$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/431785d7-508a-3587-b5a9-e2151807bbf6.roa File: 431785d7-508a-3587-b5a9-e2151807bbf6.roa (raw, json) Hash identifier: H7joZMgE0J56Ip/prkG/4JCdtjqQl5bOdlYwpL5UE1c= Subject key identifier: 6D:1C:8D:F4:19:C2:28:D5:E6:68:0B:3A:4F:37:A6:0D:01:44:75:F8 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584E9049D5FC0C3FE024D262B400 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/431785d7-508a-3587-b5a9-e2151807bbf6.roa Signing time: Mon 20 Jul 2026 17:13:41 +0000 ROA not before: Mon 20 Jul 2026 17:13:41 +0000 ROA not after: Sun 18 Oct 2026 17:13:41 +0000 asID: 26639 IP address blocks: 2604:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:49:d5:fc:0c:3f:e0:24:d2:62:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 20 17:13:41 2026 GMT Not After : Oct 18 17:13:41 2026 GMT Subject: CN=3c2ab0f2-a8bb-4665-a86f-a0f5693f069a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:3a:8b:f3:a2:73:be:4d:f3:2f:70:fb:ef: 42:81:7b:8a:fe:a4:84:81:54:a6:78:c6:61:4a:e9: 84:4b:18:e6:7d:fb:da:fd:24:03:a7:f1:54:64:92: cd:41:5e:e2:61:93:41:3a:76:e7:f5:38:0d:9a:7e: 16:b4:e0:fd:be:a6:52:c2:77:36:09:5a:6a:9d:1d: 66:2b:f5:72:d0:ed:0b:62:0d:ec:c4:35:46:60:ff: 04:24:c0:cc:9b:dc:e1:9e:2c:c2:f2:10:50:66:a7: c6:6a:70:37:d5:6e:0a:d6:31:bf:49:c9:ee:e9:54: 6b:a9:1e:49:73:13:aa:f9:5b:ed:fe:5b:b5:1f:04: 96:57:13:95:cc:d2:36:7d:07:b1:74:fa:7c:8b:8f: 53:b6:58:af:8c:cb:00:ea:7a:b9:3e:f6:7d:e1:c9: eb:ba:14:dd:95:4a:e7:01:69:cf:5d:7b:09:8e:1a: 42:21:5d:58:ae:e8:9f:7d:90:bf:5a:ba:40:42:a2: 64:1d:87:b0:05:2c:d7:fd:7b:3f:df:4b:b2:e5:2c: bf:23:1d:a4:46:4c:1c:9a:1f:bf:8a:92:1a:dd:40: 6b:08:72:e1:95:98:84:6b:df:3b:8a:cd:63:00:9a: 50:c6:70:a1:a1:01:02:08:bd:64:5d:56:a6:42:27: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:8D:F4:19:C2:28:D5:E6:68:0B:3A:4F:37:A6:0D:01:44:75:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/431785d7-508a-3587-b5a9-e2151807bbf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:79:69:df:0d:c2:ef:0d:3b:54:b0:33:53:bf:da:c4:26:03: a4:e6:84:8b:6e:34:7e:2b:76:fc:19:72:de:2b:a3:cc:79:2e: f5:b9:00:94:f6:d0:bb:a2:8c:d0:1d:70:cc:ea:78:ca:b3:97: c6:43:19:87:44:ad:1e:5f:c9:a9:1e:95:bd:af:7c:7f:db:30: 12:a6:51:3f:9b:e6:d4:e8:38:eb:04:5d:c6:ca:ad:32:09:1c: 9a:be:73:75:e1:90:0e:dd:83:24:2e:d8:1b:02:e7:c4:d4:4f: 67:98:30:2a:da:e7:31:26:f9:73:67:6c:53:4f:1a:71:09:0a: af:44:fa:3a:16:95:0b:35:43:fd:1e:a1:26:6b:08:e5:c2:82: 55:14:84:8e:f4:0e:e7:28:ce:e6:e1:9c:d3:7b:55:42:9e:ea: d4:fe:5e:1e:62:c1:ca:86:8c:a5:9b:8b:38:38:67:87:bd:5b: 1a:38:4c:82:2d:31:f6:41:04:17:35:3e:38:a7:b9:d5:c6:cf: 76:5a:86:3b:2b:ea:13:7a:2f:c1:4d:84:8f:c0:a7:5f:33:1e: dc:16:0a:ce:1d:76:26:c3:c5:37:3f:9b:f0:a9:e1:6a:69:35: 2d:c5:98:30:1d:7c:2b:5e:32:43:2b:20:79:6e:e7:56:38:0b: 75:49:2f:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6QSdX8DD/gJNJitAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDcyMDE3MTM0MVoXDTI2MTAxODE3MTM0MVowLzEtMCsGA1UEAxMk M2MyYWIwZjItYThiYi00NjY1LWE4NmYtYTBmNTY5M2YwNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgms6i/Oic75N8y9w++9CgXuK/qSEgVSmeMZh SumESxjmffva/SQDp/FUZJLNQV7iYZNBOnbn9TgNmn4WtOD9vqZSwnc2CVpqnR1m K/Vy0O0LYg3sxDVGYP8EJMDMm9zhnizC8hBQZqfGanA31W4K1jG/Scnu6VRrqR5J cxOq+Vvt/lu1HwSWVxOVzNI2fQexdPp8i49TtlivjMsA6nq5PvZ94cnruhTdlUrn AWnPXXsJjhpCIV1YruiffZC/WrpAQqJkHYewBSzX/Xs/30uy5Sy/Ix2kRkwcmh+/ ipIa3UBrCHLhlZiEa987is1jAJpQxnChoQECCL1kXVamQiemEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG0cjfQZwijV5mgLOk83pg0BRHX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNDMxNzg1ZDctNTA4YS0z NTg3LWI1YTktZTIxNTE4MDdiYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0eWnfDcLvDTtUsDNTv9rEJgOk5oSLbjR+K3b8GXLeK6PMeS71uQCU 9tC7oozQHXDM6njKs5fGQxmHRK0eX8mpHpW9r3x/2zASplE/m+bU6DjrBF3Gyq0y CRyavnN14ZAO3YMkLtgbAufE1E9nmDAq2ucxJvlzZ2xTTxpxCQqvRPo6FpULNUP9 HqEmawjlwoJVFISO9A7nKM7m4ZzTe1VCnurU/l4eYsHKhoylm4s4OGeHvVsaOEyC LTH2QQQXNT44p7nVxs92WoY7K+oTei/BTYSPwKdfMx7cFgrOHXYmw8U3P5vwqeFq aTUtxZgwHXwrXjJDKyB5budWOAt1SS/x -----END CERTIFICATE-----Generated at Tue Jul 21 09:19:44 2026 by rpki-client