$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa File: d829b003-3d7f-36c9-a287-f6e66f824c8d.roa (raw, json) Hash identifier: ywGR29H975FZU+Q8vZy+WpTfgY7m+PE5wtQ29RvPfJ0= Subject key identifier: 2D:6A:7F:49:AE:6E:34:2E:F1:8C:5F:32:90:ED:9D:77:C9:A8:E8:C2 Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F4328584EA7879F5DCDA7FD21D676EAC0 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32524 IP address blocks: 2604:dc80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:9f:5d:cd:a7:fd:21:d6:76:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c510bb53-a40d-4674-b9c4-d67f90414ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:7c:06:d3:d6:8e:c0:ee:4a:7c:2f:52:cf: 6b:d3:78:2d:e7:cf:96:2b:54:04:06:25:d6:98:a3: 75:1b:db:f5:03:76:b2:d1:35:09:52:6d:2b:b2:3e: c2:99:18:c8:bb:52:69:98:e7:6e:34:ab:46:8f:16: bf:47:ee:8d:c2:a3:5e:18:27:90:8b:a8:f7:4e:c2: c3:4f:76:25:ef:95:30:35:6f:fc:36:77:f1:24:75: d7:12:ca:89:21:be:63:65:51:12:e5:1d:30:8f:bf: 3c:a2:3d:c1:1b:ae:f9:7d:39:ba:90:b3:bd:ac:f3: e6:05:c4:ce:b9:5a:df:ef:eb:c4:ce:3c:8b:aa:dc: ac:a3:c6:e9:e6:dd:f4:51:16:82:db:73:d5:92:76: 34:95:b7:9d:06:b8:f5:20:4d:90:58:6f:6a:d6:07: 62:d4:1f:f0:12:ba:34:ce:8b:ed:f7:55:e0:0a:10: 29:e4:a6:1d:c4:66:3c:55:fa:a6:1e:8d:f4:f1:41: 9d:8d:4c:b2:a8:9f:51:30:11:b1:bf:8d:c1:fa:d4: bb:98:4c:37:79:80:bf:c3:64:6d:17:89:e9:38:ff: 76:9a:a6:39:2d:ad:2e:6a:50:42:52:e7:d4:10:07: dd:1f:7e:7a:c3:8a:10:ac:9b:2a:10:df:58:a2:6e: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:7F:49:AE:6E:34:2E:F1:8C:5F:32:90:ED:9D:77:C9:A8:E8:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/d829b003-3d7f-36c9-a287-f6e66f824c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv6: 2604:dc80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:db:35:23:0a:a6:32:88:a7:2d:e6:0e:b3:ea:5c:3c:57:65: 8c:89:2f:7d:a0:6c:f0:79:34:b6:0a:41:3d:87:f4:74:57:b6: 86:d6:80:8d:e4:53:93:5d:ed:0a:7e:cf:c0:fe:73:ad:b0:1c: 48:e5:9a:f0:f3:a0:52:6a:ad:c3:2e:d9:1d:38:01:87:a3:c6: 7d:0e:f9:58:39:bd:60:e8:89:ee:9c:3e:62:0a:4d:aa:77:a4: 08:55:7c:54:1b:5e:be:66:86:96:ed:5b:27:dc:0a:18:cc:cb: 3b:f0:c0:9e:b6:3c:bd:f2:0d:90:0e:bc:fc:b5:44:1f:60:78: 61:33:fe:e2:1d:aa:55:24:ae:66:32:4c:3d:8e:46:3e:b7:67: 4a:cd:89:5a:29:88:92:bf:85:7f:3a:9c:37:1e:78:09:91:22: 5e:95:c3:7c:1d:99:f5:ba:3b:5e:e5:e9:df:e7:86:7e:f3:1c: 92:5d:b6:db:ea:45:10:55:00:3d:64:75:c9:d2:e5:b9:be:77: 85:d5:7e:d0:7f:18:c2:02:04:69:3a:36:53:7c:67:12:53:d9: 49:cd:a5:f6:5b:1d:4e:e1:a0:f9:97:84:29:71:85:03:e5:6f: aa:0a:7f:2d:44:39:96:23:c6:54:76:11:29:de:b7:ad:4a:07: fa:1d:9a:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nh59dzaf9IdZ26sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzUxMGJiNTMtYTQwZC00Njc0LWI5YzQtZDY3ZjkwNDE0ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliV8BtPWjsDuSnwvUs9r03gt58+WK1QEBiXW mKN1G9v1A3ay0TUJUm0rsj7CmRjIu1JpmOduNKtGjxa/R+6NwqNeGCeQi6j3TsLD T3Yl75UwNW/8NnfxJHXXEsqJIb5jZVES5R0wj788oj3BG675fTm6kLO9rPPmBcTO uVrf7+vEzjyLqtyso8bp5t30URaC23PVknY0lbedBrj1IE2QWG9q1gdi1B/wEro0 zovt91XgChAp5KYdxGY8VfqmHo308UGdjUyyqJ9RMBGxv43B+tS7mEw3eYC/w2Rt F4npOP92mqY5La0ualBCUufUEAfdH356w4oQrJsqEN9Yom5lqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC1qf0mubjQu8YxfMpDtnXfJqOjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvZDgyOWIwMDMtM2Q3Zi0z NmM5LWEyODctZjZlNjZmODI0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTcgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAz2zUjCqYyiKct5g6z6lw8V2WMiS99oGzweTS2CkE9h/R0V7aG1oCN 5FOTXe0Kfs/A/nOtsBxI5Zrw86BSaq3DLtkdOAGHo8Z9DvlYOb1g6InunD5iCk2q d6QIVXxUG16+ZoaW7Vsn3AoYzMs78MCetjy98g2QDrz8tUQfYHhhM/7iHapVJK5m Mkw9jkY+t2dKzYlaKYiSv4V/Opw3HngJkSJelcN8HZn1ujte5enf54Z+8xySXbbb 6kUQVQA9ZHXJ0uW5vneF1X7QfxjCAgRpOjZTfGcSU9lJzaX2Wx1O4aD5l4QpcYUD 5W+qCn8tRDmWI8ZUdhEp3retSgf6HZpJ -----END CERTIFICATE-----Generated at Wed Aug 26 17:31:49 2026 by rpki-client