$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa File: 5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa (raw, json) Hash identifier: 26w+T25RtmicM0/LhUXJ27L4pG31lKEIWq4/xLHzQHQ= Subject key identifier: 1B:81:B5:21:48:B1:E8:B7:3F:E5:0D:62:0C:33:28:2B:42:11:D0:78 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584E84B6C3E2DF4759C1D979E860 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa Signing time: Thu 16 Jul 2026 13:43:28 +0000 ROA not before: Thu 16 Jul 2026 13:43:28 +0000 ROA not after: Wed 14 Oct 2026 13:43:28 +0000 asID: 7352 IP address blocks: 2604:cd00:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:b6:c3:e2:df:47:59:c1:d9:79:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Jul 16 13:43:28 2026 GMT Not After : Oct 14 13:43:28 2026 GMT Subject: CN=225ced0b-823c-4f58-a69a-453b41d2ac64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:5d:0e:86:47:79:14:31:7f:39:95:d5:ba: 82:17:a7:ea:bb:d5:84:10:59:09:21:8a:fc:21:4f: e0:ce:68:d5:58:89:ce:95:81:a1:ec:29:bf:f3:ed: 06:93:26:2b:1c:70:23:cd:cb:2f:76:c5:82:0d:b1: 70:61:a0:ec:cd:47:a1:b1:c7:d0:d9:17:be:0d:bb: 2f:f1:64:01:7b:a3:4e:31:da:a1:9d:0c:f6:45:f9: bb:cc:32:57:4b:14:d0:f6:b0:b8:15:2e:45:53:49: 68:44:0b:10:7c:3d:de:b7:32:3e:56:32:cf:41:ec: 36:63:3b:05:4f:6e:6f:42:4f:c2:ea:ed:ed:c9:0d: 01:73:ed:db:bd:bd:7c:50:62:cf:67:e9:b1:b6:d0: 4b:3f:11:dc:73:4d:b3:51:e5:6b:1a:7c:4f:50:96: c8:1d:9b:b7:00:c7:09:c0:3c:61:84:e3:cd:5f:dd: db:c3:59:00:0f:22:8c:88:7d:fd:bf:a7:a8:b6:fb: b5:cc:6f:31:49:84:8b:b1:95:7f:49:44:62:a5:91: 25:7a:08:e5:6f:a1:de:80:9c:78:a8:db:fb:2a:f5: 3a:9b:ed:c0:3c:87:00:26:b1:89:43:51:f6:b1:0b: fb:71:2c:8b:ae:d0:b3:b8:d0:45:be:33:b3:c6:e4: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:81:B5:21:48:B1:E8:B7:3F:E5:0D:62:0C:33:28:2B:42:11:D0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/5c0f7020-54e0-3991-b7d4-23d5ffd8a7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv6: 2604:cd00:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fe:15:98:c2:fe:d9:12:9c:10:9c:f5:e2:66:cf:13:d9:57: d2:55:63:54:df:65:b7:92:c5:78:46:15:96:ad:c1:93:fc:c1: 79:63:13:34:cc:89:d7:f0:46:f3:5e:06:fb:f2:19:7b:4d:c3: 95:e3:b7:f3:aa:2a:cb:0e:27:24:8a:3d:27:aa:25:29:db:7a: be:03:d6:2d:63:56:95:ed:0c:29:a5:8f:c8:45:59:37:2b:e6: 37:b1:62:b1:ec:87:78:31:78:c3:6c:89:dd:1e:42:1a:cf:58: 95:97:b8:73:39:9e:96:6e:6c:6f:37:ef:4e:1f:9e:98:b1:0d: ed:e3:ef:be:5e:ed:38:ed:17:fb:8e:81:6b:17:fb:c7:83:6e: 3a:80:2e:dd:63:af:d2:f2:51:e7:73:24:82:3d:de:2b:ea:51: b3:6f:29:1a:3f:10:0b:26:30:0d:d7:30:db:5c:26:54:18:1e: cd:5f:2e:db:7a:47:18:58:92:e8:6e:66:3e:7c:3a:41:6a:ff: 79:6f:94:6e:be:13:bf:b4:cc:d5:ee:05:19:53:1d:58:42:0a: 1b:2f:ae:de:a5:a5:6b:67:97:d2:cc:be:ea:da:c5:ba:14:f4: e9:1e:39:78:d1:b9:0d:53:09:f6:90:6e:e7:80:08:3c:b2:c7: 44:a1:26:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6EtsPi30dZwdl56GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDcxNjEzNDMyOFoXDTI2MTAxNDEzNDMyOFowLzEtMCsGA1UEAxMk MjI1Y2VkMGItODIzYy00ZjU4LWE2OWEtNDUzYjQxZDJhYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ1dDoZHeRQxfzmV1bqCF6fqu9WEEFkJIYr8 IU/gzmjVWInOlYGh7Cm/8+0GkyYrHHAjzcsvdsWCDbFwYaDszUehscfQ2Re+Dbsv 8WQBe6NOMdqhnQz2Rfm7zDJXSxTQ9rC4FS5FU0loRAsQfD3etzI+VjLPQew2YzsF T25vQk/C6u3tyQ0Bc+3bvb18UGLPZ+mxttBLPxHcc02zUeVrGnxPUJbIHZu3AMcJ wDxhhOPNX93bw1kADyKMiH39v6eotvu1zG8xSYSLsZV/SURipZElegjlb6HegJx4 qNv7KvU6m+3APIcAJrGJQ1H2sQv7cSyLrtCzuNBFvjOzxuQ2QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBuBtSFIsei3P+UNYgwzKCtCEdB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvNWMwZjcwMjAtNTRlMC0z OTkxLWI3ZDQtMjNkNWZmZDhhN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTNAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJz+FZjC/tkSnBCc9eJmzxPZV9JVY1TfZbeSxXhGFZatwZP8wXlj EzTMidfwRvNeBvvyGXtNw5Xjt/OqKssOJySKPSeqJSnber4D1i1jVpXtDCmlj8hF WTcr5jexYrHsh3gxeMNsid0eQhrPWJWXuHM5npZubG83704fnpixDe3j775e7Tjt F/uOgWsX+8eDbjqALt1jr9LyUedzJII93ivqUbNvKRo/EAsmMA3XMNtcJlQYHs1f Ltt6RxhYkuhuZj58OkFq/3lvlG6+E7+0zNXuBRlTHVhCChsvrt6lpWtnl9LMvura xboU9OkeOXjRuQ1TCfaQbueACDyyx0ShJq0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:12 2026 by rpki-client