$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/3a236cba-2e91-3be9-a863-7574bc8f8059.roa File: 3a236cba-2e91-3be9-a863-7574bc8f8059.roa (raw, json) Hash identifier: d6UDcOyEtOU0vOz1TtwhZ0aQFiXHpx5PHKLMxOYstDg= Subject key identifier: A7:FE:7D:85:32:3E:6B:0C:45:4E:88:FA:ED:01:69:C4:1E:29:BD:8C Certificate issuer: /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Certificate serial: 010D0C9F4328584E3499AFBD0A0A6E7C5A5E4B40 Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/3a236cba-2e91-3be9-a863-7574bc8f8059.roa Signing time: Wed 17 Jun 2026 21:00:11 +0000 ROA not before: Wed 17 Jun 2026 21:00:11 +0000 ROA not after: Tue 15 Sep 2026 21:00:11 +0000 asID: 140666 IP address blocks: 2602:fa80:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:99:af:bd:0a:0a:6e:7c:5a:5e:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd Validity Not Before: Jun 17 21:00:11 2026 GMT Not After : Sep 15 21:00:11 2026 GMT Subject: CN=b7aa6a07-4b22-4fc9-bd1f-6af767288107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:57:97:8e:39:ca:c4:51:f4:ef:d7:38:c8: 2b:af:30:b2:b9:76:4b:b5:d9:85:23:7d:9a:eb:50: f5:bd:64:f8:15:a8:ed:07:81:0a:7e:f0:c2:9b:a0: 94:3b:11:c0:73:5f:ec:35:f5:f1:ff:20:78:2e:9d: de:17:b0:5e:b9:d1:67:0c:45:85:25:66:7a:fe:5f: 81:82:4d:7b:bd:8e:c4:07:b2:65:0f:6d:e8:80:70: 72:7d:e6:14:1e:5a:dc:43:cf:2e:b6:d0:b0:af:5d: cf:e9:57:b0:2b:fb:12:b7:0d:96:e8:b2:08:ee:d8: 63:ab:d8:49:a3:07:52:17:2d:aa:e2:78:6e:02:8c: 85:1a:96:4d:d9:46:b5:bd:e5:0a:f9:7d:3b:e5:fc: 9a:dc:e1:d0:e6:94:bd:53:aa:24:02:9e:73:82:ee: 2e:d3:47:92:20:30:18:3c:e7:0d:d8:18:79:c3:b8: 93:f0:24:a5:f0:90:dc:a1:4c:0c:38:d1:d5:4c:b9: 6e:5c:8e:1c:eb:df:88:15:dd:be:46:23:c0:15:8d: cb:3e:d2:22:36:e4:a9:66:1f:c2:08:db:85:45:9b: 76:a1:6a:ef:02:c4:2f:c9:86:a6:4f:57:1a:d1:44: 9c:c4:49:2e:52:9e:f6:28:25:b8:34:bb:a7:4a:d8: 32:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:7D:85:32:3E:6B:0C:45:4E:88:FA:ED:01:69:C4:1E:29:BD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/3a236cba-2e91-3be9-a863-7574bc8f8059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl X509v3 Authority Key Identifier: keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fa80:43::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:68:d3:9f:b3:29:60:75:13:5f:30:a8:76:1a:49:f6:bf:ca: d5:6e:a0:b2:cd:e1:68:c3:c8:05:0f:a4:d9:6f:2d:78:b5:1b: a3:ef:1f:b0:de:92:c0:fa:79:12:1d:60:64:1a:4f:0c:a6:15: f0:2f:7c:35:48:ef:02:e7:04:1c:3f:26:af:f1:db:92:22:45: 91:0f:e2:3e:b8:46:39:df:3c:38:7f:6f:dd:c4:28:6d:96:47: db:0f:4d:fe:f5:35:c8:c7:7a:9b:1f:b3:ef:14:0c:72:95:3e: 86:e5:cb:0c:d9:60:40:85:34:f9:f9:97:f3:e5:52:6e:f2:ea: 3c:0e:44:59:ff:b5:3c:89:48:47:07:39:db:cc:b4:f3:a0:5b: 19:1e:76:8e:a4:e5:68:04:aa:bc:08:67:59:4a:2f:4b:6c:4e: b7:a3:53:4c:c3:f4:6b:c4:d9:70:cb:f0:cb:9c:6f:eb:0a:24: c0:dc:0f:11:82:43:99:95:77:4f:a0:96:82:65:6c:ca:66:dd: 18:ca:6d:a8:54:eb:c6:a8:35:b8:e1:ac:bb:d9:a2:b2:db:02: 95:bb:f3:a4:44:0b:21:c2:63:14:5c:a2:cd:f5:6e:37:86:08: 60:c7:80:1d:18:54:9f:64:e6:31:00:f1:7e:04:3a:27:34:8c: 1a:a6:a9:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE40ma+9CgpufFpeS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmVmZDctZjJlNS00MTZjLTkzMmEtMGQ1MmQ0MzBj M2NkMB4XDTI2MDYxNzIxMDAxMVoXDTI2MDkxNTIxMDAxMVowLzEtMCsGA1UEAxMk YjdhYTZhMDctNGIyMi00ZmM5LWJkMWYtNmFmNzY3Mjg4MTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVZXl445ysRR9O/XOMgrrzCyuXZLtdmFI32a 61D1vWT4FajtB4EKfvDCm6CUOxHAc1/sNfXx/yB4Lp3eF7BeudFnDEWFJWZ6/l+B gk17vY7EB7JlD23ogHByfeYUHlrcQ88uttCwr13P6VewK/sStw2W6LII7thjq9hJ owdSFy2q4nhuAoyFGpZN2Ua1veUK+X075fya3OHQ5pS9U6okAp5zgu4u00eSIDAY POcN2Bh5w7iT8CSl8JDcoUwMONHVTLluXI4c69+IFd2+RiPAFY3LPtIiNuSpZh/C CNuFRZt2oWrvAsQvyYamT1ca0UScxEkuUp72KCW4NLunStgy3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKf+fYUyPmsMRU6I+u0BacQeKb2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMzVm ZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUyZDQzMGMzY2QvM2EyMzZjYmEtMmU5MS0z YmU5LWE4NjMtNzU3NGJjOGY4MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjM1ZmVmZDctZjJlNS00MTZjLTkz MmEtMGQ1MmQ0MzBjM2NkL2IzNWZlZmQ3LWYyZTUtNDE2Yy05MzJhLTBkNTJkNDMw YzNjZC5jcmwwHwYDVR0jBBgwFoAUZ091vhrEcuxX36Z5sp6D+bELf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMzVmZWZkNy1mMmU1LTQxNmMtOTMyYS0wZDUy ZDQzMGMzY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6gABD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApo05+zKWB1E18wqHYaSfa/ytVuoLLN4WjDyAUPpNlvLXi1G6Pv H7DeksD6eRIdYGQaTwymFfAvfDVI7wLnBBw/Jq/x25IiRZEP4j64RjnfPDh/b93E KG2WR9sPTf71NcjHepsfs+8UDHKVPoblywzZYECFNPn5l/PlUm7y6jwORFn/tTyJ SEcHOdvMtPOgWxkedo6k5WgEqrwIZ1lKL0tsTrejU0zD9GvE2XDL8Mucb+sKJMDc DxGCQ5mVd0+gloJlbMpm3RjKbahU68aoNbjhrLvZorLbApW786RECyHCYxRcos31 bjeGCGDHgB0YVJ9k5jEA8X4EOic0jBqmqdg= -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:09 2026 by rpki-client