$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/c1b18486-33d2-33e6-a601-685010da10c2.roa File: c1b18486-33d2-33e6-a601-685010da10c2.roa (raw, json) Hash identifier: iOfKwXN4KlZ+LfTPyC5Tn68Q0M0CqgLf259kp6oX6iY= Subject key identifier: D5:89:10:AA:F0:E3:10:1C:85:1B:30:44:52:57:98:7A:A8:87:26:C7 Certificate issuer: /CN=1e90f840-02b3-4251-9a74-5fab1c71e8d6 Certificate serial: 010D0C9F4328584EA17AAEE3A7D13CA4F9D14F80 Authority key identifier: 09:43:46:9B:98:60:D7:FF:C6:1F:19:FC:04:0C:60:D3:4A:35:EF:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/c1b18486-33d2-33e6-a601-685010da10c2.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 402460 IP address blocks: 2620:1e::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/1e90f840-02b3-4251-9a74-5fab1c71e8d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/1e90f840-02b3-4251-9a74-5fab1c71e8d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:ae:e3:a7:d1:3c:a4:f9:d1:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e90f840-02b3-4251-9a74-5fab1c71e8d6 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=f96916bd-bcd8-4a05-af4f-3bf1cd1d1713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:0b:f3:a1:0f:44:98:18:8b:f6:6e:2d:3c: 6b:aa:5c:39:3e:36:82:70:3d:12:59:5b:e3:08:8e: 6c:55:2a:37:c1:80:e1:56:3d:8e:ea:48:03:b6:00: c4:eb:62:fb:51:0f:a8:6c:53:26:dd:90:27:2e:38: 30:a5:5d:ea:02:29:f2:2c:44:3e:78:01:37:23:4c: 28:ef:0d:c7:da:ea:00:ef:70:e6:4c:00:36:e4:3f: f2:25:62:af:1d:2f:d0:92:6e:af:db:b9:29:da:9e: 4b:65:d4:c4:a8:ae:5d:9a:00:23:cf:50:45:1a:14: a9:8f:c1:68:29:a2:0e:2f:72:54:dd:f6:25:fd:37: d0:3f:a2:9f:61:dd:a7:54:a0:f5:a6:44:3e:99:ee: 6a:fa:5d:91:38:ca:f0:e4:c7:cc:c6:32:90:ff:a9: 70:ba:c3:07:f5:0f:5c:1b:dc:d5:ea:63:36:94:32: e1:05:14:20:0c:d1:cf:44:0c:ee:ed:1e:d5:b1:f2: a1:f4:f3:c0:9f:0f:1c:e7:b1:34:20:3c:c0:eb:18: 67:2a:23:59:b0:e3:ad:7d:e1:12:cb:fb:29:f0:55: b3:2c:ab:a2:6b:a7:2c:d9:8b:10:6f:1d:53:d6:c5: 3b:5e:78:6e:2f:2b:9f:67:90:74:02:48:75:66:33: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:89:10:AA:F0:E3:10:1C:85:1B:30:44:52:57:98:7A:A8:87:26:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/c1b18486-33d2-33e6-a601-685010da10c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/1e90f840-02b3-4251-9a74-5fab1c71e8d6.crl X509v3 Authority Key Identifier: keyid:09:43:46:9B:98:60:D7:FF:C6:1F:19:FC:04:0C:60:D3:4A:35:EF:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6.cer sbgp-ipAddrBlock: critical IPv6: 2620:1e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:34:a3:21:21:67:f3:b8:09:50:0a:7d:87:0e:cb:c8:ec:01: 32:76:5d:af:96:59:39:fe:b8:9c:5b:12:ca:03:47:64:7c:94: 67:44:5c:ea:7d:c7:cd:8f:e1:fd:4b:f8:e2:72:9e:82:34:ef: e6:ab:4e:1b:96:14:f1:27:cc:2e:e9:23:2c:8c:b7:7d:0f:20: 5f:4a:1a:74:85:a6:d6:9f:42:48:80:8b:5c:bf:d0:51:c6:fc: 6d:d9:df:d1:8d:7b:fe:35:6b:de:61:8d:62:5b:8e:d5:36:3c: 9b:6a:4f:af:be:c2:45:c2:cc:3c:6c:2a:f4:e6:4f:a9:d8:eb: b1:91:3b:ec:ca:5c:67:88:f8:3d:54:b5:c9:b0:6c:f6:88:7e: 8b:06:77:77:f4:76:62:d8:c1:ef:72:20:7c:4e:ab:91:60:f0: 9e:c3:d2:4a:53:7b:94:63:a8:14:3a:a9:56:5a:f7:21:21:b6: d9:34:90:83:f9:f0:d3:70:56:0b:2a:a8:6a:88:5c:65:fd:5c: 43:11:dd:30:32:0a:7d:8a:b5:a3:72:f4:36:4d:78:d9:ee:de: c2:7f:7f:bc:6f:9b:6c:16:98:1f:b0:b8:1e:b2:e7:f8:fb:af: 53:84:91:08:8e:f7:bd:4f:e3:c5:bd:79:ac:36:8f:7b:32:be: b2:c5:64:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6heq7jp9E8pPnRT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU5MGY4NDAtMDJiMy00MjUxLTlhNzQtNWZhYjFjNzFl OGQ2MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk Zjk2OTE2YmQtYmNkOC00YTA1LWFmNGYtM2JmMWNkMWQxNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrgL86EPRJgYi/ZuLTxrqlw5PjaCcD0SWVvj CI5sVSo3wYDhVj2O6kgDtgDE62L7UQ+obFMm3ZAnLjgwpV3qAinyLEQ+eAE3I0wo 7w3H2uoA73DmTAA25D/yJWKvHS/Qkm6v27kp2p5LZdTEqK5dmgAjz1BFGhSpj8Fo KaIOL3JU3fYl/TfQP6KfYd2nVKD1pkQ+me5q+l2ROMrw5MfMxjKQ/6lwusMH9Q9c G9zV6mM2lDLhBRQgDNHPRAzu7R7VsfKh9PPAnw8c57E0IDzA6xhnKiNZsOOtfeES y/sp8FWzLKuia6cs2YsQbx1T1sU7XnhuLyufZ5B0Akh1ZjM/SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNWJEKrw4xAchRswRFJXmHqohybHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZTkw Zjg0MC0wMmIzLTQyNTEtOWE3NC01ZmFiMWM3MWU4ZDYvYzFiMTg0ODYtMzNkMi0z M2U2LWE2MDEtNjg1MDEwZGExMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMWU5MGY4NDAtMDJiMy00MjUxLTlh NzQtNWZhYjFjNzFlOGQ2LzFlOTBmODQwLTAyYjMtNDI1MS05YTc0LTVmYWIxYzcx ZThkNi5jcmwwHwYDVR0jBBgwFoAUCUNGm5hg1//GHxn8BAxg00o175EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xZTkwZjg0MC0wMmIzLTQyNTEtOWE3NC01ZmFi MWM3MWU4ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAHgAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADU0oyEhZ/O4CVAKfYcOy8jsATJ2Xa+WWTn+uJxbEsoDR2R8lGdE XOp9x82P4f1L+OJynoI07+arThuWFPEnzC7pIyyMt30PIF9KGnSFptafQkiAi1y/ 0FHG/G3Z39GNe/41a95hjWJbjtU2PJtqT6++wkXCzDxsKvTmT6nY67GRO+zKXGeI +D1UtcmwbPaIfosGd3f0dmLYwe9yIHxOq5Fg8J7D0kpTe5RjqBQ6qVZa9yEhttk0 kIP58NNwVgsqqGqIXGX9XEMR3TAyCn2KtaNy9DZNeNnu3sJ/f7xvm2wWmB+wuB6y 5/j7r1OEkQiO971P48W9eaw2j3syvrLFZJw= -----END CERTIFICATE-----Generated at Tue Jul 28 16:07:09 2026 by rpki-client