$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa File: eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa (raw, json) Hash identifier: HVrv2CgbD43qTloyYHGfgFacAr8onHm8R9BZ8njD0mw= Subject key identifier: 2B:0C:22:B1:31:9E:9C:A4:CE:BE:1D:AE:D3:54:9D:E4:BD:27:31:12 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584E8C8A5C6CCBCEF9762EFED800 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 54858 IP address blocks: 2001:1868::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:5c:6c:cb:ce:f9:76:2e:fe:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=7710aefd-9a9a-4059-bcae-06847e9b81c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:4d:77:a5:f0:b8:cc:74:ff:f9:cf:3d:6d: 7d:b6:9e:de:a7:ba:d2:84:31:97:ea:fa:ce:1e:cb: 88:5c:b4:89:9c:57:50:a1:11:c4:fc:21:62:fe:15: f8:89:85:c4:02:67:85:12:ee:57:d3:5c:54:17:ce: ae:83:cd:f4:05:4d:f1:67:3b:05:34:75:41:f2:53: b5:0c:d1:55:e8:da:67:3e:47:d0:ec:cd:7e:08:70: 67:31:60:3a:d4:1e:b4:5a:86:f2:b9:a0:9e:27:d1: ed:7a:46:7c:2a:ab:02:6c:ab:3d:e6:a5:af:63:c6: f7:91:e6:0c:58:e3:e9:2c:95:d6:95:e9:f4:a4:f6: b9:1b:8d:fa:38:eb:60:fe:bc:4e:3d:7e:2b:dd:f1: fb:18:69:0b:84:43:cf:d5:99:76:87:06:32:91:09: 50:1a:b5:a1:b3:15:26:cc:0a:5d:b6:fc:7c:91:17: 37:8d:44:ee:8f:e4:fa:71:32:5c:3a:14:92:ba:f1: ba:6d:b0:15:48:bd:da:30:4d:5e:4a:7e:a1:0b:11: 4a:5a:9c:cd:ca:f9:be:54:b2:5e:68:a1:39:fd:9c: df:ad:7a:ad:d4:cb:4c:97:37:d5:25:dd:43:c2:49: f7:df:39:4f:9d:d0:a5:b7:89:3c:a3:2d:2d:a5:be: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:22:B1:31:9E:9C:A4:CE:BE:1D:AE:D3:54:9D:E4:BD:27:31:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/eff7112a-0e0c-38ca-a585-11b4292bfa1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv6: 2001:1868::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:41:98:41:be:47:5c:d6:87:a7:30:20:c1:8f:92:c6:b1:f8: da:67:b2:7f:7b:14:d1:42:2e:f0:8d:dc:1e:c6:fa:3c:65:87: 34:d1:ae:4b:41:45:e8:f1:32:5a:4b:f7:0b:f5:d3:ad:b4:12: 91:e8:e6:34:b8:e7:66:01:48:4b:0d:e0:c7:6a:d1:f4:3d:26: 99:01:24:1c:3c:04:37:e9:bf:9d:ed:15:78:35:95:2c:dd:66: fd:f6:05:91:25:6f:1e:59:1c:a0:4b:73:e2:56:a1:47:32:65: 0d:ba:15:32:fa:37:6d:97:f1:56:f8:66:20:c9:14:fc:bc:df: e8:45:1e:b3:e6:a4:3f:fb:2c:5b:51:31:21:b8:39:81:c6:65: f5:ee:fc:dc:9d:98:fc:5f:aa:7e:0e:47:1a:c6:51:9c:ab:1f: 8f:28:f6:3d:24:4f:1c:55:32:95:3d:a2:5f:08:d9:85:0d:1f: 43:da:72:d9:84:a1:a8:01:cb:43:1f:2c:87:d3:47:5f:f6:df: 6a:7b:56:77:34:14:97:f1:28:13:9d:58:f7:ff:b1:75:8f:e6: 5c:e3:ca:c6:f2:f3:b1:c3:bb:00:51:29:91:53:ea:09:a3:91: b4:12:bb:49:17:29:44:80:32:3b:f1:57:78:e2:de:24:c4:85: fc:c3:ed:21 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6Milxsy875di7+2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk NzcxMGFlZmQtOWE5YS00MDU5LWJjYWUtMDY4NDdlOWI4MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P1Nd6XwuMx0//nPPW19tp7ep7rShDGX6vrO HsuIXLSJnFdQoRHE/CFi/hX4iYXEAmeFEu5X01xUF86ug830BU3xZzsFNHVB8lO1 DNFV6NpnPkfQ7M1+CHBnMWA61B60WobyuaCeJ9HtekZ8KqsCbKs95qWvY8b3keYM WOPpLJXWlen0pPa5G436OOtg/rxOPX4r3fH7GGkLhEPP1Zl2hwYykQlQGrWhsxUm zApdtvx8kRc3jUTuj+T6cTJcOhSSuvG6bbAVSL3aME1eSn6hCxFKWpzNyvm+VLJe aKE5/ZzfrXqt1MtMlzfVJd1Dwkn33zlPndClt4k8oy0tpb4d4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCsMIrExnpykzr4drtNUneS9JzESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWZmNzExMmEtMGUwYy0z OGNhLWE1ODUtMTFiNDI5MmJmYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYaDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAQZhBvkdc1oenMCDBj5LGsfjaZ7J/exTRQi7wjdwexvo8ZYc00a5L QUXo8TJaS/cL9dOttBKR6OY0uOdmAUhLDeDHatH0PSaZASQcPAQ36b+d7RV4NZUs 3Wb99gWRJW8eWRygS3PiVqFHMmUNuhUy+jdtl/FW+GYgyRT8vN/oRR6z5qQ/+yxb UTEhuDmBxmX17vzcnZj8X6p+DkcaxlGcqx+PKPY9JE8cVTKVPaJfCNmFDR9D2nLZ hKGoActDHyyH00df9t9qe1Z3NBSX8SgTnVj3/7F1j+Zc48rG8vOxw7sAUSmRU+oJ o5G0ErtJFylEgDI78Vd44t4kxIX8w+0h -----END CERTIFICATE-----Generated at Tue Jul 21 22:39:03 2026 by rpki-client