$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa File: 3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa (raw, json) Hash identifier: lyFX7QaoLGNmhOMEl6C2nI85DpmAFzQ7sbpQygylCjc= Subject key identifier: 1B:43:81:0D:0C:66:04:E6:C0:27:26:07:1B:EA:46:11:72:6E:34:4F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A083AB5C6AD9E927562B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 2607:f8b0:4008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:83:ab:5c:6a:d9:e9:27:56:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=70fd0d14-0209-4c84-a99a-587d20501bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:a5:07:fe:f0:ff:41:63:40:41:6c:5d:35: 33:2e:72:c1:ca:31:8e:6f:57:d7:ef:2c:a7:6a:33: a3:b5:6b:a9:3a:e4:bb:98:19:3e:12:73:15:33:24: 55:14:13:40:c2:96:e0:87:5d:a7:6a:6c:80:40:60: c1:5c:85:67:05:68:d6:40:4d:22:eb:6e:5f:38:d6: de:98:d1:a6:1a:78:7e:22:1e:e1:53:95:c6:26:ac: cf:9a:56:4b:74:ea:17:21:2b:7d:aa:c5:6e:02:d6: a5:3a:97:b9:80:33:c2:c5:ad:57:19:cc:82:fc:64: 2b:58:11:49:f8:fe:1d:b5:e2:0b:dc:de:9b:54:47: fa:a2:2c:8a:11:5e:1d:33:44:88:68:9f:50:02:de: 7a:74:d0:5b:52:9e:f3:93:55:87:ff:b4:c6:28:02: c3:9f:90:40:9a:e2:46:0a:47:06:29:78:0d:a5:f9: d3:be:1e:b3:80:2e:80:93:77:b1:ef:54:5c:9a:71: db:8e:ee:58:12:60:73:d3:a4:e9:8a:45:b9:2d:61: d9:8d:bd:2e:71:72:c6:82:48:0d:90:e8:20:d6:53: b8:d1:11:da:cd:74:80:e3:0f:2c:e6:23:87:e5:71: 0c:76:fe:2a:2f:27:a0:91:e3:b5:38:61:2f:74:fd: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:81:0D:0C:66:04:E6:C0:27:26:07:1B:EA:46:11:72:6E:34:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3e519fb3-b4f6-30d0-9172-c6e0411b96b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:58:e6:fa:4e:7f:8c:7b:db:16:36:c1:f5:29:3b:d1:68:90: 6c:bd:36:37:fc:b6:d4:18:90:46:4f:7c:7a:5b:ee:71:45:47: f8:2e:6e:2c:3c:30:a0:26:92:76:c9:ed:c1:2d:90:f5:b4:10: 56:45:a7:5b:a9:eb:89:3d:de:5a:20:b5:23:39:86:d6:82:07: 4d:fc:cf:23:36:b9:ed:46:2e:9d:b2:5b:e0:f4:0d:fd:47:e1: 5b:38:6e:39:2c:af:b6:0a:07:79:2b:1c:93:bf:5a:d3:1e:76: cd:87:2b:2f:83:61:bd:8e:d2:86:cd:ce:ef:bd:a0:2a:12:ba: e1:95:0f:c7:67:27:5b:5b:ed:ad:88:b7:61:93:9d:28:d5:b7: cf:18:f0:f1:e5:2a:c1:2e:d4:66:ed:be:4f:87:38:22:d8:9c: f3:ed:24:25:a4:c5:24:27:ef:e0:b9:21:4f:61:ce:38:53:dd: f8:cd:ad:42:9e:78:13:0f:38:5f:d3:62:06:37:aa:48:6c:19: 16:8a:9d:05:36:dd:9a:f3:5d:9b:04:05:fb:a4:79:ec:51:12: 81:66:04:72:b3:85:0f:66:bd:e4:96:5d:bd:4f:4b:4c:53:7f: 16:b3:e7:f9:cc:77:83:fb:8a:36:ee:8f:f7:52:1c:55:de:27: ab:09:f1:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6noIOrXGrZ6SdWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzBmZDBkMTQtMDIwOS00Yzg0LWE5OWEtNTg3ZDIwNTAxYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykKlB/7w/0FjQEFsXTUzLnLByjGOb1fX7yyn ajOjtWupOuS7mBk+EnMVMyRVFBNAwpbgh12namyAQGDBXIVnBWjWQE0i625fONbe mNGmGnh+Ih7hU5XGJqzPmlZLdOoXISt9qsVuAtalOpe5gDPCxa1XGcyC/GQrWBFJ +P4dteIL3N6bVEf6oiyKEV4dM0SIaJ9QAt56dNBbUp7zk1WH/7TGKALDn5BAmuJG CkcGKXgNpfnTvh6zgC6Ak3ex71RcmnHbju5YEmBz06TpikW5LWHZjb0ucXLGgkgN kOgg1lO40RHazXSA4w8s5iOH5XEMdv4qLyegkeO1OGEvdP0hMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtDgQ0MZgTmwCcmBxvqRhFybjRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2U1MTlmYjMtYjRmNi0z MGQwLTkxNzItYzZlMDQxMWI5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpY5vpOf4x72xY2wfUpO9FokGy9Njf8ttQYkEZPfHpb7nFFR/gu biw8MKAmknbJ7cEtkPW0EFZFp1up64k93logtSM5htaCB038zyM2ue1GLp2yW+D0 Df1H4Vs4bjksr7YKB3krHJO/WtMeds2HKy+DYb2O0obNzu+9oCoSuuGVD8dnJ1tb 7a2It2GTnSjVt88Y8PHlKsEu1Gbtvk+HOCLYnPPtJCWkxSQn7+C5IU9hzjhT3fjN rUKeeBMPOF/TYgY3qkhsGRaKnQU23ZrzXZsEBfukeexREoFmBHKzhQ9mveSWXb1P S0xTfxaz5/nMd4P7ijbuj/dSHFXeJ6sJ8XQ= -----END CERTIFICATE-----Generated at Wed Jul 29 03:49:34 2026 by rpki-client