$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa File: 5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa (raw, json) Hash identifier: 4DoIlBn+wSxkGXTQ7LVVgHDqY7NoUZTLc38Ip5dApAM= Subject key identifier: 5E:99:45:0C:E7:AE:58:F4:99:0B:07:25:D5:49:2F:F0:0D:82:C3:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B4FC8AFC04DCA2D854240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 2601:642::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:4f:c8:af:c0:4d:ca:2d:85:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=33504a5f-da28-4090-b35c-c224ba60c0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:92:de:6b:0a:c6:df:61:ad:0f:88:70:36: f7:6b:1f:81:3b:df:27:7f:fb:c7:f2:cc:60:6a:e2: 08:e3:9b:dc:9c:33:31:61:4c:f7:d9:68:f2:d2:1e: b6:bf:9c:bb:6a:0a:b9:18:3f:e6:1d:bb:a6:4d:13: a1:03:b3:05:31:eb:4b:9c:48:51:c3:ec:f3:63:02: 4e:f5:c4:f8:f5:a3:ec:42:9f:24:42:f2:4d:b0:ec: 7c:5f:92:7e:f3:ea:df:16:eb:c9:3b:70:4e:06:33: 4e:b5:fb:17:f4:c7:e6:f1:45:0c:ed:61:a9:41:f1: be:ed:a5:d2:39:12:10:6e:0c:49:30:5e:2d:92:71: ab:60:b1:7a:31:28:6e:92:96:8e:1c:2a:3f:29:86: ac:08:c7:48:98:43:bd:9c:48:1c:ab:f0:80:09:d4: 31:99:b9:50:41:21:97:a3:eb:02:1c:fb:83:67:d4: 35:81:c9:ab:a7:25:95:02:5e:00:61:8c:ae:06:e3: 14:c1:c5:5d:4b:9d:af:f8:71:0d:e7:39:bc:56:9d: ad:e2:d4:8f:22:cb:90:82:4e:8e:d5:65:e3:83:a2: 12:94:09:9e:74:1c:83:d0:c0:2e:79:8f:6a:3f:33: f0:13:0c:27:dc:34:52:91:32:27:9e:e6:d5:85:f4: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:99:45:0C:E7:AE:58:F4:99:0B:07:25:D5:49:2F:F0:0D:82:C3:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:642::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:be:28:00:98:5e:00:1f:e2:42:7d:ce:62:4d:f1:5b:2c:87: ce:f4:0d:a3:c9:f0:d0:c4:fd:22:4e:79:0a:72:7e:49:b2:b3: 2f:32:0a:e3:94:59:be:48:19:cb:1f:59:e5:78:c6:eb:30:52: c4:a8:37:3c:d3:e7:00:bc:1e:ba:e4:14:8d:bb:50:45:31:80: 07:7c:a5:55:7e:6a:36:9d:19:7a:b8:67:59:46:7a:cb:d2:48: 9f:2f:31:38:be:e4:29:d2:68:c5:23:c5:49:eb:27:07:e2:6c: 99:e8:92:89:e8:57:f7:82:0f:ae:71:d6:96:a4:6d:0e:2d:db: 86:b5:98:b5:40:09:ca:43:08:19:9c:c4:96:b0:84:37:98:67: 84:f0:e1:96:de:9d:9b:7e:5b:53:e0:bf:ed:fc:68:ef:4f:c3: c1:34:ef:60:6c:be:af:2f:16:b6:c5:ba:4b:76:25:a6:1e:e0: 7b:b5:45:70:52:5a:57:5c:e7:d5:d9:c4:4d:81:44:e3:1c:7b: 98:2e:f2:71:79:29:98:b6:86:bd:fe:64:6b:56:9c:6c:eb:c6: af:1d:ee:7c:00:8c:eb:09:4b:0d:e5:eb:56:a9:59:04:35:b6: e0:45:4f:ce:1a:e5:4e:17:af:74:ff:10:73:55:fd:12:c0:9d: c9:db:c8:f5 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vO0/Ir8BNyi2FQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MzM1MDRhNWYtZGEyOC00MDkwLWIzNWMtYzIyNGJhNjBjMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheuS3msKxt9hrQ+IcDb3ax+BO98nf/vH8sxg auII45vcnDMxYUz32Wjy0h62v5y7agq5GD/mHbumTROhA7MFMetLnEhRw+zzYwJO 9cT49aPsQp8kQvJNsOx8X5J+8+rfFuvJO3BOBjNOtfsX9Mfm8UUM7WGpQfG+7aXS ORIQbgxJMF4tknGrYLF6MShukpaOHCo/KYasCMdImEO9nEgcq/CACdQxmblQQSGX o+sCHPuDZ9Q1gcmrpyWVAl4AYYyuBuMUwcVdS52v+HEN5zm8Vp2t4tSPIsuQgk6O 1WXjg6ISlAmedByD0MAueY9qPzPwEwwn3DRSkTInnubVhfSFEQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFF6ZRQznrlj0mQsHJdVJL/ANgsMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJhZjdjYjctOThiZS0z YTk3LThhMTktMmE1YWE2M2MyOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGQgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANb4oAJheAB/iQn3OYk3xWyyHzvQNo8nw0MT9Ik55CnJ+SbKzLzIK 45RZvkgZyx9Z5XjG6zBSxKg3PNPnALweuuQUjbtQRTGAB3ylVX5qNp0ZerhnWUZ6 y9JIny8xOL7kKdJoxSPFSesnB+JsmeiSiehX94IPrnHWlqRtDi3bhrWYtUAJykMI GZzElrCEN5hnhPDhlt6dm35bU+C/7fxo70/DwTTvYGy+ry8WtsW6S3Ylph7ge7VF cFJaV1zn1dnETYFE4xx7mC7ycXkpmLaGvf5ka1acbOvGrx3ufACM6wlLDeXrVqlZ BDW24EVPzhrlThevdP8Qc1X9EsCdydvI9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:06:06 2026 by rpki-client