$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa File: c556b2e1-840f-3e72-9687-6b941796b423.roa (raw, json) Hash identifier: BCCX4Fm9E89HozhtCFsksnl9fryEx2P7360LLKxLwok= Subject key identifier: DD:CB:DE:AA:BD:4E:5A:6D:E5:A1:F6:EC:A2:7A:FC:20:05:E9:11:5B Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584E86F4F7B75BFDCF9216274C00 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 16509 IP address blocks: 2620:147:c45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f7:b7:5b:fd:cf:92:16:27:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=2de050e3-323e-4821-903c-eacb628046e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:42:20:37:8e:d7:f1:a5:f4:7c:61:4f:7c: 73:be:72:f5:0c:b4:cc:fe:77:ed:d8:ce:71:88:df: 5e:20:e8:76:2f:c2:a0:84:5a:a4:3b:ff:86:a6:9e: 5f:c3:d3:ce:5f:3b:95:00:c9:71:fa:f6:82:79:33: 69:1c:15:da:5a:97:2d:5a:6d:ad:09:2c:b0:d5:46: ab:93:1c:a8:9c:61:c5:74:f9:1f:c2:05:b8:e5:d2: 29:58:7c:24:41:ba:33:ee:05:be:b7:31:cb:7a:44: f4:5b:e2:1f:5b:25:1e:4a:37:94:6d:d7:9e:77:13: b1:56:32:9f:16:57:01:27:6a:25:db:2a:a0:14:df: 4d:a6:7c:c4:4c:12:6c:25:25:04:80:a4:54:38:38: 64:27:dc:2d:16:d7:5c:21:97:3d:f4:ac:3e:b2:43: a5:19:a4:d3:65:e6:a2:3e:be:5e:4a:5f:fe:09:67: e9:59:ee:c1:91:2a:32:d0:02:cc:26:e5:5b:05:20: ec:cc:a1:bd:94:6d:af:7e:57:03:bf:ef:c0:41:e7: 67:62:8f:19:f0:00:e0:7e:b9:37:16:5a:93:2f:a8: ea:28:e9:4c:32:5f:1f:21:b1:9e:d3:a3:ee:8e:42: a7:56:97:c1:8c:c6:2f:03:6e:b8:2e:96:65:b6:38: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CB:DE:AA:BD:4E:5A:6D:E5:A1:F6:EC:A2:7A:FC:20:05:E9:11:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c556b2e1-840f-3e72-9687-6b941796b423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c45::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8b:e8:e9:0a:88:2b:58:7a:5d:2d:9c:f0:11:51:2a:d6:e1: 8c:35:8e:ac:e8:6c:8c:29:c2:d0:7b:41:a5:3f:33:7e:f6:f4: 84:cc:df:7b:c8:4d:aa:59:6d:26:21:c2:d3:e1:d5:bf:ee:08: 60:e5:73:68:be:01:8a:60:2e:17:57:ef:1c:bd:89:26:c1:54: 48:4a:39:50:3b:38:c6:51:81:2c:b9:cf:6a:ab:f4:b9:cd:d8: 2a:80:a7:47:2f:fb:80:fd:7d:7f:cc:28:2d:d3:98:4d:5f:53: 08:a6:67:04:91:45:af:10:12:96:35:d1:31:39:51:ac:5c:60: b0:b5:ab:2e:a1:d9:36:24:ea:50:7d:1a:0c:76:6c:ba:4c:e8: d0:83:e5:d6:53:6f:d5:40:2d:43:3b:37:ab:35:f5:4b:5a:f2: 09:98:71:ce:ae:cd:e9:c0:eb:24:e7:3e:24:0b:af:13:d0:04: 5e:04:bb:a4:f1:40:c5:11:9e:8b:ba:ed:a1:e2:c5:9d:56:d9: b9:e8:68:95:81:7e:f3:de:19:60:c8:87:c0:39:4e:2c:40:2f: b5:eb:4e:ac:a4:79:e9:e8:23:45:99:3b:5f:bd:1e:82:39:a9: b8:95:48:be:0d:62:25:fb:ea:b7:7c:b2:e7:02:e8:c5:ac:d3: 04:1d:8a:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9Pe3W/3PkhYnTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MmRlMDUwZTMtMzIzZS00ODIxLTkwM2MtZWFjYjYyODA0NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXxCIDeO1/Gl9HxhT3xzvnL1DLTM/nft2M5x iN9eIOh2L8KghFqkO/+Gpp5fw9POXzuVAMlx+vaCeTNpHBXaWpctWm2tCSyw1Uar kxyonGHFdPkfwgW45dIpWHwkQboz7gW+tzHLekT0W+IfWyUeSjeUbdeedxOxVjKf FlcBJ2ol2yqgFN9NpnzETBJsJSUEgKRUODhkJ9wtFtdcIZc99Kw+skOlGaTTZeai Pr5eSl/+CWfpWe7BkSoy0ALMJuVbBSDszKG9lG2vflcDv+/AQednYo8Z8ADgfrk3 FlqTL6jqKOlMMl8fIbGe06PujkKnVpfBjMYvA264LpZltjgyRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3L3qq9Tlpt5aH27KJ6/CAF6RFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzU1NmIyZTEtODQwZi0z ZTcyLTk2ODctNmI5NDE3OTZiNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeL6OkKiCtYel0tnPARUSrW4Yw1jqzobIwpwtB7QaU/M3729ITM 33vITapZbSYhwtPh1b/uCGDlc2i+AYpgLhdX7xy9iSbBVEhKOVA7OMZRgSy5z2qr 9LnN2CqAp0cv+4D9fX/MKC3TmE1fUwimZwSRRa8QEpY10TE5UaxcYLC1qy6h2TYk 6lB9Ggx2bLpM6NCD5dZTb9VALUM7N6s19Uta8gmYcc6uzenA6yTnPiQLrxPQBF4E u6TxQMURnou67aHixZ1W2bnoaJWBfvPeGWDIh8A5TixAL7XrTqykeenoI0WZO1+9 HoI5qbiVSL4NYiX76rd8sucC6MWs0wQdioQ= -----END CERTIFICATE-----Generated at Tue Jul 21 15:58:40 2026 by rpki-client