$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa File: 953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa (raw, json) Hash identifier: q1lIUDP7nYd7BD+p4pdcLQ7ZE2fU1O06ZKiBkRy6ZXo= Subject key identifier: CF:4A:B5:D7:F1:2E:06:AE:16:11:F0:8C:19:90:FC:AD:15:28:9D:56 Certificate issuer: /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Certificate serial: 010D0C9F4328584EA2DFD088B2DBBFB0D3269F00 Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 401442 IP address blocks: 2604:ba0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:d0:88:b2:db:bf:b0:d3:26:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=7a1d4a5b-f9f1-41de-b56e-440f763ca660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:60:42:b4:5e:f7:97:13:3f:55:1a:ad:6b: d1:0c:83:74:1b:7c:87:f8:73:a0:c3:24:17:8f:14: 2e:f2:63:83:ec:be:58:af:ad:72:2e:27:ef:bc:08: 12:a4:a1:e8:23:10:33:54:12:24:b2:56:9e:3b:12: c9:87:f9:60:d5:ac:04:a0:12:c9:f2:b5:df:81:d0: 57:d6:af:94:0c:3c:5d:ff:bc:e1:fd:1b:aa:27:62: 31:21:60:82:80:48:cb:f9:2a:66:ba:55:2c:72:51: 9e:fe:e7:43:84:65:0f:1d:a2:5e:47:c7:a9:79:4d: 40:67:0a:bb:d3:81:8e:5c:1f:fb:8f:20:df:f9:66: 78:8e:81:b4:31:87:7a:de:0b:61:eb:00:a5:bf:3b: 2d:9a:82:d4:19:1c:1d:31:dd:49:54:f5:64:91:29: f8:87:0f:62:6b:73:8d:84:db:50:41:d3:19:42:f0: 1d:34:34:00:3e:73:2b:6f:48:8a:69:5b:3e:c1:37: a8:e3:0c:ef:3d:99:d9:90:02:21:87:9e:fc:42:b2: 19:30:39:21:e5:63:1a:23:da:40:d7:1b:fb:29:36: 16:93:13:ef:ac:c3:67:23:96:0c:a9:4c:c6:50:02: 64:71:f3:9a:30:30:b6:e8:4d:2b:b3:7d:a7:9f:fd: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4A:B5:D7:F1:2E:06:AE:16:11:F0:8C:19:90:FC:AD:15:28:9D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl X509v3 Authority Key Identifier: keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:63:89:73:3a:6c:c1:4a:e7:84:80:19:b6:78:86:46:ab:71: 9f:d2:98:0d:f7:ed:f7:ab:24:ca:3f:99:83:d2:7d:ab:ec:9d: b0:e7:7e:32:bc:62:24:d6:2a:91:f9:07:ff:9a:48:66:d0:d2: 8f:70:c5:65:b0:7f:e1:9f:26:34:a1:73:a4:09:45:66:46:bf: fe:37:1a:a5:d4:3c:71:7a:c1:16:a2:34:7a:2b:cd:0e:67:ab: a0:86:71:a5:0b:4f:96:60:74:c2:57:9b:47:39:64:0f:7c:63: 37:80:da:34:3b:0b:5c:1f:99:7e:11:51:c8:7f:81:8b:61:be: b6:64:6d:cf:c4:f2:b3:d0:1e:b7:f7:9f:1e:1f:0a:a0:47:af: da:e3:fb:e9:8d:8e:d7:c1:cd:36:6a:67:a2:fb:a4:a3:36:c7: 10:b4:2a:6d:31:ba:0f:28:44:fa:38:9a:fb:bd:07:f1:3d:79: b3:11:74:da:96:cd:27:a4:88:d1:9e:a5:86:86:5f:0f:89:6b: 00:d2:26:1c:c2:37:92:be:9f:ef:64:34:22:2f:35:c1:60:70: 19:2b:0a:d1:ce:18:3e:32:1c:2e:aa:5c:05:48:14:68:68:72: 26:8d:e0:cf:20:a0:2a:e2:4c:b3:98:4a:75:a9:59:8c:76:0f: ba:49:b3:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6i39CIstu/sNMmnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRj NmQ0MB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk N2ExZDRhNWItZjlmMS00MWRlLWI1NmUtNDQwZjc2M2NhNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRgQrRe95cTP1UarWvRDIN0G3yH+HOgwyQX jxQu8mOD7L5Yr61yLifvvAgSpKHoIxAzVBIkslaeOxLJh/lg1awEoBLJ8rXfgdBX 1q+UDDxd/7zh/RuqJ2IxIWCCgEjL+SpmulUsclGe/udDhGUPHaJeR8epeU1AZwq7 04GOXB/7jyDf+WZ4joG0MYd63gth6wClvzstmoLUGRwdMd1JVPVkkSn4hw9ia3ON hNtQQdMZQvAdNDQAPnMrb0iKaVs+wTeo4wzvPZnZkAIhh578QrIZMDkh5WMaI9pA 1xv7KTYWkxPvrMNnI5YMqUzGUAJkcfOaMDC26E0rs32nn/1qJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM9KtdfxLgauFhHwjBmQ/K0VKJ1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIz ZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvOTUzZDg3ZjItZTBiMy0z NWY2LWE5OGUtOWI4YzgwOGQxMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjEyM2ZkNjgtNTk2Yy00ODA2LWJk OWUtOTExNjdhNmRjNmQ0LzIxMjNmZDY4LTU5NmMtNDgwNi1iZDllLTkxMTY3YTZk YzZkNC5jcmwwHwYDVR0jBBgwFoAUmE78+x0R5FCBKsfpNazGGkn2gYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2 N2E2ZGM2ZDQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQLoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdY4lzOmzBSueEgBm2eIZGq3Gf0pgN9+33qyTKP5mD0n2r7J2w534y vGIk1iqR+Qf/mkhm0NKPcMVlsH/hnyY0oXOkCUVmRr/+Nxql1DxxesEWojR6K80O Z6ughnGlC0+WYHTCV5tHOWQPfGM3gNo0OwtcH5l+EVHIf4GLYb62ZG3PxPKz0B63 958eHwqgR6/a4/vpjY7Xwc02amei+6SjNscQtCptMboPKET6OJr7vQfxPXmzEXTa ls0npIjRnqWGhl8PiWsA0iYcwjeSvp/vZDQiLzXBYHAZKwrRzhg+MhwuqlwFSBRo aHImjeDPIKAq4kyzmEp1qVmMdg+6SbPA -----END CERTIFICATE-----Generated at Wed Jul 29 04:52:45 2026 by rpki-client