$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa File: a3f11860-68fa-3387-b9fd-715d801b2410.roa (raw, json) Hash identifier: luzPIHzBEMCNodzwf1nWu0rCTHTTXuGFcmhLL9v+060= Subject key identifier: B1:E4:A5:B9:32:0B:8D:79:FB:CE:DC:2B:FC:A1:60:2D:80:E4:FC:77 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584E4AEF35D506F3E69CCF97C500 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 399728 IP address blocks: 2620:98:e004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:35:d5:06:f3:e6:9c:cf:97:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=dd91bc4a-47c8-433a-b885-d8853e756ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:1a:72:1b:a4:0c:34:2d:eb:4b:d9:d9:9b: 2c:6b:a8:e0:f3:3a:81:64:6c:f0:d3:92:29:bb:89: 80:93:99:6d:36:87:e9:44:5c:f8:c6:7b:40:ce:41: 1d:97:94:95:79:14:79:de:f5:47:21:6a:42:0e:68: cd:09:e4:bf:9c:69:94:5d:e6:38:07:f8:81:cf:fc: e8:22:99:6d:d3:e6:8e:9c:4a:1a:9e:9c:c1:72:a7: 49:d9:24:bb:58:8c:fb:7d:ac:7a:db:6f:26:34:fa: b1:59:73:62:8f:b0:80:83:49:9e:3c:87:1e:14:6d: ba:6a:2d:40:62:9e:01:d8:45:62:67:2d:d0:b1:e3: af:b9:ac:8a:ad:15:0f:d7:e3:e3:e8:cc:c7:c3:dd: 90:5f:78:26:9b:e3:e7:75:dd:ef:e0:1f:12:43:b3: 88:1c:6f:8d:cd:5e:12:eb:80:4d:ff:0a:d5:32:f0: a2:7c:b9:dc:51:07:50:97:08:29:3a:e4:8b:48:d6: d2:30:7b:ec:b2:41:46:81:92:03:05:72:8f:cc:79: 72:73:be:67:aa:c1:da:aa:37:5a:c2:62:0d:2b:41: 81:eb:65:21:51:ff:da:5e:15:c6:fa:1c:c7:70:91: 43:a2:05:90:67:bf:3e:48:a8:5a:a3:11:05:dd:9d: 01:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E4:A5:B9:32:0B:8D:79:FB:CE:DC:2B:FC:A1:60:2D:80:E4:FC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a3f11860-68fa-3387-b9fd-715d801b2410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9b:e7:fa:f5:4e:8c:1b:f3:57:7f:f8:7e:1d:d0:da:d9:1e: 7c:7b:cd:2c:2f:13:eb:d1:ce:8b:65:fa:e5:7e:f6:ba:93:87: 9a:63:e9:e9:9a:de:59:18:f9:b3:6a:52:12:bb:31:fb:72:e1: bb:34:3a:b5:35:c5:3e:7e:84:5e:c7:b6:d1:54:40:67:f5:a6: 0c:e9:e2:27:58:24:e0:08:6e:8f:06:2d:70:1a:71:bb:55:cf: 7d:ed:b5:47:13:cf:5f:a0:83:03:bb:27:81:ca:2d:18:05:07: c6:79:33:a9:78:fb:71:06:b3:ff:ad:aa:96:e7:8f:3c:38:5e: 1a:a6:5b:4b:2c:29:42:c0:b0:d7:20:52:bc:04:08:f1:84:1c: 17:ca:24:5f:4a:dd:80:a5:cf:ad:39:e8:10:6d:fa:05:31:58: fc:fc:90:27:80:1f:e1:ab:3f:b5:12:62:0d:95:7a:73:54:5c: 69:81:f3:39:cd:47:a9:c8:5e:c3:07:94:fa:46:b8:94:cc:b8: 20:d6:f8:59:90:3e:f9:18:73:d8:52:82:d5:06:56:71:a2:4e: ea:d1:85:a4:50:7e:b6:ee:9f:db:34:8b:f1:11:5f:89:e0:dc: 2d:ea:d9:42:f0:c0:67:a8:75:a4:cb:95:cd:e5:7b:07:f4:8a: 34:1a:de:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K7zXVBvPmnM+XxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZGQ5MWJjNGEtNDdjOC00MzNhLWI4ODUtZDg4NTNlNzU2ZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHsachukDDQt60vZ2Zssa6jg8zqBZGzw05Ip u4mAk5ltNofpRFz4xntAzkEdl5SVeRR53vVHIWpCDmjNCeS/nGmUXeY4B/iBz/zo Iplt0+aOnEoanpzBcqdJ2SS7WIz7fax6228mNPqxWXNij7CAg0mePIceFG26ai1A Yp4B2EViZy3QseOvuayKrRUP1+Pj6MzHw92QX3gmm+Pndd3v4B8SQ7OIHG+NzV4S 64BN/wrVMvCifLncUQdQlwgpOuSLSNbSMHvsskFGgZIDBXKPzHlyc75nqsHaqjda wmINK0GB62UhUf/aXhXG+hzHcJFDogWQZ78+SKhaoxEF3Z0BMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLHkpbkyC415+87cK/yhYC2A5Px3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYTNmMTE4NjAtNjhmYS0z Mzg3LWI5ZmQtNzE1ZDgwMWIyNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGb5/r1Towb81d/+H4d0NrZHnx7zSwvE+vRzotl+uV+9rqTh5pj 6ema3lkY+bNqUhK7Mfty4bs0OrU1xT5+hF7HttFUQGf1pgzp4idYJOAIbo8GLXAa cbtVz33ttUcTz1+ggwO7J4HKLRgFB8Z5M6l4+3EGs/+tqpbnjzw4XhqmW0ssKULA sNcgUrwECPGEHBfKJF9K3YClz6056BBt+gUxWPz8kCeAH+GrP7USYg2VenNUXGmB 8znNR6nIXsMHlPpGuJTMuCDW+FmQPvkYc9hSgtUGVnGiTurRhaRQfrbun9s0i/ER X4ng3C3q2ULwwGeodaTLlc3lewf0ijQa3ok= -----END CERTIFICATE-----Generated at Sun Jul 5 14:44:36 2026 by rpki-client