$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa File: bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa (raw, json) Hash identifier: CkPCWaJfZ/HkEOf/+8Sqt3rRVGcZYeVb7MvcvkEkcjY= Subject key identifier: 04:53:01:FD:B3:67:82:F8:72:49:C5:0F:B8:BB:E3:B6:5C:9B:83:53 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584E9BE5077FF5ABE3DA040765E2 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 50842 IP address blocks: 2602:fb68:80::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:07:7f:f5:ab:e3:da:04:07:65:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=87cbeede-739b-44f5-a2b5-d7cd374d1eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:d3:92:66:17:40:ee:9c:6b:18:52:f5:52: f0:b4:b0:b5:eb:3e:b7:84:6d:9f:ac:5e:0b:e5:61: e7:a0:c1:1a:0b:0c:8b:57:c4:90:d6:5c:75:04:36: b6:89:bc:ea:b4:7d:a6:83:17:6d:f3:9a:f7:03:f9: a7:61:1b:0d:d5:01:dd:86:e2:49:8c:34:ca:c6:10: 23:a7:81:26:3a:c2:3e:82:20:2d:9e:38:60:2f:86: a8:4c:88:e2:8b:d1:eb:68:73:ee:83:72:4e:e0:63: 6a:5b:84:73:89:18:80:85:6f:2c:47:e2:65:c9:df: 12:18:96:0c:bf:ad:2d:5b:4a:10:59:1d:81:36:97: 95:38:74:32:bc:e3:20:e7:3c:58:51:5f:3d:d6:71: a5:66:99:19:d4:da:b7:95:e8:0e:bb:c5:9b:16:e3: 0c:4a:56:51:3f:42:53:16:5c:e3:26:26:cb:b9:eb: d1:03:58:40:ff:79:8c:72:79:fc:d1:31:53:46:27: 74:46:fc:74:ed:5c:ec:9b:2b:39:19:12:3c:4f:0d: 28:9a:5b:1b:b9:92:30:7c:91:c7:1b:95:7c:c8:f8: 07:1e:60:ef:d7:e5:06:0a:03:b6:46:c3:7b:9f:27: f6:b3:b7:c2:dc:fe:2d:4c:6f:2b:d4:7e:1c:97:0b: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:01:FD:B3:67:82:F8:72:49:C5:0F:B8:BB:E3:B6:5C:9B:83:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/bc7da7a6-43cb-3247-a5c6-6075c36ec5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb68:80::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:df:c1:e0:57:c3:95:59:70:d7:d0:8b:84:a1:4b:ed:5f:8c: 14:85:ab:48:ce:8a:9f:08:86:d3:e3:32:5b:10:d8:c4:18:9c: 3c:43:4a:63:17:fe:21:07:5c:4f:cb:57:47:83:c5:25:d7:dc: c1:e4:e2:a2:1e:31:84:4f:6a:d5:82:a1:cb:1c:dc:c0:2d:5a: b1:42:68:6c:c6:93:a5:08:ad:d7:67:74:9f:2b:6a:56:93:d6: 32:9e:fc:16:c5:41:66:31:a4:3a:b6:ab:d9:85:05:2c:4f:70: a2:1f:be:e5:8f:27:da:ee:c9:4d:33:34:79:32:b4:d2:13:c0: a9:56:47:d5:a8:26:fa:23:fe:c1:24:be:08:7d:2b:cb:c0:b9: d5:ae:e5:2d:b7:24:7b:11:05:d5:29:b4:10:b8:90:d6:e8:a1: 14:6a:22:f0:a9:7e:bb:38:78:3e:d3:30:e4:72:8f:5f:71:2d: 4b:8e:49:11:eb:06:ce:e8:c4:84:d1:41:d9:c8:b4:73:49:f1: 76:fe:bc:2f:82:2c:a7:86:5b:27:44:4e:9b:7f:78:45:4e:36: 16:bf:51:0a:22:ff:8c:5d:fe:e2:a7:33:2f:ac:01:e3:4a:22: f7:30:21:c7:cd:f5:7b:71:6b:b7:d8:e3:c3:af:9a:ac:ab:ae: 2d:e0:fd:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6b5Qd/9avj2gQHZeIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ODdjYmVlZGUtNzM5Yi00NGY1LWEyYjUtZDdjZDM3NGQxZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0rTkmYXQO6caxhS9VLwtLC16z63hG2frF4L 5WHnoMEaCwyLV8SQ1lx1BDa2ibzqtH2mgxdt85r3A/mnYRsN1QHdhuJJjDTKxhAj p4EmOsI+giAtnjhgL4aoTIjii9HraHPug3JO4GNqW4RziRiAhW8sR+Jlyd8SGJYM v60tW0oQWR2BNpeVOHQyvOMg5zxYUV891nGlZpkZ1Nq3legOu8WbFuMMSlZRP0JT FlzjJibLuevRA1hA/3mMcnn80TFTRid0Rvx07Vzsmys5GRI8Tw0omlsbuZIwfJHH G5V8yPgHHmDv1+UGCgO2RsN7nyf2s7fC3P4tTG8r1H4clwvUtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARTAf2zZ4L4cknFD7i747Zcm4NTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvYmM3ZGE3YTYtNDNjYi0z MjQ3LWE1YzYtNjA3NWMzNmVjNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHfweBXw5VZcNfQi4ShS+1fjBSFq0jOip8IhtPjMlsQ2MQYnDxD SmMX/iEHXE/LV0eDxSXX3MHk4qIeMYRPatWCocsc3MAtWrFCaGzGk6UIrddndJ8r alaT1jKe/BbFQWYxpDq2q9mFBSxPcKIfvuWPJ9ruyU0zNHkytNITwKlWR9WoJvoj /sEkvgh9K8vAudWu5S23JHsRBdUptBC4kNbooRRqIvCpfrs4eD7TMORyj19xLUuO SRHrBs7oxITRQdnItHNJ8Xb+vC+CLKeGWydETpt/eEVONha/UQoi/4xd/uKnMy+s AeNKIvcwIcfN9Xtxa7fY48Ovmqyrri3g/RY= -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:15 2026 by rpki-client