$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95be7999-e45e-3d5b-946a-94c9e2ea5e8e.roa File: 95be7999-e45e-3d5b-946a-94c9e2ea5e8e.roa (raw, json) Hash identifier: p5fBrwvm4hoRzMKjIliy+8coR8w2xxYfYBywj71XiJA= Subject key identifier: 41:E7:65:6F:97:E6:93:DE:6F:AE:AB:10:F3:EC:63:97:1A:10:2A:53 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584E9049A7350CA290FA910C8900 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95be7999-e45e-3d5b-946a-94c9e2ea5e8e.roa Signing time: Mon 20 Jul 2026 17:13:19 +0000 ROA not before: Mon 20 Jul 2026 17:13:19 +0000 ROA not after: Sun 18 Oct 2026 17:13:19 +0000 asID: 401152 IP address blocks: 2604:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:49:a7:35:0c:a2:90:fa:91:0c:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 20 17:13:19 2026 GMT Not After : Oct 18 17:13:19 2026 GMT Subject: CN=3b9fa12d-5cab-4b2f-bb0a-aa699cccaa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:55:38:0d:c1:f5:e0:7e:78:22:b2:a1:dc:49: d4:69:2a:0d:37:00:86:b3:07:85:03:fe:50:a1:b1: b4:ff:09:3e:7e:a1:34:76:85:a2:7e:f8:15:b6:07: 99:dd:d9:a6:06:cb:5a:48:c1:d8:ef:67:d5:7f:45: f6:c8:f4:a2:ec:56:fc:5f:f7:e8:0f:35:7c:d4:f6: 03:28:8c:96:1d:96:cd:4e:aa:d0:d6:bc:b8:c9:f0: ee:d2:98:b9:52:26:3e:23:bc:aa:71:14:bf:a0:97: 5d:65:c7:c0:d6:21:71:91:62:a8:1e:f7:af:8c:d0: af:67:ec:ff:16:dd:2f:de:a5:fc:00:a0:c5:2c:5a: 3d:45:6e:f0:62:4a:38:a3:80:5d:e4:79:34:3a:ee: c5:16:23:10:ed:90:e9:dd:57:43:d0:e1:65:b7:10: cb:b3:61:e2:29:77:e7:7d:79:d7:f7:b8:36:4e:88: 07:72:c0:00:43:64:35:e0:d4:01:70:a9:51:c0:00: 2e:ba:40:bb:09:e3:82:6f:e1:65:40:52:35:ad:de: d8:2f:9b:5b:1c:64:60:ec:02:9b:8a:39:b4:d2:a0: ed:9a:f3:54:fa:67:3f:7a:fb:b0:db:29:a1:5a:65: 55:c9:d0:90:4a:b5:99:52:af:ef:fb:db:58:20:d3: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:65:6F:97:E6:93:DE:6F:AE:AB:10:F3:EC:63:97:1A:10:2A:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/95be7999-e45e-3d5b-946a-94c9e2ea5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv6: 2604:ba00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:57:c4:18:8c:8a:ed:4f:83:f0:36:81:f6:a4:e1:01:e5:32: d2:b7:b1:5b:3d:81:8a:8c:de:35:14:ce:78:1b:e8:0f:8d:81: e9:d8:68:69:51:b0:e6:d5:ac:bd:d6:7e:82:93:90:c3:57:10: 50:50:f2:40:30:55:2b:69:9a:d1:ab:7c:e9:9f:02:93:c9:35: 61:98:ef:43:53:9e:b0:76:0a:90:8f:f8:7a:03:fb:e7:79:95: 67:b6:d9:21:ae:fe:73:b0:19:f5:5d:e3:c0:e2:b3:a7:6f:22: 01:c7:17:a5:27:07:66:11:ff:e9:86:83:ec:d3:a0:b7:72:86: d5:0c:ac:99:eb:e1:4c:0e:6f:4f:1e:ae:41:04:07:a4:bf:90: 9e:d9:d0:6b:1c:9b:d5:f0:3a:1d:9e:6e:a3:a1:f4:15:84:9d: df:74:82:91:46:e8:8e:6a:87:0a:2b:a3:2b:71:97:93:6f:67: d9:70:c8:76:98:b6:d5:41:ad:2b:de:2a:62:44:87:81:c5:22: e2:c9:0f:ee:d4:03:fb:ca:d3:1a:35:17:58:40:f5:cd:61:cc: e4:79:b3:68:c9:9a:9b:7e:16:a3:55:b3:72:b4:35:81:06:df: 51:12:f9:84:d9:7b:ac:22:de:83:80:b0:cd:de:07:29:f3:63: c7:fe:9c:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6QSac1DKKQ+pEMiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDcyMDE3MTMxOVoXDTI2MTAxODE3MTMxOVowLzEtMCsGA1UEAxMk M2I5ZmExMmQtNWNhYi00YjJmLWJiMGEtYWE2OTljY2NhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllU4DcH14H54IrKh3EnUaSoNNwCGsweFA/5Q obG0/wk+fqE0doWifvgVtgeZ3dmmBstaSMHY72fVf0X2yPSi7Fb8X/foDzV81PYD KIyWHZbNTqrQ1ry4yfDu0pi5UiY+I7yqcRS/oJddZcfA1iFxkWKoHvevjNCvZ+z/ Ft0v3qX8AKDFLFo9RW7wYko4o4Bd5Hk0Ou7FFiMQ7ZDp3VdD0OFltxDLs2HiKXfn fXnX97g2TogHcsAAQ2Q14NQBcKlRwAAuukC7CeOCb+FlQFI1rd7YL5tbHGRg7AKb ijm00qDtmvNU+mc/evuw2ymhWmVVydCQSrWZUq/v+9tYINMHTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEHnZW+X5pPeb66rEPPsY5caECpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvOTViZTc5OTktZTQ1ZS0z ZDViLTk0NmEtOTRjOWUyZWE1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCPV8QYjIrtT4PwNoH2pOEB5TLSt7FbPYGKjN41FM54G+gPjYHp2Ghp UbDm1ay91n6Ck5DDVxBQUPJAMFUraZrRq3zpnwKTyTVhmO9DU56wdgqQj/h6A/vn eZVnttkhrv5zsBn1XePA4rOnbyIBxxelJwdmEf/phoPs06C3cobVDKyZ6+FMDm9P Hq5BBAekv5Ce2dBrHJvV8Dodnm6jofQVhJ3fdIKRRuiOaocKK6MrcZeTb2fZcMh2 mLbVQa0r3ipiRIeBxSLiyQ/u1AP7ytMaNRdYQPXNYczkebNoyZqbfhajVbNytDWB Bt9REvmE2XusIt6DgLDN3gcp82PH/pwB -----END CERTIFICATE-----Generated at Tue Jul 21 09:18:49 2026 by rpki-client