$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/df1e6b53-af79-3afc-bae6-878861e2a0f3.roa File: df1e6b53-af79-3afc-bae6-878861e2a0f3.roa (raw, json) Hash identifier: 2uPUYc3KpcU3e0BcMkGMKEc3NpSjgwBWoNjadmeaCiQ= Subject key identifier: 22:B5:C2:54:87:90:3B:7F:2C:2D:86:2B:81:AB:73:11:39:6A:E0:A2 Certificate issuer: /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Certificate serial: 010D0C9F4328584E878E542B718E237ECCF01700 Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/df1e6b53-af79-3afc-bae6-878861e2a0f3.roa Signing time: Fri 17 Jul 2026 14:09:25 +0000 ROA not before: Fri 17 Jul 2026 14:09:25 +0000 ROA not after: Thu 15 Oct 2026 14:09:25 +0000 asID: 7352 IP address blocks: 2604:cd00:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:8e:54:2b:71:8e:23:7e:cc:f0:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20 Validity Not Before: Jul 17 14:09:25 2026 GMT Not After : Oct 15 14:09:25 2026 GMT Subject: CN=d4013aab-c888-43a1-b324-3ad8db5a92b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:47:49:ef:fa:ac:44:71:0d:89:78:4e:1d:fe: 46:ea:31:a7:3d:33:49:25:ce:13:b2:1e:2e:d9:25: e5:fc:cc:12:6d:8e:a4:ed:a1:e6:ad:54:8e:a8:df: 4e:c3:dc:98:e8:ee:27:e5:19:38:2e:23:91:fc:8f: 73:58:b5:2a:a5:99:c1:12:26:ac:8e:1b:a1:5f:93: 3d:c5:88:cc:18:d2:52:de:39:25:31:2d:69:ce:bb: 22:ea:ed:a2:a4:70:f5:06:c8:b2:bd:4d:f0:ed:78: f5:62:8c:ff:8d:4f:07:6e:f9:56:b5:76:32:b1:20: 73:2b:b2:95:02:52:85:80:fd:93:10:9d:88:30:af: 2f:79:66:9f:65:70:2c:30:0c:e6:0a:68:ea:1d:d5: 25:1e:fb:61:a7:c5:7b:95:ae:02:c9:d9:ba:75:cd: b3:6a:a4:bf:de:71:04:10:24:8d:37:07:44:72:34: e1:3a:e6:e0:9f:16:54:2a:b8:e0:37:54:80:50:db: c4:89:23:ea:e1:5d:69:82:fe:5c:af:e3:1d:10:81: 38:42:5c:4d:bc:41:74:16:ff:52:08:7f:9a:54:15: 81:8d:e8:d1:94:c7:d6:72:8b:22:1a:70:a8:d0:80: 75:bf:48:e2:e1:53:46:1a:27:2d:ba:c7:1f:ef:e9: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:C2:54:87:90:3B:7F:2C:2D:86:2B:81:AB:73:11:39:6A:E0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/df1e6b53-af79-3afc-bae6-878861e2a0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl X509v3 Authority Key Identifier: keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer sbgp-ipAddrBlock: critical IPv6: 2604:cd00:3000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:59:9b:1f:a6:03:77:f8:55:04:48:1a:81:f4:dd:1b:75:07: fe:4e:d7:0a:67:d0:14:6e:02:c4:59:ac:b3:5f:ee:39:44:e8: 95:71:47:b9:a9:7b:07:ce:07:ed:29:58:8c:ab:86:c9:f5:8c: 02:48:e9:a9:68:d9:f8:cd:94:12:b0:18:e5:a5:8c:81:57:bf: 65:f8:00:c5:db:74:0c:d5:1d:28:a8:a0:3a:cc:f6:84:f4:7a: 17:c7:06:5f:34:89:3f:e4:46:b7:d6:61:80:c5:d3:59:e9:4d: a4:83:f9:1a:37:05:1a:ef:9a:64:c3:33:b4:0c:15:bf:36:e1: bd:22:a3:6d:f5:89:ce:f9:4f:6a:e4:33:5b:c1:27:ba:eb:a7: 2e:0a:6a:59:ba:8c:da:54:1b:e0:ed:45:1d:4c:55:24:12:84: d3:cc:e2:a8:60:81:d9:c0:4a:21:5c:7f:88:77:00:19:a3:08: 3b:ab:d1:68:64:14:d1:fb:b3:7a:d9:65:9d:e9:a4:4c:00:ca: f2:36:02:37:bb:5d:69:89:a9:6f:f6:97:bd:f5:0a:73:fd:c7: a9:a7:25:88:db:c6:d3:02:9c:ec:d1:3c:1d:66:b5:d6:8c:61: 4a:cb:2a:d0:78:2e:fd:c8:cd:79:6c:9b:05:8d:f6:8a:62:5d: e2:53:c4:ba -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6HjlQrcY4jfszwFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyM2Y4MmItZGZkNS00MzI4LTgyNTYtOGQ3YWJiODg2 YjIwMB4XDTI2MDcxNzE0MDkyNVoXDTI2MTAxNTE0MDkyNVowLzEtMCsGA1UEAxMk ZDQwMTNhYWItYzg4OC00M2ExLWIzMjQtM2FkOGRiNWE5MmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0dJ7/qsRHENiXhOHf5G6jGnPTNJJc4Tsh4u 2SXl/MwSbY6k7aHmrVSOqN9Ow9yY6O4n5Rk4LiOR/I9zWLUqpZnBEiasjhuhX5M9 xYjMGNJS3jklMS1pzrsi6u2ipHD1BsiyvU3w7Xj1Yoz/jU8HbvlWtXYysSBzK7KV AlKFgP2TEJ2IMK8veWafZXAsMAzmCmjqHdUlHvthp8V7la4Cydm6dc2zaqS/3nEE ECSNNwdEcjThOubgnxZUKrjgN1SAUNvEiSPq4V1pgv5cr+MdEIE4QlxNvEF0Fv9S CH+aVBWBjejRlMfWcosiGnCo0IB1v0ji4VNGGictuscf7+nI7wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCK1wlSHkDt/LC2GK4GrcxE5auCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZTIz ZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdhYmI4ODZiMjAvZGYxZTZiNTMtYWY3OS0z YWZjLWJhZTYtODc4ODYxZTJhMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmUyM2Y4MmItZGZkNS00MzI4LTgy NTYtOGQ3YWJiODg2YjIwLzJlMjNmODJiLWRmZDUtNDMyOC04MjU2LThkN2FiYjg4 NmIyMC5jcmwwHwYDVR0jBBgwFoAUUvNQHn5BkIQkCln5w3tQA2NaaykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZTIzZjgyYi1kZmQ1LTQzMjgtODI1Ni04ZDdh YmI4ODZiMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgTNADAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABlmbH6YDd/hVBEgagfTdG3UH/k7XCmfQFG4CxFmss1/uOUTolXFH ual7B84H7SlYjKuGyfWMAkjpqWjZ+M2UErAY5aWMgVe/ZfgAxdt0DNUdKKigOsz2 hPR6F8cGXzSJP+RGt9ZhgMXTWelNpIP5GjcFGu+aZMMztAwVvzbhvSKjbfWJzvlP auQzW8EnuuunLgpqWbqM2lQb4O1FHUxVJBKE08ziqGCB2cBKIVx/iHcAGaMIO6vR aGQU0fuzetllnemkTADK8jYCN7tdaYmpb/aXvfUKc/3HqacliNvG0wKc7NE8HWa1 1oxhSssq0Hgu/cjNeWybBY32imJd4lPEug== -----END CERTIFICATE-----Generated at Tue Jul 21 20:55:48 2026 by rpki-client