$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ed4a83-69a8-3afe-b808-2a760718d10b.roa File: 24ed4a83-69a8-3afe-b808-2a760718d10b.roa (raw, json) Hash identifier: lbd7kGim02F/9+hOXlS8kYJcEroOZlqJPic7gCZLpBE= Subject key identifier: CB:37:90:66:8E:F3:92:89:E2:5A:DF:BA:FF:AF:F5:4A:38:A8:B5:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3ACB23765B4FD3BC695480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ed4a83-69a8-3afe-b808-2a760718d10b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 2601:248:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:cb:23:76:5b:4f:d3:bc:69:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=7b8b02f7-6cbb-4fbb-a44a-2fdaf5dfb812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:f7:ea:79:80:d5:4d:70:8e:98:cf:cd:f0: c7:3c:9b:62:ea:b5:f8:8a:27:e9:95:b4:75:38:41: 7e:38:ec:74:23:89:57:86:1d:85:f2:73:60:51:f4: 11:8b:76:6f:cc:48:b7:f9:52:42:f7:ed:8e:f5:c1: b8:02:f8:48:0b:6d:ca:1c:c5:12:db:df:1b:08:2f: 3f:49:37:c7:45:89:02:de:ed:f9:15:1e:b8:19:21: 15:4f:7c:56:5d:e3:1c:35:bc:c0:48:ce:15:9c:ad: 85:0d:7d:cf:4d:2d:15:8a:87:f1:8f:bc:38:fb:2d: 74:b7:60:ce:43:73:7c:3c:53:14:8f:0a:18:23:21: 46:fd:98:f6:78:28:8b:6c:b3:12:34:66:ce:0b:3f: d6:cc:3e:12:be:da:3c:51:4d:c9:4e:32:32:62:85: ea:2e:a3:31:da:3e:56:f9:8d:f7:42:0e:96:a0:f0: 74:ea:3d:50:5a:17:eb:9e:76:2a:dc:32:90:06:61: 8e:63:4f:09:8d:95:ed:ba:25:1c:ea:92:c2:bb:6b: 14:e5:73:79:a5:7c:95:e9:59:1d:61:0a:77:b8:d0: 1f:65:3d:26:78:cc:db:5d:cf:fa:0b:70:82:e7:6a: ef:be:86:1d:e0:a0:19:14:ed:5d:fd:3c:35:c3:9b: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:90:66:8E:F3:92:89:E2:5A:DF:BA:FF:AF:F5:4A:38:A8:B5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24ed4a83-69a8-3afe-b808-2a760718d10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:248:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:9d:84:49:f2:b2:c8:5f:28:a3:4c:25:3c:7c:0e:dc:6a:77: 84:bf:be:77:9b:1e:43:8e:6d:b2:5f:1b:59:fe:e4:e7:23:68: 22:64:d3:36:98:8c:3b:d5:82:6f:c0:ef:5d:8f:57:ea:e3:ce: e1:14:ca:bf:49:38:fe:cb:5c:99:d3:9a:e2:f1:e3:75:44:e9: 5d:28:1b:a9:d0:7b:cc:6f:ca:09:8b:b9:20:e0:cc:94:a8:f2: 18:3e:5d:5d:9c:d5:51:ad:21:f9:95:64:8b:3e:ac:3a:d3:10: a0:a7:d4:4c:4c:f9:da:f4:17:e9:36:07:a3:b6:47:f4:35:b3: 57:b5:d5:a2:6f:5d:a2:01:99:c7:89:ea:f2:80:75:72:77:07: 2c:66:73:a9:d2:e9:f4:d1:3e:b3:db:65:00:53:d9:c4:40:b0: c8:0e:bc:d7:55:a9:6b:90:b2:b8:b9:c7:fc:f3:7a:d2:64:7c: a2:1e:97:01:ca:a0:12:e4:a7:af:05:c3:0b:45:38:dd:5e:14: 69:e6:cc:10:ae:a9:14:02:3b:77:cb:a9:42:cb:77:7e:05:77: c0:1b:2d:80:05:72:a7:63:6e:cd:9e:f1:f4:eb:1b:fe:a9:38: 8a:82:82:fe:c0:3f:b4:8b:3d:3c:dc:2d:28:ae:b9:41:84:3a: 34:6d:c1:5a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vOssjdltP07xpVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk N2I4YjAyZjctNmNiYi00ZmJiLWE0NGEtMmZkYWY1ZGZiODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jH36nmA1U1wjpjPzfDHPJti6rX4iifplbR1 OEF+OOx0I4lXhh2F8nNgUfQRi3ZvzEi3+VJC9+2O9cG4AvhIC23KHMUS298bCC8/ STfHRYkC3u35FR64GSEVT3xWXeMcNbzASM4VnK2FDX3PTS0Viofxj7w4+y10t2DO Q3N8PFMUjwoYIyFG/Zj2eCiLbLMSNGbOCz/WzD4Svto8UU3JTjIyYoXqLqMx2j5W +Y33Qg6WoPB06j1QWhfrnnYq3DKQBmGOY08JjZXtuiUc6pLCu2sU5XN5pXyV6Vkd YQp3uNAfZT0meMzbXc/6C3CC52rvvoYd4KAZFO1d/Tw1w5s4bwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMs3kGaO85KJ4lrfuv+v9Uo4qLUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRlZDRhODMtNjlhOC0z YWZlLWI4MDgtMmE3NjA3MThkMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECSEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAIp2ESfKyyF8oo0wlPHwO3Gp3hL++d5seQ45tsl8bWf7k5yNoImTT NpiMO9WCb8DvXY9X6uPO4RTKv0k4/stcmdOa4vHjdUTpXSgbqdB7zG/KCYu5IODM lKjyGD5dXZzVUa0h+ZVkiz6sOtMQoKfUTEz52vQX6TYHo7ZH9DWzV7XVom9dogGZ x4nq8oB1cncHLGZzqdLp9NE+s9tlAFPZxECwyA6811Wpa5CyuLnH/PN60mR8oh6X AcqgEuSnrwXDC0U43V4UaebMEK6pFAI7d8upQst3fgV3wBstgAVyp2NuzZ7x9Osb /qk4ioKC/sA/tIs9PNwtKK65QYQ6NG3BWg== -----END CERTIFICATE-----Generated at Wed Jul 22 01:14:23 2026 by rpki-client