$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa File: 20864f6f-43bf-35e8-8286-a62e02cad118.roa (raw, json) Hash identifier: hDGDhIR0wpsQh7GdQK5Xyp/0LI6uaT6AsLk02kv59gc= Subject key identifier: ED:D7:D0:BD:94:1D:7E:B7:F5:3C:10:5C:56:C8:8D:75:4A:03:55:0D Certificate issuer: /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Certificate serial: 010D0C9F4328584E7A64DD91CB68DA34BE4F1980 Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 53587 IP address blocks: 2607:5d00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:dd:91:cb:68:da:34:be:4f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=2a365d85-b0c9-43fd-b480-6715178a91b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:ca:55:80:31:04:19:8e:10:67:f4:41:24: 71:f5:03:31:14:aa:31:32:8d:b4:de:11:f7:53:47: 1c:8e:9a:52:b5:72:bf:ff:c1:b2:7f:ed:ab:23:ac: cb:16:f5:4d:34:da:a9:f3:49:f7:79:ca:ff:11:bb: 0d:9b:93:ef:60:84:35:94:5c:73:18:60:2d:6b:7a: 84:30:4c:dd:5d:5d:e3:91:a5:e6:c5:56:e2:4e:8a: 24:e1:56:3b:fb:37:4b:8c:1c:0c:0a:de:17:b3:73: 42:e3:34:ee:0e:8e:3f:23:a0:38:12:72:b4:82:f2: 7e:79:b2:c1:ec:b8:76:9b:79:fc:4c:9e:0b:e3:80: 35:00:73:a9:45:e3:97:5c:f4:ea:73:e5:e5:66:02: a3:e5:93:dd:83:10:fd:b0:73:c6:b5:f2:c5:b9:86: 01:05:3e:93:bf:d3:08:dd:18:fb:2b:eb:23:9c:64: b6:ea:55:c1:40:bc:8c:46:be:77:a1:fb:59:c5:49: 29:03:e0:d8:40:19:31:58:84:b4:64:ee:9e:c2:04: 2d:01:90:36:71:80:10:87:25:54:f6:54:b5:de:14: b2:b8:db:e6:fe:80:89:d9:9f:5f:ee:0d:25:75:b3: c5:f7:5b:bb:72:be:86:36:5d:b1:b7:44:c8:4a:28: 04:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:D0:BD:94:1D:7E:B7:F5:3C:10:5C:56:C8:8D:75:4A:03:55:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/20864f6f-43bf-35e8-8286-a62e02cad118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl X509v3 Authority Key Identifier: keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer sbgp-ipAddrBlock: critical IPv6: 2607:5d00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d8:a8:be:c4:24:df:d9:eb:13:0b:98:de:7f:57:e9:53:b4: 45:54:4e:18:2d:0b:af:3c:61:58:1c:9a:0e:17:9f:a3:f3:47: 00:3a:a8:7d:3e:ec:ad:c6:82:98:84:26:a8:fa:b7:24:bb:23: 56:da:3e:16:97:bb:80:00:b5:c7:d1:38:74:cd:21:69:58:47: c9:5e:30:ca:8f:6f:bc:fc:eb:d4:b6:4b:d5:1e:3e:10:0e:82: d5:4a:4e:ee:22:c3:7a:0a:65:e6:db:0d:6e:47:89:70:d0:bf: ca:2a:f9:e3:bd:33:ec:6c:b8:99:cd:6b:a9:2f:70:e2:3b:46: ec:28:ed:44:97:36:c8:b7:c8:50:d4:6f:13:93:79:de:5e:f9: 6b:b7:e8:a3:57:a4:1a:3f:20:c7:e0:0c:63:90:fb:00:40:4b: 4a:83:b4:c5:d2:f5:09:7c:1c:de:47:85:56:31:1b:66:7c:f7: 09:f6:bd:49:50:30:ec:7b:8d:85:f3:f6:cf:71:38:cd:cd:1d: 8f:3c:b7:9e:3e:01:87:69:44:34:d3:6b:30:49:90:f3:8c:05: f0:d0:22:45:61:8e:05:5e:fa:7b:40:da:69:aa:ee:55:e9:12: 0c:80:f9:b8:cd:f9:91:b8:90:7e:18:ad:04:ad:b4:27:ab:e0: 41:22:ed:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE56ZN2Ry2jaNL5PGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNjNTIwZDQtY2I4Yi00MjRlLTg2MmEtM2FiZGZiZWRj ZmM4MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk MmEzNjVkODUtYjBjOS00M2ZkLWI0ODAtNjcxNTE3OGE5MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW/KVYAxBBmOEGf0QSRx9QMxFKoxMo203hH3 U0ccjppStXK//8Gyf+2rI6zLFvVNNNqp80n3ecr/EbsNm5PvYIQ1lFxzGGAta3qE MEzdXV3jkaXmxVbiTook4VY7+zdLjBwMCt4Xs3NC4zTuDo4/I6A4EnK0gvJ+ebLB 7Lh2m3n8TJ4L44A1AHOpReOXXPTqc+XlZgKj5ZPdgxD9sHPGtfLFuYYBBT6Tv9MI 3Rj7K+sjnGS26lXBQLyMRr53oftZxUkpA+DYQBkxWIS0ZO6ewgQtAZA2cYAQhyVU 9lS13hSyuNvm/oCJ2Z9f7g0ldbPF91u7cr6GNl2xt0TISigEpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO3X0L2UHX639TwQXFbIjXVKA1UNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1 MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJkZmJlZGNmYzgvMjA4NjRmNmYtNDNiZi0z NWU4LTgyODYtYTYyZTAyY2FkMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTNjNTIwZDQtY2I4Yi00MjRlLTg2 MmEtM2FiZGZiZWRjZmM4L2EzYzUyMGQ0LWNiOGItNDI0ZS04NjJhLTNhYmRmYmVk Y2ZjOC5jcmwwHwYDVR0jBBgwFoAUY5xIHmNNXy4MTNbF1zAEHBLhnLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hM2M1MjBkNC1jYjhiLTQyNGUtODYyYS0zYWJk ZmJlZGNmYzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgddADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCn2Ki+xCTf2esTC5jef1fpU7RFVE4YLQuvPGFYHJoOF5+j80cAOqh9 PuytxoKYhCao+rckuyNW2j4Wl7uAALXH0Th0zSFpWEfJXjDKj2+8/OvUtkvVHj4Q DoLVSk7uIsN6CmXm2w1uR4lw0L/KKvnjvTPsbLiZzWupL3DiO0bsKO1ElzbIt8hQ 1G8Tk3neXvlrt+ijV6QaPyDH4AxjkPsAQEtKg7TF0vUJfBzeR4VWMRtmfPcJ9r1J UDDse42F8/bPcTjNzR2PPLeePgGHaUQ002swSZDzjAXw0CJFYY4FXvp7QNppqu5V 6RIMgPm4zfmRuJB+GK0ErbQnq+BBIu0p -----END CERTIFICATE-----Generated at Tue Jul 14 23:04:21 2026 by rpki-client