$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa File: b4b49598-3200-343d-b581-4e90a98f7e93.roa (raw, json) Hash identifier: GWZhjJmGsKwEcvJ8jV0bKF4htzzWSONuB9bdFuLcwtI= Subject key identifier: F4:A7:65:F8:5E:AC:61:42:05:65:FC:91:54:16:2F:5C:0A:21:A9:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3A97B3DD9375C54B398A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33659 IP address blocks: 2603:301b:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:97:b3:dd:93:75:c5:4b:39:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=d8afd9a5-fe1d-443c-9472-b26f51ea58ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:f9:c6:9d:00:5f:cc:cc:7c:7d:f0:2d:c9: 5e:dd:7b:7f:e7:97:07:3c:33:6c:a6:84:c1:af:11: 72:2a:7f:31:05:ff:69:18:ad:14:c1:75:6b:b8:aa: 65:a9:bc:00:33:69:f3:48:bc:07:c9:96:41:97:02: 60:42:17:b3:7f:16:ed:22:ab:1f:a3:46:ff:d4:fe: 64:5c:be:08:33:50:07:dd:7a:7f:0a:6b:17:49:2b: e7:38:a5:15:83:85:b6:3c:fe:1c:df:58:0f:9e:6a: 6e:fb:a3:ac:38:80:4f:6a:ec:bc:b9:f1:c9:62:a8: ab:7f:f2:4b:06:76:18:36:00:78:97:fa:9d:d0:ef: 7d:41:38:17:f8:47:32:31:b1:fb:21:42:ce:d9:24: d6:bc:36:c6:0f:37:a6:09:a7:0f:d9:b8:73:5c:ee: 17:25:39:98:3a:23:55:d2:0d:ad:95:0f:36:8c:de: 93:88:91:58:60:bc:3d:92:c8:dc:21:d8:aa:c0:93: b2:7d:e1:e5:1f:bf:21:b6:4d:08:e4:f0:3e:e3:fb: 21:a4:eb:af:15:d2:1b:83:e2:20:de:3b:72:cd:23: d3:cd:09:cd:4e:7a:79:fd:a5:f5:13:fa:48:fd:ac: e5:6a:d9:56:10:0a:2a:3c:8a:31:3c:2a:a3:e6:95: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:65:F8:5E:AC:61:42:05:65:FC:91:54:16:2F:5C:0A:21:A9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4b49598-3200-343d-b581-4e90a98f7e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301b:100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f2:87:10:cd:ad:1c:ec:54:94:cc:9c:b8:b4:67:c1:ee:b6: fe:e8:83:be:e7:f4:54:09:69:77:2b:14:c4:9e:ee:3d:4b:ae: 83:8f:de:17:18:b1:e0:ce:ee:b8:83:24:d6:17:0d:43:1b:9b: 1a:52:2a:18:3c:ca:de:d3:00:c9:0f:f8:2d:ef:f7:0b:27:7e: 68:8e:24:23:74:99:55:37:70:d4:a3:15:8a:81:7c:03:34:ec: d7:c5:7a:b1:b4:d7:52:e3:df:43:b6:02:dd:54:86:e1:3c:3b: c4:29:6e:30:8b:10:20:52:7c:e4:eb:1e:28:bd:55:49:2c:97: e6:fc:b3:ae:a7:8c:ca:65:f4:d1:0b:ac:35:1b:12:ff:d9:5a: df:c3:94:b6:14:b8:9e:7a:ae:a2:e5:40:07:5c:67:0c:42:90: 8c:18:5a:28:01:4e:11:8e:14:f2:21:ac:48:79:5d:e1:2a:26: a8:f2:0f:7e:90:e3:ef:d3:92:3d:a3:e7:7e:7e:90:fa:62:06: 80:61:a0:b1:60:ec:7d:81:5e:92:3a:db:93:d4:9a:f6:bb:88: 81:38:b8:2b:42:7c:16:ee:f6:22:e9:5e:49:c1:da:cd:c5:5b: de:9c:af:d6:f9:61:d2:db:ec:25:b5:b1:1a:fb:40:f6:cc:c2: 70:5f:d9:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vOpez3ZN1xUs5ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDhhZmQ5YTUtZmUxZC00NDNjLTk0NzItYjI2ZjUxZWE1OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4D5xp0AX8zMfH3wLcle3Xt/55cHPDNspoTB rxFyKn8xBf9pGK0UwXVruKplqbwAM2nzSLwHyZZBlwJgQhezfxbtIqsfo0b/1P5k XL4IM1AH3Xp/CmsXSSvnOKUVg4W2PP4c31gPnmpu+6OsOIBPauy8ufHJYqirf/JL BnYYNgB4l/qd0O99QTgX+EcyMbH7IULO2STWvDbGDzemCacP2bhzXO4XJTmYOiNV 0g2tlQ82jN6TiJFYYLw9ksjcIdiqwJOyfeHlH78htk0I5PA+4/shpOuvFdIbg+Ig 3jtyzSPTzQnNTnp5/aX1E/pI/azlatlWEAoqPIoxPCqj5pUBkQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPSnZfherGFCBWX8kVQWL1wKIanpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRiNDk1OTgtMzIwMC0z NDNkLWI1ODEtNGU5MGE5OGY3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGwEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAMPKHEM2tHOxUlMycuLRnwe62/uiDvuf0VAlpdysUxJ7uPUuug4/e Fxix4M7uuIMk1hcNQxubGlIqGDzK3tMAyQ/4Le/3Cyd+aI4kI3SZVTdw1KMVioF8 AzTs18V6sbTXUuPfQ7YC3VSG4Tw7xCluMIsQIFJ85OseKL1VSSyX5vyzrqeMymX0 0QusNRsS/9la38OUthS4nnquouVAB1xnDEKQjBhaKAFOEY4U8iGsSHld4SomqPIP fpDj79OSPaPnfn6Q+mIGgGGgsWDsfYFekjrbk9Sa9ruIgTi4K0J8Fu72IuleScHa zcVb3pyv1vlh0tvsJbWxGvtA9szCcF/ZXA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:05:39 2026 by rpki-client