$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa File: 8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa (raw, json) Hash identifier: 3NsYpMUIe0HTzPiyJmFZ3qdvSBrDeYnC5k59RZPq4oE= Subject key identifier: D5:37:B2:D7:61:31:F9:0E:3E:E1:1B:61:C9:D9:8C:6A:AB:30:0F:02 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584E86F5083390A3034FE9C97426 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 198949 IP address blocks: 2620:147:128::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:08:33:90:a3:03:4f:e9:c9:74:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=ae72d5fc-da45-4dce-884d-166f50269285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:c2:ac:35:d7:bb:02:0f:3b:38:97:d1:60: 61:23:47:31:be:24:45:ac:49:36:9f:81:33:fc:45: 5a:c1:09:27:7a:20:83:ca:05:ba:99:46:8c:c9:c7: db:92:9c:85:c4:d8:04:34:13:cd:9e:71:7a:4e:1f: 77:18:1b:fe:f5:07:0e:ca:4b:63:60:0b:57:56:4e: 1a:cb:88:30:74:86:1b:9a:dc:85:9c:63:f0:86:f9: db:5b:10:b6:7d:c1:9f:9b:45:8a:0c:b3:c2:9d:1e: ed:a9:9d:dd:24:fb:b4:96:c9:29:0e:70:f2:cc:41: e8:a4:b2:b8:12:05:c2:53:0d:0f:0f:46:11:0e:85: 2e:f6:61:b5:9c:17:23:c1:d1:ea:5a:f5:26:ca:8b: 8c:a1:b6:68:00:25:f9:d5:aa:63:fd:e4:35:b9:9e: 53:d0:e6:ba:9e:e6:d7:36:52:b5:57:d4:b1:93:b7: 64:18:73:ba:db:90:f4:aa:25:f3:3f:ef:9d:64:6d: 6d:51:82:e6:e8:48:fc:34:54:6a:37:18:a0:11:43: c2:71:de:8c:bb:31:6f:f4:ec:ee:94:a4:13:54:e1: 19:5b:ab:ec:f7:40:63:c7:3f:d4:26:58:7e:4b:7f: 25:f3:e4:c1:01:70:b3:f6:da:fa:f8:4c:2c:20:30: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:B2:D7:61:31:F9:0E:3E:E1:1B:61:C9:D9:8C:6A:AB:30:0F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8ace2fbd-6431-3552-83f5-fb8efc3db04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:128::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8d:e6:96:bf:b9:98:fe:e9:e9:2d:bb:2a:1e:8b:1b:93:1f: 14:f3:ca:62:b4:a9:73:35:88:d6:86:f6:5f:0a:ec:2e:f9:5f: 4d:de:2a:3b:94:2a:32:f8:68:e8:28:e9:88:3a:96:40:30:87: 89:d2:5e:90:4d:5f:68:19:01:81:e5:ca:6d:bd:e8:ef:43:94: e2:bc:e7:fe:e1:6b:7d:2f:0e:b4:6b:60:49:3f:12:2b:87:1d: a2:c5:62:d5:cd:11:ff:cd:c3:82:1b:1b:3b:80:11:9a:41:dd: 35:6a:49:9b:4d:85:56:63:8b:c3:36:83:61:85:fc:53:b8:54: 5b:7c:fa:46:88:26:a4:0b:3b:63:3e:f7:4e:78:fc:ac:de:2d: 8a:70:50:4d:50:42:05:5a:06:5d:03:ff:c2:eb:19:2e:c4:bc: 65:7a:94:4c:4f:b8:69:d3:ee:ef:53:a8:58:6e:c0:ed:5b:40: 63:51:6d:83:38:fd:cf:ff:25:6f:fb:f7:f6:1b:ab:bc:a8:3a: ce:11:1a:31:d3:0f:33:70:26:73:cd:fc:af:17:c3:94:75:68: 97:7b:7a:29:cc:2d:e6:70:9f:2d:23:3f:3b:e8:5b:1d:b2:09: 8e:e9:8a:cf:11:ef:1e:5b:e6:a1:90:bd:b7:0a:f5:3a:7f:33: 73:09:73:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9QgzkKMDT+nJdCYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk YWU3MmQ1ZmMtZGE0NS00ZGNlLTg4NGQtMTY2ZjUwMjY5Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j/CrDXXuwIPOziX0WBhI0cxviRFrEk2n4Ez /EVawQkneiCDygW6mUaMycfbkpyFxNgENBPNnnF6Th93GBv+9QcOyktjYAtXVk4a y4gwdIYbmtyFnGPwhvnbWxC2fcGfm0WKDLPCnR7tqZ3dJPu0lskpDnDyzEHopLK4 EgXCUw0PD0YRDoUu9mG1nBcjwdHqWvUmyouMobZoACX51apj/eQ1uZ5T0Oa6nubX NlK1V9Sxk7dkGHO625D0qiXzP++dZG1tUYLm6Ej8NFRqNxigEUPCcd6MuzFv9Ozu lKQTVOEZW6vs90Bjxz/UJlh+S38l8+TBAXCz9tr6+EwsIDBbRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNU3stdhMfkOPuEbYcnZjGqrMA8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOGFjZTJmYmQtNjQzMS0z NTUyLTgzZjUtZmI4ZWZjM2RiMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABRwEo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABON5pa/uZj+6ektuyoeixuTHxTzymK0qXM1iNaG9l8K7C75X03e KjuUKjL4aOgo6Yg6lkAwh4nSXpBNX2gZAYHlym296O9DlOK85/7ha30vDrRrYEk/ EiuHHaLFYtXNEf/Nw4IbGzuAEZpB3TVqSZtNhVZji8M2g2GF/FO4VFt8+kaIJqQL O2M+9054/KzeLYpwUE1QQgVaBl0D/8LrGS7EvGV6lExPuGnT7u9TqFhuwO1bQGNR bYM4/c//JW/79/Ybq7yoOs4RGjHTDzNwJnPN/K8Xw5R1aJd7einMLeZwny0jPzvo Wx2yCY7pis8R7x5b5qGQvbcK9Tp/M3MJc7k= -----END CERTIFICATE-----Generated at Tue Jul 21 14:01:46 2026 by rpki-client