$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa File: 3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa (raw, json) Hash identifier: pQ8tWJ7uQFgGcncD6S+5KXt+dOhc156SAeHH3LX7BdE= Subject key identifier: 2D:B3:68:0A:35:A0:A8:20:EE:DA:C3:B9:69:EA:98:92:4D:99:82:1A Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584E878DCE3F555C0F9E9DAA8C40 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa Signing time: Fri 17 Jul 2026 14:08:22 +0000 ROA not before: Fri 17 Jul 2026 14:08:22 +0000 ROA not after: Thu 15 Oct 2026 14:08:22 +0000 asID: 7352 IP address blocks: 2604:cd00:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8d:ce:3f:55:5c:0f:9e:9d:aa:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Jul 17 14:08:22 2026 GMT Not After : Oct 15 14:08:22 2026 GMT Subject: CN=67f92307-fa3f-492b-991e-d53541187d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:25:60:99:69:e7:5c:c9:78:95:e2:09:6e: c9:ac:1b:ec:59:33:14:87:d5:94:2d:fd:25:bb:3c: d2:e0:c4:a1:8a:a5:3c:89:ba:db:79:49:be:8f:19: bf:ab:14:d8:98:c9:de:e4:23:2c:b5:f6:25:fe:06: e1:f5:eb:4b:17:ed:ac:b8:2c:63:d7:bc:5f:42:38: 2c:ee:25:8e:94:47:6a:92:22:a4:b3:dc:d7:83:a8: 5a:67:a0:0a:2c:84:5c:7a:6c:30:dd:d0:51:d0:cd: 60:04:81:db:38:91:35:b1:33:77:6e:9f:c4:94:74: 97:f9:b7:7b:45:25:14:81:c8:ba:d5:72:af:8d:8a: 87:55:ce:8a:7a:b4:a3:cb:9b:1a:cd:d8:bd:52:5e: 4b:d3:29:c6:5d:08:58:51:87:94:6e:d5:67:eb:65: 73:85:d9:34:01:0b:ba:0c:9c:7c:72:c2:ee:48:74: d3:6f:c1:3e:a4:85:f2:6a:42:fd:7e:7e:ad:30:68: 8e:f8:0e:be:a4:78:ee:08:b6:1a:7d:76:93:13:1f: 81:db:b3:16:dd:5c:2b:ff:1b:bf:02:83:ba:b2:4c: de:7e:55:c8:ae:12:3b:9b:d0:53:25:05:e4:d8:7c: a2:1a:2b:ef:9d:09:f7:0d:c6:25:b6:0d:4a:63:52: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B3:68:0A:35:A0:A8:20:EE:DA:C3:B9:69:EA:98:92:4D:99:82:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv6: 2604:cd00:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:70:1e:21:ce:1a:52:ee:9d:89:00:17:64:99:2f:49:dd:9d: 43:90:25:dd:9d:dc:d2:3e:44:e8:5c:c0:c7:8f:33:de:e8:97: 64:1d:74:cb:64:ba:61:62:03:4d:f0:2f:82:ae:f0:ed:54:60: cb:b9:ce:80:e3:b1:9f:18:97:9f:df:b3:ea:8e:35:4d:8c:ca: 62:17:20:3b:5f:7e:33:8a:79:80:52:98:6f:c3:3d:7b:32:da: e6:4f:a2:bf:c5:d8:08:f9:cb:dc:a3:ef:94:9b:19:55:c3:d5: 4f:1f:80:71:b8:7f:9c:cd:72:27:df:9a:2c:4b:c1:fd:d1:49: 40:a5:ce:09:aa:18:7a:ca:54:81:da:a8:5b:6b:cd:e5:2b:b1: a2:04:71:f9:06:6b:19:11:25:06:5a:7b:1a:c1:dc:29:0a:d6: b6:42:36:33:f8:35:2b:d7:8d:c1:bc:d4:b1:2d:d4:1d:02:b5: 97:fb:29:dc:a6:2e:df:35:12:57:7c:17:56:b1:9a:03:e5:df: 53:36:27:7a:5c:d2:28:70:14:4e:22:ee:82:80:1c:6f:2f:77: 75:e0:fb:ca:13:5f:fb:18:35:47:9a:a5:1c:8a:e9:93:4a:77: dd:ad:c1:d6:83:08:e4:33:12:11:94:45:55:c4:88:ec:b1:de: ba:99:91:02 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6Hjc4/VVwPnp2qjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDcxNzE0MDgyMloXDTI2MTAxNTE0MDgyMlowLzEtMCsGA1UEAxMk NjdmOTIzMDctZmEzZi00OTJiLTk5MWUtZDUzNTQxMTg3ZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwlYJlp51zJeJXiCW7JrBvsWTMUh9WULf0l uzzS4MShiqU8ibrbeUm+jxm/qxTYmMne5CMstfYl/gbh9etLF+2suCxj17xfQjgs 7iWOlEdqkiKks9zXg6haZ6AKLIRcemww3dBR0M1gBIHbOJE1sTN3bp/ElHSX+bd7 RSUUgci61XKvjYqHVc6KerSjy5sazdi9Ul5L0ynGXQhYUYeUbtVn62Vzhdk0AQu6 DJx8csLuSHTTb8E+pIXyakL9fn6tMGiO+A6+pHjuCLYafXaTEx+B27MW3Vwr/xu/ AoO6skzeflXIrhI7m9BTJQXk2HyiGivvnQn3DcYltg1KY1KCZQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC2zaAo1oKgg7trDuWnqmJJNmYIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvM2I2ZTdjNWItN2M4Yy0z NmQzLThiOGQtZmVmMGU2NGIwNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgTNACAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAo3AeIc4aUu6diQAXZJkvSd2dQ5Al3Z3c0j5E6FzAx48z3uiXZB10 y2S6YWIDTfAvgq7w7VRgy7nOgOOxnxiXn9+z6o41TYzKYhcgO19+M4p5gFKYb8M9 ezLa5k+iv8XYCPnL3KPvlJsZVcPVTx+Acbh/nM1yJ9+aLEvB/dFJQKXOCaoYespU gdqoW2vN5SuxogRx+QZrGRElBlp7GsHcKQrWtkI2M/g1K9eNwbzUsS3UHQK1l/sp 3KYu3zUSV3wXVrGaA+XfUzYnelzSKHAUTiLugoAcby93deD7yhNf+xg1R5qlHIrp k0p33a3B1oMI5DMSEZRFVcSI7LHeupmRAg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:12 2026 by rpki-client