$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa File: f907b106-313a-3349-af6e-4565427f5b0c.roa (raw, json) Hash identifier: NHKuFT+WrXe/WbNF+feI6gr0kSE6eKytbtQDwpEkA2M= Subject key identifier: F6:BA:F8:37:14:09:4F:B4:73:EC:47:8E:93:AA:32:A5:85:95:D5:72 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584E7E94F167B31873C237B2A7A0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 21949 IP address blocks: 2607:f0c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f1:67:b3:18:73:c2:37:b2:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=70630393-8ddd-4ea6-88a4-9eda520ab4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:59:0f:49:75:ba:c7:ad:4d:3f:f1:8c:c8: f5:83:0b:0c:9c:ee:ce:9b:f5:84:2a:2a:e1:dc:43: bb:2c:a4:5c:ba:b6:ae:b7:08:c0:b6:f6:7f:35:1b: de:7d:a8:60:1b:8f:67:54:0a:35:32:41:f4:f9:10: 31:23:ad:7e:52:eb:85:8f:59:ca:33:8d:e9:88:d8: 77:26:6e:cf:2a:67:31:75:82:9f:7a:b2:2d:21:14: 06:6b:d0:a9:3b:e2:67:4f:af:33:bf:7b:8d:90:a0: 42:84:e5:46:48:28:42:15:d4:da:32:34:b5:46:8c: c8:ff:ec:cc:b3:ac:37:b8:3d:13:ec:c4:a0:c7:5f: 2b:f9:5b:88:32:55:fa:c8:96:b2:a9:de:11:59:5e: eb:c4:75:2f:f8:61:aa:ee:69:3f:89:41:1b:09:0d: d2:f4:56:0d:20:c0:d9:2e:60:53:fb:65:85:95:44: 24:14:6d:eb:89:8a:48:eb:bc:3a:2f:40:aa:1d:6b: 16:d9:0e:40:a2:16:a4:23:e6:51:89:3b:ca:a4:c4: 48:85:25:7b:f5:64:ef:05:6d:54:b4:98:88:0e:bf: 4a:fa:b4:c0:30:05:e9:69:8e:68:a0:8b:e8:40:37: 6d:c8:03:58:ff:74:2e:ea:f8:e7:ae:4d:e6:43:80: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BA:F8:37:14:09:4F:B4:73:EC:47:8E:93:AA:32:A5:85:95:D5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f907b106-313a-3349-af6e-4565427f5b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2607:f0c8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:13:aa:3a:2f:d1:0e:17:f8:10:1a:b4:72:e1:1b:b5:65:88: f3:4f:c3:ce:31:7c:9e:be:84:46:7d:8d:88:94:2c:0e:e4:0f: af:7d:07:a8:8c:9c:3c:00:bd:8e:2f:db:d8:f2:1c:dd:4b:18: ad:1f:55:b7:d2:0f:4c:94:c9:4a:47:20:e5:52:03:6f:59:81: a1:69:34:40:73:6f:bc:58:be:90:11:04:79:3b:f4:54:2f:0b: d0:43:79:79:38:6f:d9:41:13:e2:e7:a1:ae:ea:69:d5:ff:9a: 19:d6:f2:39:c8:60:b1:6b:24:8d:14:78:ec:9b:06:a1:1d:13: f0:d4:88:35:03:a8:0f:fe:61:67:33:08:aa:c2:a4:03:26:70: 7a:f6:0a:3b:06:12:15:9c:e8:00:31:05:05:27:58:4d:5b:d1: 78:58:78:2e:ca:35:b8:85:1b:c7:cd:af:4b:d4:1c:f3:b2:df: 23:4a:9f:b6:1b:cd:cf:95:a4:55:24:2f:41:08:c2:53:92:ef: 2f:7a:bf:43:7b:33:7e:a7:79:43:87:ec:69:42:37:07:a5:c1: 69:7c:72:ff:8d:3e:c3:49:47:95:2c:a4:7c:27:68:c5:a4:ff: 79:88:dd:bc:7a:b1:c3:b3:71:83:36:0a:af:e4:99:ee:22:b8: d0:8c:0d:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5+lPFnsxhzwjeyp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NzA2MzAzOTMtOGRkZC00ZWE2LTg4YTQtOWVkYTUyMGFiNGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOxZD0l1usetTT/xjMj1gwsMnO7Om/WEKirh 3EO7LKRcurautwjAtvZ/NRvefahgG49nVAo1MkH0+RAxI61+UuuFj1nKM43piNh3 Jm7PKmcxdYKferItIRQGa9CpO+JnT68zv3uNkKBChOVGSChCFdTaMjS1RozI/+zM s6w3uD0T7MSgx18r+VuIMlX6yJayqd4RWV7rxHUv+GGq7mk/iUEbCQ3S9FYNIMDZ LmBT+2WFlUQkFG3riYpI67w6L0CqHWsW2Q5AohakI+ZRiTvKpMRIhSV79WTvBW1U tJiIDr9K+rTAMAXpaY5ooIvoQDdtyANY/3Qu6vjnrk3mQ4D0xQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPa6+DcUCU+0c+xHjpOqMqWFldVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkwN2IxMDYtMzEzYS0z MzQ5LWFmNmUtNDU2NTQyN2Y1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKE6o6L9EOF/gQGrRy4Ru1ZYjzT8POMXyevoRGfY2IlCwO5A+vfQeo jJw8AL2OL9vY8hzdSxitH1W30g9MlMlKRyDlUgNvWYGhaTRAc2+8WL6QEQR5O/RU LwvQQ3l5OG/ZQRPi56Gu6mnV/5oZ1vI5yGCxaySNFHjsmwahHRPw1Ig1A6gP/mFn MwiqwqQDJnB69go7BhIVnOgAMQUFJ1hNW9F4WHguyjW4hRvHza9L1Bzzst8jSp+2 G83PlaRVJC9BCMJTku8ver9DezN+p3lDh+xpQjcHpcFpfHL/jT7DSUeVLKR8J2jF pP95iN28erHDs3GDNgqv5JnuIrjQjA3i -----END CERTIFICATE-----Generated at Tue Jul 21 13:03:29 2026 by rpki-client