$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/688fcf7a-e2bc-38a8-990b-4620702db34f.roa File: 688fcf7a-e2bc-38a8-990b-4620702db34f.roa (raw, json) Hash identifier: Xx6GU1scXwur5/qgOO+b26dKWXEEe3pn4TmPdB46phs= Subject key identifier: A0:10:1A:3D:5D:78:FF:8D:74:DC:BC:C2:0D:AD:17:CF:55:43:BB:ED Certificate issuer: /CN=ad994394-7538-4c14-bccf-b913fc671117 Certificate serial: 010D0C9F4328584E6F476A7842C5F2E3FC2AFC00 Authority key identifier: BD:A4:46:B8:82:0C:E8:84:2D:58:57:CF:F2:77:CC:FE:E5:66:75:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/688fcf7a-e2bc-38a8-990b-4620702db34f.roa Signing time: Wed 08 Jul 2026 21:27:08 +0000 ROA not before: Wed 08 Jul 2026 21:27:08 +0000 ROA not after: Tue 06 Oct 2026 21:27:08 +0000 asID: 394557 IP address blocks: 2602:fb1d:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/ad994394-7538-4c14-bccf-b913fc671117.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/ad994394-7538-4c14-bccf-b913fc671117.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:47:6a:78:42:c5:f2:e3:fc:2a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad994394-7538-4c14-bccf-b913fc671117 Validity Not Before: Jul 8 21:27:08 2026 GMT Not After : Oct 6 21:27:08 2026 GMT Subject: CN=3178d8cf-242b-49c8-9282-6d431b0b6b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d7:68:2f:27:57:90:94:d0:be:c4:1a:d2:b6: f7:28:aa:9f:a2:67:80:e5:2a:0a:c3:46:67:37:76: aa:4a:47:a6:6f:d3:dc:41:5a:00:a3:3e:f4:2f:cc: 4f:e8:fe:11:95:c9:02:2b:91:62:f8:4f:30:32:b6: 3d:17:6d:c7:05:34:52:43:68:96:78:4f:9f:75:6e: 70:76:87:ba:71:e4:a2:ab:94:70:b0:7c:a8:ec:35: 15:79:b1:cc:b3:3a:3a:7f:44:ab:b3:63:23:de:8d: d6:b2:d9:63:4f:3b:61:84:f2:46:6a:0c:c7:66:f9: c7:c0:29:7b:2f:84:8c:d7:c8:c0:35:67:f6:bb:69: e0:09:7d:55:18:d0:51:8a:0b:bd:bc:80:54:df:66: a1:c8:5e:bb:18:5b:e5:a0:90:59:ca:04:eb:34:d9: 11:3a:43:07:40:5a:e8:b1:6b:7b:9f:94:76:a8:9a: 18:ae:b9:bd:d3:1f:31:f2:8f:71:5f:51:a3:47:26: 46:47:4f:3d:7a:d7:be:03:c6:da:8f:29:8b:64:85: a6:20:6e:c8:6f:fa:cc:de:4a:97:cb:37:d4:77:2e: 81:9c:9e:9a:dd:5a:e6:5a:d4:a1:b8:c4:33:67:d8: 22:af:24:a2:bb:7e:22:5a:a0:2d:1d:31:61:9a:41: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:10:1A:3D:5D:78:FF:8D:74:DC:BC:C2:0D:AD:17:CF:55:43:BB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/688fcf7a-e2bc-38a8-990b-4620702db34f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117/ad994394-7538-4c14-bccf-b913fc671117.crl X509v3 Authority Key Identifier: keyid:BD:A4:46:B8:82:0C:E8:84:2D:58:57:CF:F2:77:CC:FE:E5:66:75:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ad994394-7538-4c14-bccf-b913fc671117.cer sbgp-ipAddrBlock: critical IPv6: 2602:fb1d:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ec:bf:10:55:ea:c1:83:82:bb:89:97:2b:81:30:70:55:29: 34:e7:f3:2f:5d:4f:dd:50:cb:05:2a:71:a1:4f:57:5a:49:db: b0:53:e6:df:65:c8:e5:90:43:01:c3:15:12:9d:8c:fc:8b:54: 2a:29:55:3e:47:a7:5b:07:28:f9:42:de:14:77:8c:0d:6d:9a: ec:af:99:fe:e7:fb:01:66:0e:95:ef:24:40:81:43:2a:04:6d: 8b:ec:16:76:c1:94:84:ea:33:4f:48:0f:83:8e:97:f7:81:0e: f0:8e:80:16:49:57:6b:be:29:41:bb:a4:4f:62:59:ac:3e:6d: 10:b9:70:7d:96:c4:71:b6:e1:25:27:3d:ab:41:c5:b0:0c:87: 88:96:ab:da:b2:86:81:75:96:13:06:11:c5:cd:31:ef:63:c8: 03:3a:f2:65:6e:d1:c7:15:1c:bb:9d:2d:60:d8:a5:4a:bd:38: f4:51:4f:96:f6:a4:bf:13:12:26:d3:aa:00:fd:56:6d:c0:c7: c4:b2:4c:5a:28:93:39:ac:61:fe:6f:54:67:96:90:17:c2:3c: 15:f4:5a:a3:93:a4:d7:98:32:b3:bb:14:0b:57:ce:33:37:bd: 6d:f2:e5:12:46:72:a6:bf:37:9d:c6:e2:cc:77:c1:fd:62:af: 71:f5:4d:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vR2p4QsXy4/wq/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ5OTQzOTQtNzUzOC00YzE0LWJjY2YtYjkxM2ZjNjcx MTE3MB4XDTI2MDcwODIxMjcwOFoXDTI2MTAwNjIxMjcwOFowLzEtMCsGA1UEAxMk MzE3OGQ4Y2YtMjQyYi00OWM4LTkyODItNmQ0MzFiMGI2YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiddoLydXkJTQvsQa0rb3KKqfomeA5SoKw0Zn N3aqSkemb9PcQVoAoz70L8xP6P4RlckCK5Fi+E8wMrY9F23HBTRSQ2iWeE+fdW5w doe6ceSiq5RwsHyo7DUVebHMszo6f0Srs2Mj3o3WstljTzthhPJGagzHZvnHwCl7 L4SM18jANWf2u2ngCX1VGNBRigu9vIBU32ahyF67GFvloJBZygTrNNkROkMHQFro sWt7n5R2qJoYrrm90x8x8o9xX1GjRyZGR089ete+A8bajymLZIWmIG7Ib/rM3kqX yzfUdy6BnJ6a3VrmWtShuMQzZ9girySiu34iWqAtHTFhmkH+EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKAQGj1deP+NdNy8wg2tF89VQ7vtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZDk5 NDM5NC03NTM4LTRjMTQtYmNjZi1iOTEzZmM2NzExMTcvNjg4ZmNmN2EtZTJiYy0z OGE4LTk5MGItNDYyMDcwMmRiMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWQ5OTQzOTQtNzUzOC00YzE0LWJj Y2YtYjkxM2ZjNjcxMTE3L2FkOTk0Mzk0LTc1MzgtNGMxNC1iY2NmLWI5MTNmYzY3 MTExNy5jcmwwHwYDVR0jBBgwFoAUvaRGuIIM6IQtWFfP8nfM/uVmdbMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZDk5NDM5NC03NTM4LTRjMTQtYmNjZi1iOTEz ZmM2NzExMTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7HQAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3svxBV6sGDgruJlyuBMHBVKTTn8y9dT91QywUqcaFPV1pJ27BT 5t9lyOWQQwHDFRKdjPyLVCopVT5Hp1sHKPlC3hR3jA1tmuyvmf7n+wFmDpXvJECB QyoEbYvsFnbBlITqM09ID4OOl/eBDvCOgBZJV2u+KUG7pE9iWaw+bRC5cH2WxHG2 4SUnPatBxbAMh4iWq9qyhoF1lhMGEcXNMe9jyAM68mVu0ccVHLudLWDYpUq9OPRR T5b2pL8TEibTqgD9Vm3Ax8SyTFookzmsYf5vVGeWkBfCPBX0WqOTpNeYMrO7FAtX zjM3vW3y5RJGcqa/N53G4sx3wf1ir3H1Tf0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:58:11 2026 by rpki-client