$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa File: 887cba21-5728-3b95-9ab6-0cfc8921eab1.roa (raw, json) Hash identifier: gS38EtOEY29YGIqxDY70Etfx8KNx9D4BxO6Unb/D0Jc= Subject key identifier: B7:19:01:9C:A8:2B:2C:6E:CA:88:F9:B0:92:C7:66:A1:D3:93:58:D1 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584EA788262B6F4DE5F55CE9B780 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2152 IP address blocks: 2607:cc80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:26:2b:6f:4d:e5:f5:5c:e9:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5e8fcccd-cd95-4c86-bf39-e226fe736c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:44:a9:1d:50:8e:6a:20:40:2c:6b:94:7d: d5:f6:00:70:46:01:1d:b2:41:bc:53:ff:18:af:0b: 61:87:b3:7e:02:26:2d:aa:94:e8:37:42:96:a1:8a: 5f:ac:f1:fd:dd:d4:a9:b1:00:5e:a7:74:eb:5c:17: 43:02:3a:6d:e2:a8:9a:93:af:5c:1e:70:92:2b:35: 0a:b8:f6:73:b1:68:3f:63:71:9d:50:fa:22:87:29: 8f:b8:fe:3e:4b:14:68:42:48:7e:40:a2:0c:56:6a: 94:fd:e9:6b:98:41:03:b2:58:51:94:4c:aa:d2:b2: 99:64:41:be:5e:95:37:cd:81:2c:64:6f:c1:13:c0: 95:ae:9d:59:8e:33:55:61:c5:1a:1e:9a:85:a5:da: 06:c6:64:99:af:71:a8:1a:9a:86:72:a7:dc:20:c7: 5e:da:30:d5:87:6c:c1:22:4c:af:47:ea:b6:d0:e1: 1a:2e:2c:67:30:87:3a:05:95:04:f8:bc:fb:ca:de: e3:d8:4b:ac:f9:8e:7d:b7:c3:c6:87:2c:6a:a2:ed: 90:1d:b0:d1:ee:c5:97:a2:de:cc:18:7c:7f:df:2b: 2f:5f:ea:e4:e1:f3:62:81:83:a0:12:79:d6:a5:da: 27:59:1d:2d:b5:e2:10:f0:dd:04:bb:f0:3f:88:09: 08:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:19:01:9C:A8:2B:2C:6E:CA:88:F9:B0:92:C7:66:A1:D3:93:58:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/887cba21-5728-3b95-9ab6-0cfc8921eab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4a:f2:22:b2:69:11:f0:98:ea:92:7e:ba:65:98:18:df:a4: e9:4b:c6:fa:bd:57:4c:94:c4:21:7a:af:62:97:da:37:3b:ab: 77:bd:7c:65:51:99:ba:33:40:87:1a:38:38:e6:27:90:bc:3b: 89:9f:45:f7:79:ed:93:c2:69:d0:e2:f8:02:32:2b:86:8b:aa: 9d:0d:be:7f:76:75:68:43:d8:4e:2e:28:22:cb:38:b7:0e:33: 63:8e:1d:22:03:ba:3b:44:1d:8e:5f:8a:93:04:1d:05:69:a4: e1:49:9c:d1:0d:66:c7:a9:62:d9:7c:22:14:50:ff:a9:1a:72: bc:2f:e1:ea:db:a1:77:e8:e9:10:df:ca:a6:45:5b:73:a5:da: ce:b1:5f:55:d3:a8:37:89:da:78:7d:8a:ea:f2:14:5c:23:fb: e8:45:20:46:d8:a0:a7:51:70:12:36:1a:05:1b:02:b4:37:29: 31:0d:38:3b:6f:b0:ee:65:ca:9a:de:68:53:b3:f9:1e:59:aa: 6c:e5:8a:92:5c:38:61:e6:d2:4e:fb:6c:c0:42:9a:b2:a4:4e: fc:ef:31:59:d9:0b:04:fd:b0:c3:e2:e0:6b:17:b9:af:d3:8d: 64:bd:db:15:4d:fc:22:3e:ce:34:3c:98:55:00:d7:9e:c6:88: b7:49:64:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niCYrb03l9Vzpt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWU4ZmNjY2QtY2Q5NS00Yzg2LWJmMzktZTIyNmZlNzM2YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKxEqR1QjmogQCxrlH3V9gBwRgEdskG8U/8Y rwthh7N+AiYtqpToN0KWoYpfrPH93dSpsQBep3TrXBdDAjpt4qiak69cHnCSKzUK uPZzsWg/Y3GdUPoihymPuP4+SxRoQkh+QKIMVmqU/elrmEEDslhRlEyq0rKZZEG+ XpU3zYEsZG/BE8CVrp1ZjjNVYcUaHpqFpdoGxmSZr3GoGpqGcqfcIMde2jDVh2zB IkyvR+q20OEaLixnMIc6BZUE+Lz7yt7j2Eus+Y59t8PGhyxqou2QHbDR7sWXot7M GHx/3ysvX+rk4fNigYOgEnnWpdonWR0tteIQ8N0Eu/A/iAkIewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLcZAZyoKyxuyoj5sJLHZqHTk1jRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvODg3Y2JhMjEtNTcyOC0z Yjk1LTlhYjYtMGNmYzg5MjFlYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWSvIismkR8Jjqkn66ZZgY36TpS8b6vVdMlMQheq9il9o3O6t3vXxl UZm6M0CHGjg45ieQvDuJn0X3ee2TwmnQ4vgCMiuGi6qdDb5/dnVoQ9hOLigiyzi3 DjNjjh0iA7o7RB2OX4qTBB0FaaThSZzRDWbHqWLZfCIUUP+pGnK8L+Hq26F36OkQ 38qmRVtzpdrOsV9V06g3idp4fYrq8hRcI/voRSBG2KCnUXASNhoFGwK0NykxDTg7 b7DuZcqa3mhTs/keWaps5YqSXDhh5tJO+2zAQpqypE787zFZ2QsE/bDD4uBrF7mv 041kvdsVTfwiPs40PJhVANeexoi3SWQx -----END CERTIFICATE-----Generated at Wed Jul 29 07:34:20 2026 by rpki-client