$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa File: 640be73c-56b6-3495-a77a-a13a5d730be0.roa (raw, json) Hash identifier: ulNVqPuo6Mbi2m6zBYheFwEHemS6IdrtFXKUSvXso9o= Subject key identifier: 8A:53:80:B6:E2:2A:6C:FC:8A:6A:B4:12:80:38:DD:01:B1:52:C1:5B Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584EA7887EB27B0C2DEF1A5062A0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10111 IP address blocks: 2601:20b8::/29 maxlen: 32 2601:20d0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:7e:b2:7b:0c:2d:ef:1a:50:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ae4fb1aa-c654-4d0f-a882-53b4b2004f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:b1:da:1d:7e:39:2a:d9:27:c2:fd:02:5e: 46:a8:d1:ea:bf:b3:45:d8:7c:ef:d1:f8:25:72:39: 98:ca:42:ed:c6:fd:4b:35:0b:8f:21:d5:f5:3c:1d: 93:c5:11:70:b5:45:db:b9:da:88:57:d0:37:af:f7: 2b:6c:58:5e:c8:a0:e0:a9:c8:d8:82:9a:86:06:07: 95:14:b4:d1:bb:e3:8d:59:0d:80:45:6c:f4:55:39: 60:ba:1e:52:16:31:17:1f:90:87:5f:fd:72:2a:f8: 12:97:b7:a5:c4:93:b5:6c:c2:42:09:96:42:7a:47: 2e:1f:8d:26:a2:ec:52:08:07:30:0e:59:e4:52:3b: 32:1f:3a:19:18:e0:3e:cc:5c:3f:9f:27:a7:61:f9: f4:8d:1e:da:5c:1f:62:56:33:1d:4a:4a:33:f3:70: 32:89:97:87:c2:af:a1:3e:f2:3f:97:46:39:39:40: 35:7c:cc:a4:1c:a9:0d:37:e5:32:10:42:92:e2:52: e0:ee:68:45:87:21:88:d9:7a:bd:db:5f:4e:36:60: 8f:b7:84:a4:cd:30:ab:d8:0d:d1:45:3d:08:9d:bd: 4e:d1:73:7e:7e:ca:da:27:aa:40:00:48:43:b4:2c: 71:f2:b5:68:04:69:c8:4f:f7:e1:e9:da:af:14:37: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:80:B6:E2:2A:6C:FC:8A:6A:B4:12:80:38:DD:01:B1:52:C1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/640be73c-56b6-3495-a77a-a13a5d730be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20b8::/29 2601:20d0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:12:4d:d8:43:63:39:18:77:92:72:73:1e:05:cf:2d:80:80: d7:8c:8e:48:77:bb:89:3c:8c:2a:19:67:a7:d3:74:e7:4c:6b: 66:92:d6:6e:eb:33:10:4f:b4:c5:76:97:d6:92:56:c6:9a:e6: a2:cb:af:d2:26:a0:f3:1f:3f:12:98:5a:18:95:45:33:47:e3: b9:44:7e:12:15:32:2c:f4:d0:bd:99:a8:3f:e9:53:b6:03:c3: 86:1f:92:b2:6b:6c:49:36:12:e8:a3:ee:a1:01:9a:f2:1f:6a: 02:81:1e:bd:a0:30:dc:f4:cd:82:43:f8:9e:65:8e:d4:b4:cb: fb:69:54:3b:14:d2:77:7b:96:fb:f2:bb:95:fc:aa:96:64:2b: c5:0b:8d:0f:69:3b:6f:dd:7e:78:69:a0:60:cb:22:81:88:85: 7e:c0:1f:64:3c:4e:ff:0f:d2:c3:de:1b:b5:02:ee:9b:b3:a7: a8:3b:b5:c0:3f:0a:b4:82:c8:6f:71:9a:f0:f2:ae:7f:53:ae: 10:f4:17:f2:c8:f3:83:f8:8f:e8:9d:98:26:77:2d:d3:82:33: 8c:d5:6d:49:00:df:72:9d:df:e9:47:13:44:78:d0:b9:34:b0: 81:d2:3c:40:f1:34:89:75:01:35:bf:07:84:2a:08:96:34:62: 8f:68:29:53 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6niH6yewwt7xpQYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWU0ZmIxYWEtYzY1NC00ZDBmLWE4ODItNTNiNGIyMDA0ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cmx2h1+OSrZJ8L9Al5GqNHqv7NF2Hzv0fgl cjmYykLtxv1LNQuPIdX1PB2TxRFwtUXbudqIV9A3r/crbFheyKDgqcjYgpqGBgeV FLTRu+ONWQ2ARWz0VTlguh5SFjEXH5CHX/1yKvgSl7elxJO1bMJCCZZCekcuH40m ouxSCAcwDlnkUjsyHzoZGOA+zFw/nyenYfn0jR7aXB9iVjMdSkoz83AyiZeHwq+h PvI/l0Y5OUA1fMykHKkNN+UyEEKS4lLg7mhFhyGI2Xq9219ONmCPt4SkzTCr2A3R RT0Inb1O0XN+fsraJ6pAAEhDtCxx8rVoBGnIT/fh6dqvFDesqQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIpTgLbiKmz8imq0EoA43QGxUsFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjQwYmU3M2MtNTZiNi0z NDk1LWE3N2EtYTEzYTVkNzMwYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDJgEguAMF AyYBINAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAzxJN2ENjORh3knJzHgXPLYCA14yOSHe7iTyMKhlnp9N0 50xrZpLWbuszEE+0xXaX1pJWxprmosuv0iag8x8/EphaGJVFM0fjuUR+EhUyLPTQ vZmoP+lTtgPDhh+SsmtsSTYS6KPuoQGa8h9qAoEevaAw3PTNgkP4nmWO1LTL+2lU OxTSd3uW+/K7lfyqlmQrxQuND2k7b91+eGmgYMsigYiFfsAfZDxO/w/Sw94btQLu m7OnqDu1wD8KtILIb3Ga8PKuf1OuEPQX8sjzg/iP6J2YJnct04IzjNVtSQDfcp3f 6UcTRHjQuTSwgdI8QPE0iXUBNb8HhCoIljRij2gpUw== -----END CERTIFICATE-----Generated at Wed Jul 29 22:44:30 2026 by rpki-client