$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/204e36d4-c518-3160-a416-ad2b2895a470.roa File: 204e36d4-c518-3160-a416-ad2b2895a470.roa (raw, json) Hash identifier: B/8ldXvxT7keibXXB/YY3e+9s0xqK6wm6MJeEUqMWfU= Subject key identifier: B8:1E:EA:35:09:79:30:F1:70:39:54:9B:04:13:D8:0E:2A:84:B7:1D Certificate issuer: /CN=0c21d90e-4e01-463d-b595-f0bc4e7fa374 Certificate serial: 010D0C9F4328584E9A9C0EADFA0EDB0DA8CBD180 Authority key identifier: 39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/204e36d4-c518-3160-a416-ad2b2895a470.roa Signing time: Fri 24 Jul 2026 09:57:26 +0000 ROA not before: Fri 24 Jul 2026 09:57:26 +0000 ROA not after: Thu 22 Oct 2026 09:57:26 +0000 asID: 10755 IP address blocks: 2604:5f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:9c:0e:ad:fa:0e:db:0d:a8:cb:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21d90e-4e01-463d-b595-f0bc4e7fa374 Validity Not Before: Jul 24 09:57:26 2026 GMT Not After : Oct 22 09:57:26 2026 GMT Subject: CN=9be62140-61fa-44f5-8f6f-73df59dae0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:10:a2:f9:67:f3:16:f6:ea:7e:93:57:b5: 02:f3:eb:e8:ea:a5:ce:cd:b8:a6:03:53:84:d6:e7: 0a:55:cb:f4:30:2c:4c:d5:84:dc:5e:b2:d5:cb:ce: 9e:0d:44:14:82:5d:52:59:8b:3b:dd:01:d0:b2:75: d8:41:ce:e9:9f:01:f9:54:ec:e7:f9:9b:fc:db:a9: 6d:b6:c6:2b:20:1f:7d:f7:50:b9:e9:db:ca:58:77: 9e:ad:db:b6:4d:5f:ab:ef:63:61:2f:70:b9:1b:07: 8b:83:a7:a5:4c:88:f5:26:3c:fc:d2:d6:cb:86:39: 16:26:4b:5c:71:fd:47:a2:f7:6f:c8:45:60:dc:6b: 48:45:2e:f6:79:78:b5:4b:24:ba:85:e6:3d:f7:1f: e9:64:4e:9e:b1:9c:49:ed:68:e2:19:1b:3f:51:79: 50:fa:2d:b0:6c:a3:6f:19:37:c5:b2:28:20:af:db: 2a:6e:40:e7:cb:88:8e:01:8a:9f:c5:67:11:93:d0: 76:1a:7f:2e:8a:7d:d1:06:aa:fe:f7:6b:83:34:a3: ab:a6:89:18:a1:0f:0d:10:40:63:62:79:1f:b9:15: 9e:78:dc:b7:27:9e:f5:8c:79:f9:03:b2:ee:c5:b9: b7:48:b9:36:5b:fa:95:71:23:ee:c0:e6:b1:f8:1a: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1E:EA:35:09:79:30:F1:70:39:54:9B:04:13:D8:0E:2A:84:B7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/204e36d4-c518-3160-a416-ad2b2895a470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374/0c21d90e-4e01-463d-b595-f0bc4e7fa374.crl X509v3 Authority Key Identifier: keyid:39:05:AB:E8:15:3B:14:E6:99:54:C4:2F:2C:A3:C3:44:75:79:F1:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c21d90e-4e01-463d-b595-f0bc4e7fa374.cer sbgp-ipAddrBlock: critical IPv6: 2604:5f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a9:63:b7:12:6a:37:33:de:f5:74:d0:d8:f2:6c:1d:10:15: 5b:29:e7:03:f5:c3:1b:6c:10:51:86:fc:5d:b3:a8:9a:78:77: 5d:f9:75:2a:90:10:d5:ee:3a:9b:af:0f:ab:17:61:7a:19:8a: 86:39:31:aa:c7:f2:5b:3d:9d:db:6c:74:01:13:1f:f9:0f:70: 41:21:40:fa:79:6e:d7:7b:50:b4:9e:dc:a7:a6:6a:86:d0:26: 1d:ed:af:a5:be:bb:07:b1:04:50:3c:c1:52:a5:a6:23:40:66: 7d:b3:8f:c6:a1:16:b2:0f:0d:a9:bf:83:f9:78:ab:98:2b:cb: 6a:03:4c:13:3b:df:fc:ea:dd:4a:40:dc:60:50:3e:5d:16:69: 68:18:47:e7:3c:d5:db:58:07:e9:b4:6f:35:6e:f7:d2:47:58: 8a:ce:e0:39:0f:53:83:4e:88:8d:00:19:3c:b2:3b:28:83:bd: c2:d9:3f:c6:27:2d:7d:49:a8:f0:4a:8a:7c:a9:dc:9f:95:2e: 53:6e:8b:bc:f7:9c:c4:9c:93:68:41:91:d1:5d:c5:e1:00:d0: 52:0c:ec:9d:79:fe:14:99:23:16:7a:02:14:14:a0:64:16:36: 0b:cf:bf:4f:bc:c7:87:bf:8d:bc:0e:d0:43:14:be:8e:9d:ba: 4a:76:a2:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6anA6t+g7bDajL0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyMWQ5MGUtNGUwMS00NjNkLWI1OTUtZjBiYzRlN2Zh Mzc0MB4XDTI2MDcyNDA5NTcyNloXDTI2MTAyMjA5NTcyNlowLzEtMCsGA1UEAxMk OWJlNjIxNDAtNjFmYS00NGY1LThmNmYtNzNkZjU5ZGFlMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiagQovln8xb26n6TV7UC8+vo6qXOzbimA1OE 1ucKVcv0MCxM1YTcXrLVy86eDUQUgl1SWYs73QHQsnXYQc7pnwH5VOzn+Zv826lt tsYrIB9991C56dvKWHeerdu2TV+r72NhL3C5GweLg6elTIj1Jjz80tbLhjkWJktc cf1HovdvyEVg3GtIRS72eXi1SyS6heY99x/pZE6esZxJ7WjiGRs/UXlQ+i2wbKNv GTfFsiggr9sqbkDny4iOAYqfxWcRk9B2Gn8uin3RBqr+92uDNKOrpokYoQ8NEEBj YnkfuRWeeNy3J571jHn5A7Luxbm3SLk2W/qVcSPuwOax+BpsXQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLge6jUJeTDxcDlUmwQT2A4qhLcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wYzIx ZDkwZS00ZTAxLTQ2M2QtYjU5NS1mMGJjNGU3ZmEzNzQvMjA0ZTM2ZDQtYzUxOC0z MTYwLWE0MTYtYWQyYjI4OTVhNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGMyMWQ5MGUtNGUwMS00NjNkLWI1 OTUtZjBiYzRlN2ZhMzc0LzBjMjFkOTBlLTRlMDEtNDYzZC1iNTk1LWYwYmM0ZTdm YTM3NC5jcmwwHwYDVR0jBBgwFoAUOQWr6BU7FOaZVMQvLKPDRHV58aAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wYzIxZDkwZS00ZTAxLTQ2M2QtYjU5NS1mMGJj NGU3ZmEzNzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRfADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4qWO3Emo3M971dNDY8mwdEBVbKecD9cMbbBBRhvxds6iaeHdd+XUq kBDV7jqbrw+rF2F6GYqGOTGqx/JbPZ3bbHQBEx/5D3BBIUD6eW7Xe1C0ntynpmqG 0CYd7a+lvrsHsQRQPMFSpaYjQGZ9s4/GoRayDw2pv4P5eKuYK8tqA0wTO9/86t1K QNxgUD5dFmloGEfnPNXbWAfptG81bvfSR1iKzuA5D1ODToiNABk8sjsog73C2T/G Jy19SajwSop8qdyflS5Tbou895zEnJNoQZHRXcXhANBSDOydef4UmSMWegIUFKBk FjYLz79PvMeHv428DtBDFL6OnbpKdqKp -----END CERTIFICATE-----Generated at Wed Jul 29 20:34:15 2026 by rpki-client