$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/125e0a5b-05a7-3e23-a822-e4ccd42e945e.roa File: 125e0a5b-05a7-3e23-a822-e4ccd42e945e.roa (raw, json) Hash identifier: zE+/AbYsUVWt7qSvIw6a5FqTnmEWMBMxuIC6vEn4UUY= Subject key identifier: CF:85:DD:C1:D7:66:64:25:7D:25:13:60:7B:6F:E6:DB:FB:24:65:18 Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525 Certificate serial: 010D0C9F4328584E7634D1075EFABCB1D45C90F0 Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/125e0a5b-05a7-3e23-a822-e4ccd42e945e.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 2602:fdeb:fea::/48 maxlen: 48 2602:fdeb:feb::/48 maxlen: 48 2602:fdeb:fec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:d1:07:5e:fa:bc:b1:d4:5c:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=d7d23e21-ee34-450c-b6ba-4498665d3b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5e:ba:cf:ac:71:57:78:69:4f:61:09:84:88: 5b:1d:93:75:3d:4c:f6:03:28:0c:8e:48:35:fd:0d: 4e:b2:00:20:bb:60:f6:ff:73:cc:86:6d:25:12:46: 4e:66:a6:48:b7:43:59:ab:23:50:39:54:23:f7:ee: 91:87:64:ed:81:51:31:eb:d9:43:81:ad:44:b5:7a: b8:b8:b0:31:5a:d3:2a:47:f8:7b:bd:9d:0b:34:81: dd:0c:32:3e:c8:ab:ea:1c:b6:1c:b2:35:d4:bd:b1: 77:5e:16:db:b1:9d:d3:68:9a:37:52:f7:87:6c:84: 96:79:e4:df:57:96:1b:96:dc:9f:03:03:38:93:7c: 01:b4:11:6e:cf:88:8c:ab:b9:7c:dc:c5:29:e9:ec: d6:c0:64:7f:63:06:86:4b:04:11:76:10:58:8b:ba: 44:f9:c0:c0:9a:05:c8:2d:64:61:5f:ff:d4:ec:71: 04:00:bf:a6:31:7a:cd:25:df:fd:aa:88:ad:d5:9f: c5:5b:7b:c1:6e:f7:83:5b:26:d8:3f:2f:3a:c3:24: e5:7f:a7:20:7c:3c:96:60:5b:56:26:d5:43:5a:7d: a8:20:65:51:54:e2:d5:ca:ad:bf:7e:41:b8:14:c6: 3e:09:3a:db:0a:6c:da:ee:e1:25:de:7e:9c:54:32: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:85:DD:C1:D7:66:64:25:7D:25:13:60:7B:6F:E6:DB:FB:24:65:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/125e0a5b-05a7-3e23-a822-e4ccd42e945e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl X509v3 Authority Key Identifier: keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer sbgp-ipAddrBlock: critical IPv6: 2602:fdeb:fea::-2602:fdeb:fec:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:28:b1:2c:82:ae:54:d2:11:7d:0d:e0:a8:0d:a1:dc:8b:82: 07:5d:3e:67:c0:49:b8:ca:0d:c3:73:a5:2d:32:5c:ca:71:b3: b2:a3:1a:58:d6:c6:dd:eb:c1:b3:8c:69:4a:b6:da:c2:dd:36: a6:79:05:41:6c:b4:00:e7:fc:33:89:12:7c:09:67:e0:f9:c2: 11:be:e3:12:67:c3:2b:58:79:fd:a1:eb:e4:7e:b7:c6:fe:f2: 0a:a3:50:99:da:42:2f:f1:50:2e:25:43:22:dd:25:5b:a7:6c: 82:a3:b1:04:7b:05:ea:c3:8f:54:b0:c3:2d:3f:ee:16:f6:25: f7:0c:8e:51:0b:ec:2d:49:38:91:e0:c9:0a:45:17:96:c8:57: b9:cc:87:f8:a9:75:c5:14:1c:00:b6:6f:77:e3:e3:00:dc:ca: 44:65:c9:48:74:cc:33:2a:4c:2a:bb:ab:77:a1:bf:66:3f:d7: 9e:15:f7:4c:f6:f1:35:c4:dd:52:26:a0:e4:58:fa:dd:9e:5a: da:08:d8:41:b5:c5:f8:f1:15:f1:af:e6:db:d7:dd:cf:1d:72: 36:e2:c5:ea:ea:c9:df:27:85:08:3e:e6:c6:d2:2e:12:39:22: fc:f8:92:69:be:27:e9:c2:d0:d8:00:f7:b3:53:77:d1:81:7a: 1b:d1:fa:9d -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE52NNEHXvq8sdRckPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQ1OTIzOTYtYWMzZC00YTQ4LTk3ZjEtY2FlZDY1NDM2 NTI1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk ZDdkMjNlMjEtZWUzNC00NTBjLWI2YmEtNDQ5ODY2NWQzYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV66z6xxV3hpT2EJhIhbHZN1PUz2AygMjkg1 /Q1OsgAgu2D2/3PMhm0lEkZOZqZIt0NZqyNQOVQj9+6Rh2TtgVEx69lDga1EtXq4 uLAxWtMqR/h7vZ0LNIHdDDI+yKvqHLYcsjXUvbF3XhbbsZ3TaJo3UveHbISWeeTf V5YbltyfAwM4k3wBtBFuz4iMq7l83MUp6ezWwGR/YwaGSwQRdhBYi7pE+cDAmgXI LWRhX//U7HEEAL+mMXrNJd/9qoit1Z/FW3vBbveDWybYPy86wyTlf6cgfDyWYFtW JtVDWn2oIGVRVOLVyq2/fkG4FMY+CTrbCmza7uEl3n6cVDJfMwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFM+F3cHXZmQlfSUTYHtv5tv7JGUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5 MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVkNjU0MzY1MjUvMTI1ZTBhNWItMDVhNy0z ZTIzLWE4MjItZTRjY2Q0MmU5NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQ1OTIzOTYtYWMzZC00YTQ4LTk3 ZjEtY2FlZDY1NDM2NTI1LzM0NTkyMzk2LWFjM2QtNGE0OC05N2YxLWNhZWQ2NTQz NjUyNS5jcmwwHwYDVR0jBBgwFoAU4Pkf4Q9Z7oe8umGKzul0yYPhQUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDU5MjM5Ni1hYzNkLTRhNDgtOTdmMS1jYWVk NjU0MzY1MjUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwEmAv3r D+oDBwAmAv3rD+wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAEyixLIKuVNIRfQ3gqA2h3IuCB10+Z8BJuMoN w3OlLTJcynGzsqMaWNbG3evBs4xpSrbawt02pnkFQWy0AOf8M4kSfAln4PnCEb7j EmfDK1h5/aHr5H63xv7yCqNQmdpCL/FQLiVDIt0lW6dsgqOxBHsF6sOPVLDDLT/u FvYl9wyOUQvsLUk4keDJCkUXlshXucyH+Kl1xRQcALZvd+PjANzKRGXJSHTMMypM Krurd6G/Zj/XnhX3TPbxNcTdUiag5Fj63Z5a2gjYQbXF+PEV8a/m29fdzx1yNuLF 6urJ3yeFCD7mxtIuEjki/PiSab4n6cLQ2AD3s1N30YF6G9H6nQ== -----END CERTIFICATE-----Generated at Tue Jul 21 19:37:08 2026 by rpki-client