7:27:f6:11:30:ea:a4: d4:fa:c7:6e:ba:02:b7:8f:d3:1d:3f:0c:53:cf:77:eb:39:d6: b2:0e:8e:bd:2b:d1:52:e5:01:21:89:77:29:93:97:39:11:20: c8:4a:3f:f6:b2:c8:d7:c1:3e:34:47:64:59:1c:03:67:50:8f: 76:b8:bd:e5:a7:8d:35:2c:fa:90:6f:ca:1f:81:3f:05:05:e1: 99:28:25:d4:54:c4:1f:1d:f6:63:8e:4a:33:bb:fe:03:57:3c: 19:36:8e:c3:31:1f:b2:af:71:aa:29:ed:98:05:3b:c5:63:85: 87:d2:a3:f5:14:52:a7:d2:93:7e:c7:87:fa:72:65:2b:b6:67: bf:a1:ee:af:d4:40:fa:78:59:fd:40:e6:a5:62:a9:58:1a:43: 5d:e7:38:00:7f:64:7b:1b:4c:6b:97:d6:50:b9:25:e9:63:21: 22:3d:be:15:bd:1f:07:82:ee:16:3b:05:f1:e0:8d:ed:40:26: f5:90:34:d5:b0:5c:d0:fb:42:32:d0:60:c6:ee:d5:2c:a4:66: f2:20:fd:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkIlK1lJCuuOqqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDNmYWNkYTUtNDExNS00MjA3LWFmMTgtZDIxOTQyODUwMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0+REdl8Bo0BhTyaLAAHTFPW0trbMXUNnYlS VvtZ9ANdYRvssOOIIRltaAaFJ5yhMl90k00bbLJpzKhygxCKeF7BSMb6hb4xA0kH QJZ2o3yUwid4EkcKPeQpQNVvPbBAuNMBsNEzuCJ+F6hURdvH053563Dlfi4mb4hu SDwy7hF11b2fFAuFcGQjjIat+jdd0rU1aPySYupcaWbEEt/etUq2uFISqmtitLNp kLFmWznzr8tYsgChkM2EHqjFnxd+WMUTdo3LV8NIHpRQ7LwgKBKwmDOwThZofaUQ tMP9j1oMOi1PrBaRNIiTF44VayHr1bgYidTuubu/PqNsInxEXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCvvytSH3WkwV2FIz9Yr/0lc8MrVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZmQ4ZmM3MjItNmFhOS0z MDZhLWFlMDAtOTdjYWUzZWJmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf16DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqdRHP1Q8gorHvD7ptUVcVKSg/gTZXTwlqPiPJ6hExZasuE2YNSP/f lGhv1wQz1tcn9hEw6qTU+sduugK3j9MdPwxTz3frOdayDo69K9FS5QEhiXcpk5c5 ESDISj/2ssjXwT40R2RZHANnUI92uL3lp401LPqQb8ofgT8FBeGZKCXUVMQfHfZj jkozu/4DVzwZNo7DMR+yr3GqKe2YBTvFY4WH0qP1FFKn0pN+x4f6cmUrtme/oe6v 1ED6eFn9QOalYqlYGkNd5zgAf2R7G0xrl9ZQuSXpYyEiPb4VvR8Hgu4WOwXx4I3t QCb1kDTVsFzQ+0Iy0GDG7tUspGbyIP1O -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:34 2026 by rpki-client