$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa File: ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa (raw, json) Hash identifier: DNZwUUmG+vRyt47v5hO6rXUS5NYJwHBJB7M2qNv0H6c= Subject key identifier: 56:09:1F:36:E5:8B:67:01:37:EC:2E:D5:51:EA:FB:54:02:9F:72:27 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8C8A507BE23526DCD8169600 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 11404 IP address blocks: 2607:f060::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:50:7b:e2:35:26:dc:d8:16:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=3f421211-aba8-403e-9605-86b52c7853d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:3d:bb:bf:b3:4d:32:1c:f1:b4:64:39:67: 74:5b:d5:12:37:76:3e:95:fe:52:90:7f:a1:b9:a0: d7:21:94:ac:7a:2e:31:24:21:dd:b4:49:9e:19:c5: b4:ec:4a:6f:2e:f2:13:50:e4:ef:0f:68:ea:ea:13: 7b:e9:c1:c1:0a:13:64:99:53:d2:d0:ae:8f:2d:71: 42:12:53:6c:48:8a:83:24:9e:16:f0:77:4e:5b:56: 6d:11:a9:ee:24:86:f1:a6:00:b5:4c:49:b3:2e:9d: 84:30:7e:c3:36:b3:8d:1a:59:82:4d:17:16:38:32: 5f:97:14:f0:da:94:33:41:54:b9:f1:70:2e:ee:fb: 88:cc:1d:ca:24:30:2f:a1:cc:7e:20:87:58:8b:0d: 4b:19:31:67:fa:79:de:ec:ff:c4:f3:95:40:ed:4d: 6e:25:b6:b7:02:1c:72:b1:60:7d:6c:80:fe:74:04: ae:e1:09:91:9e:f3:95:09:de:88:aa:ad:c9:34:97: 7e:47:4c:8c:24:d7:ff:e3:13:e3:5c:dd:33:88:c9: c0:c6:f7:81:ef:1a:3e:55:ba:d1:58:44:70:de:1b: 18:22:02:a9:00:6f:9e:1e:a1:fb:48:ed:e7:83:85: 3a:77:5e:d8:9b:0a:62:6d:b5:df:4f:2f:a5:3f:2d: b4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:09:1F:36:E5:8B:67:01:37:EC:2E:D5:51:EA:FB:54:02:9F:72:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ef4d9d76-cc15-340f-a0d4-ba606dc7ef99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2607:f060::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d3:f9:c1:f1:0a:71:6a:bb:09:a9:98:b2:20:15:9f:08:0b: d6:5b:07:a6:3a:57:cd:28:de:64:34:69:0c:bf:5f:d8:97:63: 2e:b1:7a:06:25:b8:92:95:0c:10:48:af:b0:e6:47:64:e5:87: 79:e8:54:d0:a3:49:c0:55:59:a1:d4:f4:e4:d0:e9:ad:21:a6: a2:2d:f2:f8:a3:c7:5f:30:c8:44:60:7a:62:16:11:0c:8e:a5: ea:9e:9a:20:da:f5:4f:85:32:0d:8c:88:a7:86:46:65:a6:2c: 2a:c2:8c:3d:52:0b:2d:c6:40:a8:58:7c:2f:f1:9a:8f:09:10: c8:cc:e8:58:29:74:d9:5b:24:a1:dc:71:e4:5d:a9:21:42:52: 67:fe:19:4c:8f:c7:b7:62:99:7b:b5:7c:71:40:70:fe:69:c3: aa:53:0e:23:0b:be:49:f4:ba:16:b9:d6:8f:36:23:07:a9:6d: 2f:69:35:b2:06:5a:9b:fb:07:4a:73:74:b2:ab:c4:e9:d4:0c: 10:fd:94:7e:47:89:bb:28:39:7b:0f:a7:7c:40:0f:b4:6b:9e: 6d:98:8e:32:17:c6:47:0e:21:06:38:9e:c7:7c:5c:86:b0:61: db:af:c0:de:0b:30:f6:32:22:75:9b:5a:f6:2b:0f:fe:e0:1c: 73:d6:59:0d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6MilB74jUm3NgWlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk M2Y0MjEyMTEtYWJhOC00MDNlLTk2MDUtODZiNTJjNzg1M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sw9u7+zTTIc8bRkOWd0W9USN3Y+lf5SkH+h uaDXIZSsei4xJCHdtEmeGcW07EpvLvITUOTvD2jq6hN76cHBChNkmVPS0K6PLXFC ElNsSIqDJJ4W8HdOW1ZtEanuJIbxpgC1TEmzLp2EMH7DNrONGlmCTRcWODJflxTw 2pQzQVS58XAu7vuIzB3KJDAvocx+IIdYiw1LGTFn+nne7P/E85VA7U1uJba3Ahxy sWB9bID+dASu4QmRnvOVCd6Iqq3JNJd+R0yMJNf/4xPjXN0ziMnAxveB7xo+VbrR WERw3hsYIgKpAG+eHqH7SO3ng4U6d17YmwpibbXfTy+lPy20rQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFYJHzbli2cBN+wu1VHq+1QCn3InMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWY0ZDlkNzYtY2MxNS0z NDBmLWEwZDQtYmE2MDZkYzdlZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfwYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBE0/nB8QpxarsJqZiyIBWfCAvWWwemOlfNKN5kNGkMv1/Yl2MusXoG JbiSlQwQSK+w5kdk5Yd56FTQo0nAVVmh1PTk0OmtIaaiLfL4o8dfMMhEYHpiFhEM jqXqnpog2vVPhTINjIinhkZlpiwqwow9UgstxkCoWHwv8ZqPCRDIzOhYKXTZWySh 3HHkXakhQlJn/hlMj8e3Ypl7tXxxQHD+acOqUw4jC75J9LoWudaPNiMHqW0vaTWy Blqb+wdKc3Syq8Tp1AwQ/ZR+R4m7KDl7D6d8QA+0a55tmI4yF8ZHDiEGOJ7HfFyG sGHbr8DeCzD2MiJ1m1r2Kw/+4Bxz1lkN -----END CERTIFICATE-----Generated at Tue Jul 21 23:28:53 2026 by rpki-client