$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa File: dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa (raw, json) Hash identifier: 6A466Q6z4PlXFNZNl7BVNa6FFR2W9h/YTptC/zOg5UE= Subject key identifier: DA:29:E4:BA:0B:0A:DD:BF:E0:30:B6:EC:79:D3:26:12:A5:29:58:27 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584E4AEF40ED11772F1C3A37BB20 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 43181 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:40:ed:11:77:2f:1c:3a:37:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=f407c816-5d1c-41fa-bbe5-331ad30582b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:0e:d1:86:59:5d:ae:5a:f7:72:e0:f7:69: a6:06:25:6b:f0:2f:a2:4a:2a:78:f4:5e:61:70:2e: 97:ca:9d:18:fa:2c:41:79:6e:bf:69:3e:c2:a0:ad: 4b:9f:27:b9:e6:d6:41:a2:51:07:26:43:77:3b:8f: 0e:96:42:d2:6c:ae:e5:a8:50:1b:9b:9b:e4:7f:0b: d8:0a:04:45:f6:cc:3a:2f:d6:e1:df:10:e6:4a:86: ff:3b:5a:5b:0c:33:fb:29:a6:87:c7:67:dc:95:35: e0:67:92:54:77:ce:80:21:f0:41:f6:bb:4f:d0:cf: ed:b7:fb:cc:94:2e:4a:89:bf:7e:f4:fb:23:67:eb: a1:a6:8e:bc:37:a6:4f:e6:43:d4:82:6d:1f:5f:98: 31:15:89:e2:20:8f:ca:31:6e:91:f8:a6:75:07:a3: 89:5b:5b:86:80:65:f1:7e:95:5a:be:f0:72:7c:29: 2d:06:9d:3e:40:ba:3e:70:ab:24:f4:fc:e3:fe:84: cd:4f:4f:1e:b7:f8:97:b8:3c:a6:72:20:c9:c6:24: 0d:d7:a1:36:b1:a4:c6:71:60:79:3b:86:87:6e:a8: 2a:d2:aa:e2:ce:97:3d:f5:96:25:ce:14:57:86:5c: fc:bc:2b:66:2e:33:4b:d9:f9:4f:39:a2:e8:32:9e: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:29:E4:BA:0B:0A:DD:BF:E0:30:B6:EC:79:D3:26:12:A5:29:58:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/dc1611d4-5fe1-34ca-af7c-6247ffebb706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:af:db:20:1c:96:50:d1:35:b4:57:fa:33:31:f5:96:79:ed: 47:4c:f6:4a:ba:3e:56:93:15:32:17:1e:c4:38:00:38:95:0e: 18:e3:b7:1a:6a:1b:28:04:f9:8c:b1:dd:e3:4d:9b:ec:cb:4d: 93:d9:47:52:49:df:77:bc:24:14:cd:74:b4:a7:89:65:0c:31: 75:cc:0c:40:b2:b1:a1:61:af:7b:54:16:f6:f8:21:6f:b8:d7: 3d:30:51:af:17:73:7d:30:99:65:e6:af:7e:af:b4:eb:c6:ee: d7:6a:38:58:68:85:b4:2a:97:bf:87:bc:0a:08:86:14:a3:d6: c2:e2:9f:8b:fb:d1:4c:e0:b3:5f:f0:aa:1b:59:ae:aa:60:7f: 18:01:eb:3d:db:63:9b:55:eb:06:ab:56:2c:e0:08:d6:62:2e: 7e:46:1e:68:bc:38:be:50:61:d9:c9:b4:15:cc:a9:f0:90:63: 1f:89:41:37:cd:5a:7e:21:0e:85:e8:df:d4:86:55:34:92:16: 04:84:a3:c9:2a:91:c2:91:aa:d1:31:7e:47:16:c1:99:73:c7: f4:6e:4f:4d:21:3c:32:a0:d9:5a:30:16:50:f0:5e:0f:8d:7e: 30:1c:bb:8f:63:81:60:e9:ab:8d:36:6c:aa:0d:a7:8f:5e:3f: 45:21:00:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5K70DtEXcvHDo3uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZjQwN2M4MTYtNWQxYy00MWZhLWJiZTUtMzMxYWQzMDU4MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHgO0YZZXa5a93Lg92mmBiVr8C+iSip49F5h cC6Xyp0Y+ixBeW6/aT7CoK1Lnye55tZBolEHJkN3O48OlkLSbK7lqFAbm5vkfwvY CgRF9sw6L9bh3xDmSob/O1pbDDP7KaaHx2fclTXgZ5JUd86AIfBB9rtP0M/tt/vM lC5Kib9+9PsjZ+uhpo68N6ZP5kPUgm0fX5gxFYniII/KMW6R+KZ1B6OJW1uGgGXx fpVavvByfCktBp0+QLo+cKsk9Pzj/oTNT08et/iXuDymciDJxiQN16E2saTGcWB5 O4aHbqgq0qrizpc99ZYlzhRXhlz8vCtmLjNL2flPOaLoMp7jSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNop5LoLCt2/4DC27HnTJhKlKVgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvZGMxNjExZDQtNWZlMS0z NGNhLWFmN2MtNjI0N2ZmZWJiNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBxr9sgHJZQ0TW0V/ozMfWWee1HTPZKuj5WkxUyFx7EOAA4lQ4Y47ca ahsoBPmMsd3jTZvsy02T2UdSSd93vCQUzXS0p4llDDF1zAxAsrGhYa97VBb2+CFv uNc9MFGvF3N9MJll5q9+r7Trxu7XajhYaIW0Kpe/h7wKCIYUo9bC4p+L+9FM4LNf 8KobWa6qYH8YAes922ObVesGq1Ys4AjWYi5+Rh5ovDi+UGHZybQVzKnwkGMfiUE3 zVp+IQ6F6N/UhlU0khYEhKPJKpHCkarRMX5HFsGZc8f0bk9NITwyoNlaMBZQ8F4P jX4wHLuPY4Fg6auNNmyqDaePXj9FIQDx -----END CERTIFICATE-----Generated at Tue Jul 21 15:53:09 2026 by rpki-client