$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa File: 611c5848-7847-37af-bcd8-ea93e742fac5.roa (raw, json) Hash identifier: BjYo0z1OHngEzRTeyngYNJjigzZBQBvkc1cHPKr0M14= Subject key identifier: E9:8C:05:36:F7:54:F7:F8:0A:90:2F:3F:EA:8C:AE:36:3B:3C:D6:73 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584E4AEF40E1AF1D1FAE197C8E00 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 136473 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:40:e1:af:1d:1f:ae:19:7c:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=b9023644-f42f-4ff2-aed8-967e83976f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:bb:8b:f9:c4:35:20:84:db:42:c3:b7:ff: 0d:37:ee:fc:d1:ac:1c:d6:a5:11:34:5e:f0:9c:46: b0:e5:01:45:cc:01:3b:5d:bc:54:e6:81:fb:23:67: 4a:e3:01:a3:c8:63:01:ad:a3:67:dc:42:62:1c:dd: d9:f0:c1:9f:b5:ed:2e:ea:93:19:c7:e7:f0:64:a6: e2:5b:ef:f4:b2:30:c2:fb:c8:41:72:b3:3a:bb:de: e9:52:3c:06:fc:7f:a4:14:1a:7c:b0:07:cc:5a:e9: cb:a3:ac:a2:0f:58:80:fb:0f:87:59:b4:29:f3:83: 84:0c:84:42:8d:9d:76:91:ab:a3:d6:da:a5:53:39: 1c:8c:80:f5:6c:90:cf:16:6d:b7:d6:d3:c3:3b:c7: f2:49:c3:97:d1:9f:0a:21:0f:c4:16:98:1c:9b:0c: 8e:f8:ac:57:66:9f:59:d8:82:ba:de:43:d2:01:d8: f4:c9:c9:f8:f0:ab:e7:9a:04:04:47:64:36:80:eb: 6d:98:98:6a:a4:d8:31:61:fd:40:10:ae:74:cf:48: ca:23:d5:a2:40:ec:e4:66:34:fb:0e:5d:52:ca:60: 03:e3:7f:6f:52:5f:ea:39:4f:c8:8b:0e:ba:5b:ef: 33:60:f4:cb:02:82:d1:95:fe:21:78:ca:9a:80:cf: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8C:05:36:F7:54:F7:F8:0A:90:2F:3F:EA:8C:AE:36:3B:3C:D6:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b3:79:b6:f6:74:6a:a6:d3:35:aa:13:65:97:e5:00:dd:2c: 4d:2c:c8:22:94:d4:46:f9:31:9a:9a:f9:78:12:36:0b:1e:19: 4a:93:25:fc:0d:ff:7d:24:2f:95:78:3d:ca:3b:c1:7b:bc:e8: b5:d2:0d:04:4e:1e:7b:07:d4:4c:a8:ac:b3:f5:c7:a7:11:59: 00:af:fa:eb:48:3f:84:3d:f9:86:48:8d:3d:d4:f4:28:02:b3: d5:4b:51:3a:60:3c:11:8a:be:54:9a:f1:de:a1:d6:6e:e5:fa: c5:47:c3:29:02:d9:6d:c0:43:ba:03:16:78:0b:f5:f0:41:66: 33:2a:15:3f:9f:e1:e0:22:9b:c0:76:c1:01:f5:31:77:d1:71: 7c:47:3f:9a:fb:fe:e5:48:fa:81:7c:c7:16:b8:89:f3:0b:c1: 34:75:8a:26:ac:03:6a:46:e1:49:c3:3c:66:ea:d4:c0:f6:be: ee:f7:0b:2c:ca:53:6c:55:f6:4a:9f:1e:8f:eb:73:34:9d:f3: 80:ae:3a:c7:56:76:be:e2:04:64:af:7d:06:79:26:89:41:b8: a0:43:53:c6:56:3c:68:ed:6b:4b:89:7e:85:e8:04:95:3c:04: 83:cf:ea:01:62:f0:7b:d4:41:0b:a2:94:9d:b7:4e:95:d1:c9: 60:71:f3:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5K70Dhrx0frhl8jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk YjkwMjM2NDQtZjQyZi00ZmYyLWFlZDgtOTY3ZTgzOTc2ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWW7i/nENSCE20LDt/8NN+780awc1qURNF7w nEaw5QFFzAE7XbxU5oH7I2dK4wGjyGMBraNn3EJiHN3Z8MGfte0u6pMZx+fwZKbi W+/0sjDC+8hBcrM6u97pUjwG/H+kFBp8sAfMWunLo6yiD1iA+w+HWbQp84OEDIRC jZ12kauj1tqlUzkcjID1bJDPFm231tPDO8fyScOX0Z8KIQ/EFpgcmwyO+KxXZp9Z 2IK63kPSAdj0ycn48KvnmgQER2Q2gOttmJhqpNgxYf1AEK50z0jKI9WiQOzkZjT7 Dl1SymAD439vUl/qOU/Iiw66W+8zYPTLAoLRlf4heMqagM/7+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOmMBTb3VPf4CpAvP+qMrjY7PNZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjExYzU4NDgtNzg0Ny0z N2FmLWJjZDgtZWE5M2U3NDJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNs3m29nRqptM1qhNll+UA3SxNLMgilNRG+TGamvl4EjYLHhlKkyX8 Df99JC+VeD3KO8F7vOi10g0ETh57B9RMqKyz9cenEVkAr/rrSD+EPfmGSI091PQo ArPVS1E6YDwRir5UmvHeodZu5frFR8MpAtltwEO6AxZ4C/XwQWYzKhU/n+HgIpvA dsEB9TF30XF8Rz+a+/7lSPqBfMcWuInzC8E0dYomrANqRuFJwzxm6tTA9r7u9wss ylNsVfZKnx6P63M0nfOArjrHVna+4gRkr30GeSaJQbigQ1PGVjxo7WtLiX6F6ASV PASDz+oBYvB71EELopSdt06V0clgcfMy -----END CERTIFICATE-----Generated at Tue Jul 21 15:53:28 2026 by rpki-client