$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/3d5e3599-58be-34e3-a466-4c629f8e071b.roa File: 3d5e3599-58be-34e3-a466-4c629f8e071b.roa (raw, json) Hash identifier: sIWM4ulHZZK6DqgNR3F34CTQTitXFDQyDxbc6ghDTxo= Subject key identifier: 6C:F9:7A:03:B3:32:7B:E2:8A:C1:BA:A8:E8:65:21:7E:1D:B7:1F:D6 Certificate issuer: /CN=ace38bc8-18be-4d46-9e19-5f82b50dc818 Certificate serial: 010D0C9F4328584E6C42BA39D8D55F12FB9ED110 Authority key identifier: 95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/3d5e3599-58be-34e3-a466-4c629f8e071b.roa Signing time: Tue 07 Jul 2026 19:30:16 +0000 ROA not before: Tue 07 Jul 2026 19:30:16 +0000 ROA not after: Mon 05 Oct 2026 19:30:16 +0000 asID: 54847 IP address blocks: 2606:b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:42:ba:39:d8:d5:5f:12:fb:9e:d1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace38bc8-18be-4d46-9e19-5f82b50dc818 Validity Not Before: Jul 7 19:30:16 2026 GMT Not After : Oct 5 19:30:16 2026 GMT Subject: CN=3b01e15b-e6c4-4b74-a24e-30f51a5df298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:a6:f0:12:f9:9e:c7:e1:76:35:37:ab:b9: cb:d7:fe:2a:e3:af:c3:4b:bf:d3:6a:0f:5b:51:ff: 29:dd:d7:94:9d:85:66:6a:76:b7:89:68:62:1c:bf: 9c:ef:f2:ee:97:10:9d:f7:b5:c2:51:0d:f2:89:46: 0e:0b:87:a2:d9:9a:f6:97:2b:fb:a4:89:8f:2f:6f: d2:f6:a4:8b:99:d8:1d:2a:c6:da:49:20:99:f9:a2: 53:8a:3c:1e:c1:b0:b8:fa:90:7d:15:b8:7c:25:c3: 43:78:d0:f9:75:e1:3d:79:1c:42:d7:32:bb:a6:2d: bd:d0:7b:1c:64:70:5e:c5:88:8b:b2:77:9f:c7:b6: 39:f5:b0:95:49:17:01:d3:fe:94:aa:89:60:3f:a9: 68:be:a3:b2:76:4b:0f:70:32:15:d3:d3:24:9c:3e: c8:db:f1:84:ee:b6:78:96:99:15:4a:e0:6b:fd:18: 2f:10:f0:2f:bb:8f:ae:34:8e:a3:5b:6f:e9:b5:51: d7:37:31:c6:eb:d3:dd:bd:be:da:84:95:20:85:e0: 67:25:d8:8b:32:ca:99:c4:da:3f:cf:54:da:d9:83: d1:1e:8a:b5:1d:58:76:30:01:7c:a6:76:24:71:1e: 27:77:d1:0c:0f:1d:82:50:4f:30:b0:f9:d0:fe:e8: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:7A:03:B3:32:7B:E2:8A:C1:BA:A8:E8:65:21:7E:1D:B7:1F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/3d5e3599-58be-34e3-a466-4c629f8e071b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818/ace38bc8-18be-4d46-9e19-5f82b50dc818.crl X509v3 Authority Key Identifier: keyid:95:42:92:F6:8A:A7:EF:54:CC:7C:AD:E2:42:E2:08:A3:C2:D7:C0:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ace38bc8-18be-4d46-9e19-5f82b50dc818.cer sbgp-ipAddrBlock: critical IPv6: 2606:b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:2f:39:20:45:d8:cd:51:c2:43:c1:8f:12:94:4a:8a:76:f7: 1e:e8:e2:68:1b:97:e9:78:3d:08:9e:e8:32:fd:b5:ad:b8:06: 6d:e2:5f:0f:57:51:c3:cc:05:e8:84:b8:72:61:f4:da:8c:48: 8b:a6:0e:0e:ef:a6:a6:c2:2d:ad:1d:29:67:74:d5:7a:72:6a: 34:d8:7b:16:1b:e7:d8:35:8c:f9:71:95:c1:18:54:c4:a7:69: 70:63:3e:77:f9:08:87:d4:9b:b8:80:32:8c:3e:5f:b2:73:36: 93:88:c8:a0:cd:72:91:75:a2:41:e7:8c:df:b2:ce:28:c7:a8: 80:fb:6c:e3:15:fd:fa:84:11:32:d3:1e:89:60:21:5d:37:ec: 93:df:47:d6:2d:83:c9:bf:5b:13:1b:8a:c0:3e:0d:3a:47:e0: 03:85:48:75:7b:b2:ed:0b:01:f0:28:6d:ad:3b:df:19:39:bb: 4e:14:64:95:79:b7:f5:ba:22:9f:93:cd:fe:dd:59:ea:f8:35: af:ed:0f:c0:12:4d:29:60:47:15:ad:9c:66:37:44:ef:cb:f8: 61:8b:91:f9:e3:a9:c8:4a:5d:32:48:33:ff:6a:0f:8e:37:3c: 11:71:fd:73:58:14:6a:93:1e:e7:6f:89:25:40:b5:7d:0f:95: 07:86:47:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5sQro52NVfEvue0RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNlMzhiYzgtMThiZS00ZDQ2LTllMTktNWY4MmI1MGRj ODE4MB4XDTI2MDcwNzE5MzAxNloXDTI2MTAwNTE5MzAxNlowLzEtMCsGA1UEAxMk M2IwMWUxNWItZTZjNC00Yjc0LWEyNGUtMzBmNTFhNWRmMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlWm8BL5nsfhdjU3q7nL1/4q46/DS7/Tag9b Uf8p3deUnYVmana3iWhiHL+c7/LulxCd97XCUQ3yiUYOC4ei2Zr2lyv7pImPL2/S 9qSLmdgdKsbaSSCZ+aJTijwewbC4+pB9Fbh8JcNDeND5deE9eRxC1zK7pi290Hsc ZHBexYiLsnefx7Y59bCVSRcB0/6UqolgP6lovqOydksPcDIV09MknD7I2/GE7rZ4 lpkVSuBr/RgvEPAvu4+uNI6jW2/ptVHXNzHG69Pdvb7ahJUgheBnJdiLMsqZxNo/ z1Ta2YPRHoq1HVh2MAF8pnYkcR4nd9EMDx2CUE8wsPnQ/ugzCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGz5egOzMnviisG6qOhlIX4dtx/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hY2Uz OGJjOC0xOGJlLTRkNDYtOWUxOS01ZjgyYjUwZGM4MTgvM2Q1ZTM1OTktNThiZS0z NGUzLWE0NjYtNGM2MjlmOGUwNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWNlMzhiYzgtMThiZS00ZDQ2LTll MTktNWY4MmI1MGRjODE4L2FjZTM4YmM4LTE4YmUtNGQ0Ni05ZTE5LTVmODJiNTBk YzgxOC5jcmwwHwYDVR0jBBgwFoAUlUKS9oqn71TMfK3iQuIIo8LXwFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hY2UzOGJjOC0xOGJlLTRkNDYtOWUxOS01Zjgy YjUwZGM4MTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCvLzkgRdjNUcJDwY8SlEqKdvce6OJoG5fpeD0Inugy/bWtuAZt4l8P V1HDzAXohLhyYfTajEiLpg4O76amwi2tHSlndNV6cmo02HsWG+fYNYz5cZXBGFTE p2lwYz53+QiH1Ju4gDKMPl+yczaTiMigzXKRdaJB54zfss4ox6iA+2zjFf36hBEy 0x6JYCFdN+yT30fWLYPJv1sTG4rAPg06R+ADhUh1e7LtCwHwKG2tO98ZObtOFGSV ebf1uiKfk83+3Vnq+DWv7Q/AEk0pYEcVrZxmN0Tvy/hhi5H546nISl0ySDP/ag+O NzwRcf1zWBRqkx7nb4klQLV9D5UHhkca -----END CERTIFICATE-----Generated at Tue Jul 21 20:57:46 2026 by rpki-client