$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: tVVm2Z6QX6FipCkuwjqZyKCdPaANKAd5yml8KpDpZiU= Subject key identifier: 7D:DF:6E:2C:A8:A6:64:E8:3E:82:45:37:22:27:9C:C5:E3:27:92:ED Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F4328584E5A4A007EB924C3B7438F0F80 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:00:7e:b9:24:c3:b7:43:8f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=dd24ba6e-094e-43d8-8178-0005114c4ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:4b:af:6b:b4:d5:f3:e9:ad:f2:b8:2e:07: f2:ff:92:be:7f:05:dc:7f:11:c3:6c:eb:36:1b:50: 56:41:4f:45:ef:59:7b:a8:11:f8:4c:4c:c8:aa:1e: 22:65:8a:a8:f4:3b:c1:fd:d2:b4:97:a1:9a:bb:aa: 50:8c:2e:e0:bf:54:47:f6:91:58:17:c2:09:d9:87: 1b:de:ee:13:68:76:cf:23:60:72:99:67:49:b3:9c: a4:c8:bc:f2:4f:24:7f:06:47:9b:40:30:f0:a9:84: 7d:83:12:69:26:c3:69:22:73:08:b0:c2:49:e3:14: d7:55:47:c1:fb:74:25:6d:fc:ab:09:f9:d4:f0:ec: 26:f1:7a:a2:30:d3:72:ee:60:6b:eb:60:8f:eb:6f: e7:83:9d:ac:28:82:62:6d:6b:cc:a8:d6:86:a4:45: 8c:72:49:4c:94:af:b6:8d:66:2d:82:e6:be:bd:c3: 82:a4:d0:27:e8:8a:c7:54:14:e3:37:13:29:a4:3d: 29:0b:a7:9c:52:de:22:66:b9:b9:3d:6b:62:e6:cf: 6c:ec:d5:48:f7:f1:cd:4c:38:f6:e7:b7:25:04:ce: 70:69:06:8f:38:ca:8f:ac:91:e5:2d:6d:85:7f:01: da:c8:24:9e:fb:ff:59:d3:55:be:76:0d:e7:16:f7: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:6E:2C:A8:A6:64:E8:3E:82:45:37:22:27:9C:C5:E3:27:92:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bc:fe:2c:9e:e0:09:c7:0d:3a:bb:40:52:ac:4b:bb:c7:fc: 19:27:c2:fa:3b:e8:17:41:44:b3:15:08:9b:c6:ef:21:f0:22: 70:0a:f3:dc:2b:e0:18:9a:0c:bb:77:8b:6a:11:05:0a:37:dd: 28:87:81:47:4e:33:9f:e1:20:d5:b1:f8:22:37:78:c2:c1:d5: e2:cb:13:cf:f2:4a:54:74:7b:36:86:0f:c2:c9:fd:f0:26:de: 13:54:e4:d4:b3:6c:6f:66:b4:51:fa:05:a2:7b:2e:2a:74:52: 30:c6:32:1a:aa:49:8d:fd:c8:ef:85:43:67:e2:bc:c9:eb:58: b6:9f:5b:5d:58:d9:06:6b:b4:b0:8a:85:57:11:7a:6b:75:76: d5:b2:63:2b:1f:ce:ae:77:ff:93:83:9b:de:9b:6b:78:ab:e7: 4d:90:2f:66:ae:8e:ee:65:14:d4:7c:a6:bc:b8:88:e0:fb:8d: 65:32:9c:ac:41:c8:cd:d3:3e:30:f6:eb:c6:30:07:18:6a:10: 40:2e:5b:f4:88:aa:70:4a:2f:8c:19:ba:66:45:b6:05:d4:85: d1:18:09:6f:ce:0c:9e:3a:82:5d:e4:f5:55:e9:83:a5:51:39: c3:2a:6f:2c:57:eb:5c:3f:c5:50:fe:6b:46:f0:c5:41:d3:37: 4b:d9:d9:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5aSgB+uSTDt0OPD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZGQyNGJhNmUtMDk0ZS00M2Q4LTgxNzgtMDAwNTExNGM0YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLtLr2u01fPprfK4Lgfy/5K+fwXcfxHDbOs2 G1BWQU9F71l7qBH4TEzIqh4iZYqo9DvB/dK0l6Gau6pQjC7gv1RH9pFYF8IJ2Ycb 3u4TaHbPI2BymWdJs5ykyLzyTyR/BkebQDDwqYR9gxJpJsNpInMIsMJJ4xTXVUfB +3QlbfyrCfnU8Owm8XqiMNNy7mBr62CP62/ng52sKIJibWvMqNaGpEWMcklMlK+2 jWYtgua+vcOCpNAn6IrHVBTjNxMppD0pC6ecUt4iZrm5PWti5s9s7NVI9/HNTDj2 57clBM5waQaPOMqPrJHlLW2FfwHayCSe+/9Z01W+dg3nFvcPZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH3fbiyopmToPoJFNyInnMXjJ5LtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAIvP4snuAJxw06u0BSrEu7x/wZJ8L6O+gXQUSzFQibxu8h8CJwCvPc K+AYmgy7d4tqEQUKN90oh4FHTjOf4SDVsfgiN3jCwdXiyxPP8kpUdHs2hg/Cyf3w Jt4TVOTUs2xvZrRR+gWiey4qdFIwxjIaqkmN/cjvhUNn4rzJ61i2n1tdWNkGa7Sw ioVXEXprdXbVsmMrH86ud/+Tg5vem2t4q+dNkC9mro7uZRTUfKa8uIjg+41lMpys QcjN0z4w9uvGMAcYahBALlv0iKpwSi+MGbpmRbYF1IXRGAlvzgyeOoJd5PVV6YOl UTnDKm8sV+tcP8VQ/mtG8MVB0zdL2dll -----END CERTIFICATE-----Generated at Tue Jul 7 19:50:19 2026 by rpki-client