$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa File: 02490b1e-0527-346f-a427-fa83c48a1597.roa (raw, json) Hash identifier: XixfyuE9oO68S4w2spS/0cuT3PFCcilrZkR4dgXjkYs= Subject key identifier: 16:0B:7B:26:B7:B1:A7:EF:11:50:59:11:75:7C:45:6F:86:DA:81:94 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EE97EE90DBB02A36E4460 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 2607:f8b0:400c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:e9:7e:e9:0d:bb:02:a3:6e:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eb6bbbfa-5a18-456a-82b1-cc8f282764ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:5b:03:ec:93:d4:73:0b:b2:ee:27:0b:a7: 6e:d7:16:1d:79:7a:30:02:23:31:01:57:66:4d:d1: f9:77:a9:f2:5f:31:7e:3a:61:a0:d3:eb:c5:ee:c9: 73:b5:08:44:a3:e5:f5:f1:59:4f:3d:45:5b:62:67: dd:17:cc:cc:2f:18:ad:db:e2:81:5e:c2:9c:78:fc: 9b:cc:88:3a:1b:99:8f:9f:14:fe:fa:68:46:bd:c8: 89:6f:f1:6c:5c:81:92:03:b0:21:0e:9b:17:b2:cc: 66:a1:af:bf:74:6d:9d:22:d3:a3:1e:59:eb:ea:e7: 14:48:ec:96:e2:3f:70:ec:16:f5:d1:6c:8d:a2:ec: 23:d4:a0:3f:85:a1:40:d8:d8:49:2f:1d:72:ff:ad: b5:0f:0b:7e:79:3c:ca:1a:30:a1:aa:a1:38:94:9c: 17:f2:2d:90:19:1c:72:1e:75:bf:bc:8d:69:53:5a: a9:ca:e5:f8:34:9d:38:3f:05:7a:d4:28:77:1d:06: c8:8b:15:15:f6:3c:1d:9c:c4:46:77:a1:11:7e:84: bc:3c:04:f0:0f:cc:fe:29:60:59:ab:90:d6:7a:ef: 23:71:61:68:3e:9c:df:61:8e:f0:f6:68:93:39:c5: 7b:e5:0a:01:6c:3f:41:62:9e:da:e2:8f:6c:16:a5: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0B:7B:26:B7:B1:A7:EF:11:50:59:11:75:7C:45:6F:86:DA:81:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02490b1e-0527-346f-a427-fa83c48a1597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:400c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:41:44:e5:60:fe:f8:e5:4c:b9:f6:6c:59:ca:59:2e:31:c3: 25:df:f1:05:4c:7f:d0:8e:87:eb:41:da:f7:d1:bd:a4:4a:22: b5:1e:24:d3:db:cc:4c:52:d1:de:1d:73:c1:ee:06:d3:b2:a6: 23:b4:39:1e:73:7e:d3:70:8f:e5:90:8c:52:5a:eb:3c:70:23: ef:39:7b:d4:26:be:dd:59:2c:69:30:60:4a:98:7a:57:c5:cf: 8e:59:1b:8d:02:31:3d:c2:ec:72:fe:94:d4:46:cb:7e:d1:d4: bf:ca:01:a6:a8:f1:32:c4:78:ab:61:f6:a9:a0:90:67:25:ed: cc:3b:72:16:7f:58:53:bf:02:61:51:68:ac:af:ae:f7:0e:32: 69:c9:9d:a0:74:fb:e2:84:83:46:0b:b2:8a:25:ca:22:ba:92: 15:82:1e:3a:b6:68:dd:fc:0b:62:85:4c:88:33:3f:24:a9:90: 3f:e9:a1:3a:d5:e9:46:2f:0f:9a:71:ba:57:64:6f:02:f0:9f: 39:cd:bd:cc:26:6e:0f:fb:47:a5:c3:06:dd:9f:69:eb:54:a5: a7:43:cf:79:d2:1a:30:84:43:05:e9:80:4c:b7:16:5d:e9:24: ca:c9:af:19:d7:dc:64:48:e8:5e:00:cd:5c:f2:85:db:79:aa: f6:17:46:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnul+6Q27AqNuRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWI2YmJiZmEtNWExOC00NTZhLTgyYjEtY2M4ZjI4Mjc2NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhtbA+yT1HMLsu4nC6du1xYdeXowAiMxAVdm TdH5d6nyXzF+OmGg0+vF7slztQhEo+X18VlPPUVbYmfdF8zMLxit2+KBXsKcePyb zIg6G5mPnxT++mhGvciJb/FsXIGSA7AhDpsXssxmoa+/dG2dItOjHlnr6ucUSOyW 4j9w7Bb10WyNouwj1KA/haFA2NhJLx1y/621Dwt+eTzKGjChqqE4lJwX8i2QGRxy HnW/vI1pU1qpyuX4NJ04PwV61Ch3HQbIixUV9jwdnMRGd6ERfoS8PATwD8z+KWBZ q5DWeu8jcWFoPpzfYY7w9miTOcV75QoBbD9BYp7a4o9sFqX6LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYLeya3safvEVBZEXV8RW+G2oGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDI0OTBiMWUtMDUyNy0z NDZmLWE0MjctZmE4M2M0OGExNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVBROVg/vjlTLn2bFnKWS4xwyXf8QVMf9COh+tB2vfRvaRKIrUe JNPbzExS0d4dc8HuBtOypiO0OR5zftNwj+WQjFJa6zxwI+85e9Qmvt1ZLGkwYEqY elfFz45ZG40CMT3C7HL+lNRGy37R1L/KAaao8TLEeKth9qmgkGcl7cw7chZ/WFO/ AmFRaKyvrvcOMmnJnaB0++KEg0YLsoolyiK6khWCHjq2aN38C2KFTIgzPySpkD/p oTrV6UYvD5pxuldkbwLwnznNvcwmbg/7R6XDBt2faetUpadDz3nSGjCEQwXpgEy3 Fl3pJMrJrxnX3GRI6F4AzVzyhdt5qvYXRlo= -----END CERTIFICATE-----Generated at Wed Jul 29 06:05:06 2026 by rpki-client