$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa File: 3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa (raw, json) Hash identifier: KA8KrdiDtnwrviQDv1LgXoq0lfHqZeC6dxUMUC4FLiM= Subject key identifier: 78:4F:9E:79:DD:BE:E3:E0:5A:F4:AF:55:4F:FD:22:B8:53:87:D5:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A0872EB59D01CBABEC6140 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 2001:4860:4827::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:87:2e:b5:9d:01:cb:ab:ec:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c80c429e-8588-44d8-a1b4-d7cbaf9f6eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:31:a9:77:94:0e:9d:95:71:ce:ad:0f:8d: c2:6b:84:99:2d:65:62:f8:36:69:f4:b2:4c:52:f1: c2:fb:2c:a8:fd:6d:8e:21:6e:7e:68:15:8e:a6:18: 77:8c:08:86:2b:cd:f4:17:a4:e5:4d:0a:ee:62:28: 6c:a6:78:7a:b4:1f:4a:49:d1:5e:3c:3c:c5:ca:f2: f8:7a:4a:67:ce:2a:36:ed:90:e4:70:33:0e:68:8d: 6c:0e:ed:7a:50:fd:0e:21:cd:31:db:ab:09:a9:20: d6:ef:c5:df:68:49:02:4e:9a:1d:c5:d6:2a:ab:36: 10:0f:54:d4:41:1d:57:52:64:84:6c:88:f1:4e:04: 09:ff:85:59:67:ec:d3:eb:8e:9a:d7:b4:96:ab:82: 1c:06:da:27:af:7a:75:ba:a6:b4:87:38:dc:14:16: 40:c1:78:ec:45:83:f9:01:5c:8e:38:e5:27:01:b6: 18:6f:74:be:ee:0b:5c:39:0c:25:c8:ec:43:40:6c: b7:29:2d:b9:ac:fd:54:c9:da:5c:56:13:bb:03:c3: ff:72:90:38:41:fc:1b:93:c4:09:04:61:a8:10:a5: 91:42:4c:2d:37:1e:13:56:b9:19:4a:f7:6e:2b:11: 93:7f:73:1f:cd:6a:d1:26:dd:95:ea:15:fe:2f:03: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4F:9E:79:DD:BE:E3:E0:5A:F4:AF:55:4F:FD:22:B8:53:87:D5:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ab4c1e0-0c35-3ae4-bd1d-5e891a45e155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4827::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:95:15:e6:f4:7e:93:48:a7:28:a0:13:bb:21:49:9a:eb:79: 0c:f5:1e:c8:76:b7:4b:23:58:0c:1d:9c:17:eb:1e:b2:8c:db: 9b:ec:ef:28:f8:56:22:3b:6d:10:88:0e:eb:60:1a:1b:33:80: e2:ac:28:de:db:2a:b5:9d:a1:e8:46:e5:a1:e1:1a:e7:35:96: 31:1b:da:ff:69:50:b5:91:12:85:5f:2d:18:15:13:08:7e:50: b1:03:7f:20:1f:16:41:f7:d2:c4:9e:b4:d5:07:1b:3b:f1:76: 62:25:6c:70:49:3d:44:b4:ce:1f:8d:a8:62:e5:1a:05:54:64: f6:23:ea:84:d0:75:ad:aa:a1:56:3a:7a:70:7a:ab:cf:a5:36: 3e:02:a2:c9:20:14:19:37:3e:d2:4f:07:b5:57:f6:e9:bc:67: 4c:ed:7e:86:06:bc:09:2f:0c:32:c0:de:f1:d3:a1:68:cd:1f: fc:cb:33:7c:35:b8:a0:68:1f:16:86:2c:3d:c4:58:46:1d:3e: 0e:4e:fe:0d:fd:55:82:9d:ee:a9:1b:16:29:37:3f:db:b2:3b: dd:69:48:df:c9:7c:b3:b6:ce:80:d0:55:55:5f:04:8e:8e:60: c0:42:ec:14:14:69:ee:ef:2b:08:a7:8c:0c:97:e0:e2:d1:91: 87:d9:9a:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noIcutZ0By6vsYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzgwYzQyOWUtODU4OC00NGQ4LWExYjQtZDdjYmFmOWY2ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr4xqXeUDp2Vcc6tD43Ca4SZLWVi+DZp9LJM UvHC+yyo/W2OIW5+aBWOphh3jAiGK830F6TlTQruYihspnh6tB9KSdFePDzFyvL4 ekpnzio27ZDkcDMOaI1sDu16UP0OIc0x26sJqSDW78XfaEkCTpodxdYqqzYQD1TU QR1XUmSEbIjxTgQJ/4VZZ+zT646a17SWq4IcBtonr3p1uqa0hzjcFBZAwXjsRYP5 AVyOOOUnAbYYb3S+7gtcOQwlyOxDQGy3KS25rP1UydpcVhO7A8P/cpA4Qfwbk8QJ BGGoEKWRQkwtNx4TVrkZSvduKxGTf3MfzWrRJt2V6hX+LwMugwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhPnnndvuPgWvSvVU/9IrhTh9UJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2FiNGMxZTAtMGMzNS0z YWU0LWJkMWQtNWU4OTFhNDVlMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6VFeb0fpNIpyigE7shSZrreQz1Hsh2t0sjWAwdnBfrHrKM25vs 7yj4ViI7bRCIDutgGhszgOKsKN7bKrWdoehG5aHhGuc1ljEb2v9pULWREoVfLRgV Ewh+ULEDfyAfFkH30sSetNUHGzvxdmIlbHBJPUS0zh+NqGLlGgVUZPYj6oTQda2q oVY6enB6q8+lNj4CoskgFBk3PtJPB7VX9um8Z0ztfoYGvAkvDDLA3vHToWjNH/zL M3w1uKBoHxaGLD3EWEYdPg5O/g39VYKd7qkbFik3P9uyO91pSN/JfLO2zoDQVVVf BI6OYMBC7BQUae7vKwinjAyX4OLRkYfZmu8= -----END CERTIFICATE-----Generated at Wed Jul 29 04:09:54 2026 by rpki-client