$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa File: 08f7e636-199c-367d-a70c-0f88db87adf0.roa (raw, json) Hash identifier: UoRlsJSR9pr6/h3jt3GPKH5lmWqFArTpq7gXNHebrAA= Subject key identifier: 95:E8:85:20:84:E7:0B:63:09:D8:D9:38:D1:49:C6:71:F1:98:30:94 Certificate issuer: /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Certificate serial: 010D0C9F4328584EA788BBB2CD3E9E7BA11E9380 Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36352 IP address blocks: 2607:5dc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:bb:b2:cd:3e:9e:7b:a1:1e:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c28eba97-da3e-490e-90f1-ea88e9816895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e8:6e:53:8b:65:71:df:1a:6e:c0:6b:44:9d: 11:c4:4e:8c:fb:05:d8:ed:17:ba:e7:c9:b0:05:23: f7:8d:49:7c:88:a4:c6:88:57:37:43:b3:45:89:ff: 02:90:fd:05:ad:8f:43:fa:a4:81:f1:82:44:dc:a2: 28:95:07:1e:e1:c8:69:3b:ab:1f:18:13:06:75:9d: e2:8f:49:c0:01:fe:84:3c:7a:38:ef:f3:e0:81:c5: 20:46:76:b6:b1:e3:95:f1:fd:f7:7a:31:55:3a:f9: 24:27:e1:a6:11:6f:54:4c:f7:b5:db:b0:d1:65:64: 9b:a0:53:c0:12:8a:8a:98:9b:88:15:68:18:87:6f: de:b2:99:03:c5:05:96:e7:14:7d:90:8b:bd:8d:63: 6f:ff:9b:29:6d:12:fc:07:3b:7a:c6:ed:4d:c9:fc: 6c:b5:31:fd:97:3d:46:88:79:ec:30:68:19:ae:d3: 04:da:b5:28:21:6e:3a:60:ba:1c:80:68:70:d1:47: d7:92:66:36:cf:fe:30:c8:33:cb:bc:86:e7:58:9b: 50:d2:a1:06:fe:36:d2:6f:7f:c9:ce:6d:61:15:91: d9:ba:f6:58:b0:e6:63:fd:6b:8f:de:c6:d1:c0:c3: 1d:d7:a5:48:f0:0b:5a:7f:89:f0:75:de:7b:58:e1: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E8:85:20:84:E7:0B:63:09:D8:D9:38:D1:49:C6:71:F1:98:30:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl X509v3 Authority Key Identifier: keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer sbgp-ipAddrBlock: critical IPv6: 2607:5dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:04:db:7d:6f:86:be:96:60:90:dc:8b:f8:9d:31:3a:f6:ae: 20:67:a2:8b:31:31:17:b2:a1:3b:f4:a2:66:d6:0c:26:79:5e: 46:8f:94:ad:3d:35:59:b9:00:06:fb:65:30:d9:92:c1:8c:5c: 30:2b:a0:35:1e:c5:e1:98:eb:4b:56:ea:e5:2b:49:85:c5:d0: 3f:ae:b6:d3:55:fe:de:4a:fc:25:96:ba:9a:89:3c:0c:2a:e7: 8d:b2:2f:62:37:fb:e3:75:bd:59:70:9a:dd:28:96:9d:b6:88: 22:a8:d3:77:41:85:7d:90:9d:58:33:34:37:9a:d1:79:e4:31: f0:21:d2:b4:2e:c4:c2:14:02:dc:09:7e:90:46:28:e9:1a:49: 08:b1:45:a8:9e:9d:fe:fe:42:e2:1c:50:bc:75:f2:3a:f9:56: ab:f1:f8:c8:17:93:11:9a:47:e8:3f:a9:70:bb:42:85:58:ad: 62:c7:bc:e7:a4:12:ef:87:a8:61:a6:d6:34:fe:db:0b:94:5b: 1e:f2:f0:41:82:99:b1:c3:ea:67:c5:b3:f1:4f:d9:66:30:6c: 04:28:94:cd:93:e2:4e:06:88:ff:20:84:3a:1f:16:35:a1:74: e0:4e:dd:ca:b3:3a:5e:08:d1:0f:a9:06:b4:42:9a:16:7a:de: 2d:53:2e:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niLuyzT6ee6Eek4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1NjNkYzktNmI4Ny00ZDgyLThhNTgtNmI4Yjc5MTcw OTJjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzI4ZWJhOTctZGEzZS00OTBlLTkwZjEtZWE4OGU5ODE2ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+huU4tlcd8absBrRJ0RxE6M+wXY7Re658mw BSP3jUl8iKTGiFc3Q7NFif8CkP0FrY9D+qSB8YJE3KIolQce4chpO6sfGBMGdZ3i j0nAAf6EPHo47/PggcUgRna2seOV8f33ejFVOvkkJ+GmEW9UTPe127DRZWSboFPA EoqKmJuIFWgYh2/espkDxQWW5xR9kIu9jWNv/5spbRL8Bzt6xu1NyfxstTH9lz1G iHnsMGgZrtME2rUoIW46YLocgGhw0UfXkmY2z/4wyDPLvIbnWJtQ0qEG/jbSb3/J zm1hFZHZuvZYsOZj/WuP3sbRwMMd16VI8Ataf4nwdd57WOGtmwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJXohSCE5wtjCdjZONFJxnHxmDCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2 M2RjOS02Yjg3LTRkODItOGE1OC02YjhiNzkxNzA5MmMvMDhmN2U2MzYtMTk5Yy0z NjdkLWE3MGMtMGY4OGRiODdhZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGM1NjNkYzktNmI4Ny00ZDgyLThh NTgtNmI4Yjc5MTcwOTJjL2RjNTYzZGM5LTZiODctNGQ4Mi04YTU4LTZiOGI3OTE3 MDkyYy5jcmwwHwYDVR0jBBgwFoAUoDb4C8itBT9EjLiiq6o5Zlfg040wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYzU2M2RjOS02Yjg3LTRkODItOGE1OC02Yjhi NzkxNzA5MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgddwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZBNt9b4a+lmCQ3Iv4nTE69q4gZ6KLMTEXsqE79KJm1gwmeV5Gj5St PTVZuQAG+2Uw2ZLBjFwwK6A1HsXhmOtLVurlK0mFxdA/rrbTVf7eSvwllrqaiTwM KueNsi9iN/vjdb1ZcJrdKJadtogiqNN3QYV9kJ1YMzQ3mtF55DHwIdK0LsTCFALc CX6QRijpGkkIsUWonp3+/kLiHFC8dfI6+Var8fjIF5MRmkfoP6lwu0KFWK1ix7zn pBLvh6hhptY0/tsLlFse8vBBgpmxw+pnxbPxT9lmMGwEKJTNk+JOBoj/IIQ6HxY1 oXTgTt3KszpeCNEPqQa0QpoWet4tUy7n -----END CERTIFICATE-----Generated at Wed Jul 29 08:37:00 2026 by rpki-client