$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: 2B/hLGWDImh8YeNjtgieLvKpmC/2owqAfqCr6UeeYtw= Subject key identifier: 12:E2:71:41:4E:09:72:E4:B8:89:43:8D:84:51:43:7B:09:C3:42:5C Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584E6F3A23D1E156D76541FA7DC0 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:23:d1:e1:56:d7:65:41:fa:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=7fa912e8-222b-4ac6-8387-08edaf37380e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:89:a0:31:d1:ea:6b:83:de:ac:29:30:65: 55:82:b2:b2:a5:98:64:03:39:60:27:10:be:e2:4f: c5:18:b4:46:1b:f6:17:ba:a4:f9:3c:91:21:2c:a5: 5a:bc:ae:d4:5e:59:c2:7f:87:22:19:5b:23:b7:24: f9:95:c2:07:18:db:e9:13:ae:a1:34:9f:ef:4a:a0: 42:5d:b1:9e:da:fa:f0:7f:33:40:2f:9c:53:32:3a: 7e:79:3c:c4:84:0a:9a:ea:ae:14:e5:e7:cb:63:8e: c4:43:7b:26:81:7a:86:5b:29:97:22:96:7d:69:74: 11:3b:cf:e2:53:a7:db:9e:49:e2:9c:df:4f:57:4c: 36:c6:18:d4:c4:92:42:dc:6c:79:b1:46:ac:4f:49: 49:e6:26:e2:20:27:e4:05:1d:1a:37:8e:04:a7:db: de:f4:f4:2d:5d:14:bb:bf:b7:3b:f6:de:c1:d3:2a: 90:0e:c0:36:12:fa:cd:3b:a4:8f:71:56:af:f3:60: 15:84:3d:ea:8b:1b:b5:7b:bb:5c:fa:24:f2:17:67: 0a:2a:80:b6:f8:7c:e9:ab:70:0e:9a:19:e2:a6:ad: ca:8a:e0:bc:f4:4f:70:28:68:9a:a4:02:d5:b1:db: 54:fc:54:d1:c9:0c:1a:25:3a:c1:5a:ad:ca:bf:80: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E2:71:41:4E:09:72:E4:B8:89:43:8D:84:51:43:7B:09:C3:42:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8e:be:f4:9c:53:ff:21:a9:9f:ee:fa:a5:5e:39:14:d1:ac: 5f:db:af:9c:4b:5b:69:fa:41:72:cf:63:cc:b9:50:80:4a:77: 60:cb:45:e5:e8:50:d6:9a:eb:c2:d1:13:a0:a5:c9:4a:06:0a: 57:8f:37:ef:da:7c:0a:00:a5:de:8c:46:d4:75:a0:05:78:23: a7:0c:41:b0:99:d6:d2:04:2b:e1:fd:3f:e4:43:12:65:03:87: 5d:ed:e9:3c:ca:25:15:86:1e:ee:ae:c7:f8:a8:db:3f:42:c9: fe:65:3b:a9:d6:d4:41:27:20:5a:84:c4:f1:98:8f:34:8e:7c: 89:45:1a:3b:d8:bb:d1:c4:fa:bb:6e:0b:e4:72:40:69:a7:4d: 16:7b:a5:37:3c:2e:97:63:fb:3f:25:56:1c:19:6c:bf:26:dd: 05:3d:3e:92:ed:82:1b:97:1a:56:53:71:96:83:92:38:85:00: 0e:6d:44:b0:50:ca:0a:56:61:ad:27:12:85:62:43:11:c6:74: 25:1b:ac:eb:ce:03:0f:78:5d:b3:e7:85:36:b7:f8:9c:dc:2b: 5c:43:6c:79:17:63:c5:00:98:b0:f8:33:1b:9e:6b:b6:cc:04: 1a:92:e7:14:01:21:dd:fb:12:ba:af:a9:62:6a:c7:de:8b:6a: fd:48:25:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vOiPR4VbXZUH6fcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk N2ZhOTEyZTgtMjIyYi00YWM2LTgzODctMDhlZGFmMzczODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA066JoDHR6muD3qwpMGVVgrKypZhkAzlgJxC+ 4k/FGLRGG/YXuqT5PJEhLKVavK7UXlnCf4ciGVsjtyT5lcIHGNvpE66hNJ/vSqBC XbGe2vrwfzNAL5xTMjp+eTzEhAqa6q4U5efLY47EQ3smgXqGWymXIpZ9aXQRO8/i U6fbnkninN9PV0w2xhjUxJJC3Gx5sUasT0lJ5ibiICfkBR0aN44Ep9ve9PQtXRS7 v7c79t7B0yqQDsA2EvrNO6SPcVav82AVhD3qixu1e7tc+iTyF2cKKoC2+Hzpq3AO mhnipq3KiuC89E9wKGiapALVsdtU/FTRyQwaJTrBWq3Kv4CKcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLicUFOCXLkuIlDjYRRQ3sJw0JcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEKOvvScU/8hqZ/u+qVeORTRrF/br5xLW2n6QXLPY8y5UIBKd2DL ReXoUNaa68LRE6ClyUoGClePN+/afAoApd6MRtR1oAV4I6cMQbCZ1tIEK+H9P+RD EmUDh13t6TzKJRWGHu6ux/io2z9Cyf5lO6nW1EEnIFqExPGYjzSOfIlFGjvYu9HE +rtuC+RyQGmnTRZ7pTc8Lpdj+z8lVhwZbL8m3QU9PpLtghuXGlZTcZaDkjiFAA5t RLBQygpWYa0nEoViQxHGdCUbrOvOAw94XbPnhTa3+JzcK1xDbHkXY8UAmLD4Mxue a7bMBBqS5xQBId37ErqvqWJqx96Lav1IJZo= -----END CERTIFICATE-----Generated at Mon Jul 13 11:42:39 2026 by rpki-client