$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa File: 653a6050-4139-3e32-8979-ff2a401ebfeb.roa (raw, json) Hash identifier: Na7TtPvwofGKjNXBUZnFxyQ0vCS2Hls58uSehkaFtk0= Subject key identifier: 2F:F3:85:2A:D9:64:DE:E1:62:AB:93:C3:88:76:96:DB:04:5D:F5:F4 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584E86F50B13C60C8BCD939EC680 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 14618 IP address blocks: 2620:147:c11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:0b:13:c6:0c:8b:cd:93:9e:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=2c019a13-8611-4323-85a9-8e084f704953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:47:b3:e3:3c:92:8b:9c:ec:57:d5:3b:da:d3: 59:0a:40:60:d2:d7:4b:d5:93:21:3e:56:cc:70:7a: f5:41:b5:9c:c3:44:78:7e:f1:d4:14:a9:9d:60:fc: 2f:a2:97:d4:56:39:c0:b1:13:cc:d2:67:19:b1:ec: fd:8b:98:45:e4:1d:d2:6a:ef:17:6d:fa:95:54:1b: e4:13:56:88:14:e3:57:4f:fe:49:a3:0c:42:f4:11: 13:80:19:41:9d:e9:fc:1f:1b:d6:2a:4d:47:dc:f4: 18:3b:bc:9d:0f:42:0c:37:33:eb:5c:8f:55:fc:d2: 8e:16:c9:d3:e2:9e:41:b8:6e:41:6f:de:97:a5:e2: 37:7b:0d:1b:99:75:d7:37:43:60:d5:61:d6:7c:ac: be:52:a1:a3:5a:be:6d:a4:b2:a7:59:4c:9f:c8:6d: c2:47:58:e1:1b:97:4d:e8:4f:b1:d2:0b:3d:1b:44: b1:e7:5a:19:71:d0:42:bb:7f:9e:f4:f1:13:bc:81: 28:f5:56:62:e2:f3:3a:38:44:57:a5:45:82:6a:a4: b0:83:7d:4b:c3:42:66:11:42:11:23:20:5c:fb:bb: 8f:99:79:f8:85:24:5f:07:3d:89:57:33:69:3b:35: 90:d0:6d:b7:86:0e:be:cf:51:e0:6e:d8:43:c5:e1: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F3:85:2A:D9:64:DE:E1:62:AB:93:C3:88:76:96:DB:04:5D:F5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/653a6050-4139-3e32-8979-ff2a401ebfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5b:84:92:02:28:08:f2:d8:8d:fe:21:52:0c:fa:81:9f:3a: 62:88:24:67:5b:bc:77:e1:36:7d:d8:df:da:f2:1c:aa:73:78: 79:c1:48:87:3c:d0:9e:49:8c:bc:52:a1:db:ae:19:43:45:23: c5:aa:83:12:c8:17:74:27:29:a7:55:e6:fd:51:11:f0:1e:b6: f3:26:8e:57:f8:38:af:9e:72:80:b9:a9:0c:0f:e9:0a:b6:c6: 03:c1:da:50:e6:69:16:15:e3:3b:83:3b:10:33:fa:71:8b:eb: 82:b4:5b:41:f4:dc:49:56:fb:6c:89:39:ac:2a:c0:6d:1e:5a: 97:82:a5:9b:ce:4b:ba:35:10:76:b7:f4:e3:65:62:df:77:a9: bd:9b:20:91:73:93:5e:28:24:5f:af:c7:ec:2f:27:7f:e3:79: 2a:10:a4:ae:bf:d6:90:bb:b6:3b:93:db:55:93:e5:dc:87:26: 2c:be:04:78:a4:09:f0:55:2f:c7:32:e1:64:2a:0b:76:e3:63: 7a:16:d2:93:15:e5:40:cc:fa:f5:3d:c0:3a:93:a9:c4:33:5a: 46:98:75:8c:35:dc:d4:73:79:6e:6b:a7:85:54:ba:0a:2f:0b: f0:83:2d:8e:3f:00:2e:b5:22:45:78:5f:bb:fb:79:a1:57:3f: c3:31:8c:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9QsTxgyLzZOexoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MmMwMTlhMTMtODYxMS00MzIzLTg1YTktOGUwODRmNzA0OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0ez4zySi5zsV9U72tNZCkBg0tdL1ZMhPlbM cHr1QbWcw0R4fvHUFKmdYPwvopfUVjnAsRPM0mcZsez9i5hF5B3Sau8XbfqVVBvk E1aIFONXT/5JowxC9BETgBlBnen8HxvWKk1H3PQYO7ydD0IMNzPrXI9V/NKOFsnT 4p5BuG5Bb96XpeI3ew0bmXXXN0Ng1WHWfKy+UqGjWr5tpLKnWUyfyG3CR1jhG5dN 6E+x0gs9G0Sx51oZcdBCu3+e9PETvIEo9VZi4vM6OERXpUWCaqSwg31Lw0JmEUIR IyBc+7uPmXn4hSRfBz2JVzNpOzWQ0G23hg6+z1HgbthDxeG02QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC/zhSrZZN7hYquTw4h2ltsEXfX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNjUzYTYwNTAtNDEzOS0z ZTMyLTg5NzktZmYyYTQwMWViZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRbhJICKAjy2I3+IVIM+oGfOmKIJGdbvHfhNn3Y39ryHKpzeHnB SIc80J5JjLxSoduuGUNFI8WqgxLIF3QnKadV5v1REfAetvMmjlf4OK+ecoC5qQwP 6Qq2xgPB2lDmaRYV4zuDOxAz+nGL64K0W0H03ElW+2yJOawqwG0eWpeCpZvOS7o1 EHa39ONlYt93qb2bIJFzk14oJF+vx+wvJ3/jeSoQpK6/1pC7tjuT21WT5dyHJiy+ BHikCfBVL8cy4WQqC3bjY3oW0pMV5UDM+vU9wDqTqcQzWkaYdYw13NRzeW5rp4VU ugovC/CDLY4/AC61IkV4X7v7eaFXP8MxjGY= -----END CERTIFICATE-----Generated at Tue Jul 21 15:59:43 2026 by rpki-client