$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa File: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json) Hash identifier: IdrpYpa1gqgoDxMDwwXt6Ukt/5oyrp65hKT58SPTSss= Subject key identifier: 2F:50:FB:4C:57:A1:5A:E0:9A:D4:1E:52:D4:D6:E8:82:66:8E:15:E6 Certificate issuer: /CN=511ed25c-3ac7-4d86-9290-879e3813322e Certificate serial: 010D0C9F4328584E2D9F243BA6F9290BCF4B5000 Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13325 IP address blocks: 2620:167::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:24:3b:a6:f9:29:0b:cf:4b:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=0afc79c3-88d5-418d-81d3-60e3e031d613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:c4:52:32:51:02:73:51:6e:76:4b:f6:0b: b6:6a:c0:c8:22:47:51:8e:54:b6:49:37:43:26:ca: a4:4d:bc:d2:1d:0d:97:08:82:ac:2f:44:81:7d:66: cb:e9:09:39:4a:60:a3:b2:20:b0:05:55:97:65:6c: 0e:43:74:d0:71:af:2e:dd:88:51:15:ce:1d:83:c5: b4:6c:e7:4d:b4:2b:99:52:db:70:41:6b:4d:aa:12: 69:3f:48:5f:d9:7b:21:67:53:38:96:c1:ad:3a:2c: 2a:f4:39:95:84:04:3f:43:e2:db:18:89:cc:8d:b2: ed:14:a1:95:41:9e:ab:b3:67:f1:99:83:7a:67:f8: 83:6c:ec:ed:ba:bc:40:56:90:86:20:5a:b2:96:cb: 75:ba:87:cd:8e:75:cb:77:1c:24:27:ea:57:2c:c8: 7a:72:70:fb:52:50:6c:62:7c:4d:d5:35:85:74:9e: 09:9b:f0:f4:af:e5:25:63:1c:8b:2d:14:ac:0a:9d: a2:03:c8:e8:7b:4f:f8:f8:eb:4e:8d:d6:96:5d:40: 07:fe:f4:eb:f2:a7:09:4c:1f:96:e9:c7:84:95:24: bd:08:5d:94:23:5e:2b:2c:cf:3b:26:d1:8b:b2:8e: f9:3d:c0:83:20:b7:0d:51:97:93:2f:28:84:15:52: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:50:FB:4C:57:A1:5A:E0:9A:D4:1E:52:D4:D6:E8:82:66:8E:15:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl X509v3 Authority Key Identifier: keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer sbgp-ipAddrBlock: critical IPv6: 2620:167::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:af:23:8a:70:5b:a1:99:3d:45:5e:6d:fb:15:66:0f:79:83: 59:a3:4c:dd:33:45:97:b0:5a:8f:42:95:16:bc:ec:4d:cb:64: 44:31:c6:a7:50:b5:1f:42:18:38:f0:e1:a8:fa:1f:25:b7:87: bb:2d:d5:b5:57:76:40:ad:29:f8:37:95:c0:a2:eb:84:73:67: 7e:0b:69:e6:4c:67:4a:d7:1e:c5:7b:ef:0e:98:af:d2:5e:d4: 68:11:78:40:e9:3b:79:94:ae:ba:16:c8:01:43:13:63:03:f7: 75:41:4d:ac:30:44:b0:5a:a8:ba:65:0a:6d:b4:58:8a:26:55: 40:27:fc:70:a8:dd:00:7a:61:c8:e1:cf:8b:c3:e1:8b:29:2b: 16:e0:90:93:51:c8:9b:9a:3e:2f:61:4c:dc:6d:db:8d:bf:dc: 96:2a:a5:bf:b4:dd:af:3c:28:73:74:81:6b:7a:03:07:54:5e: 9d:9d:64:75:d0:d6:45:d6:7f:62:fd:73:10:59:21:74:af:f0: 92:11:df:be:e2:d4:5b:91:00:24:8c:aa:de:d1:41:23:c3:b6: f5:d0:18:75:56:5f:ea:e7:70:90:ea:28:0a:04:2a:32:a6:bb: 4b:40:06:05:6f:b5:44:6e:e2:2a:c7:b9:b6:23:c2:0e:ca:a4: db:dd:d4:d4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4tnyQ7pvkpC89LUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMz MjJlMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MGFmYzc5YzMtODhkNS00MThkLTgxZDMtNjBlM2UwMzFkNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iDEUjJRAnNRbnZL9gu2asDIIkdRjlS2STdD JsqkTbzSHQ2XCIKsL0SBfWbL6Qk5SmCjsiCwBVWXZWwOQ3TQca8u3YhRFc4dg8W0 bOdNtCuZUttwQWtNqhJpP0hf2XshZ1M4lsGtOiwq9DmVhAQ/Q+LbGInMjbLtFKGV QZ6rs2fxmYN6Z/iDbOzturxAVpCGIFqylst1uofNjnXLdxwkJ+pXLMh6cnD7UlBs YnxN1TWFdJ4Jm/D0r+UlYxyLLRSsCp2iA8joe0/4+OtOjdaWXUAH/vTr8qcJTB+W 6ceElSS9CF2UI14rLM87JtGLso75PcCDILcNUZeTLyiEFVK5fwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC9Q+0xXoVrgmtQeUtTW6IJmjhXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MTFl ZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvYTFmZTZiOTgtOGNhOC0z YmQ0LWIxMDgtNjM0NWM1MmNmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTExZWQyNWMtM2FjNy00ZDg2LTky OTAtODc5ZTM4MTMzMjJlLzUxMWVkMjVjLTNhYzctNGQ4Ni05MjkwLTg3OWUzODEz MzIyZS5jcmwwHwYDVR0jBBgwFoAUvteKYHKFcBB7KEPxLuXU3G/HWy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04Nzll MzgxMzMyMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABZwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO68jinBboZk9RV5t+xVmD3mDWaNM3TNFl7Baj0KVFrzsTctkRDHG p1C1H0IYOPDhqPofJbeHuy3VtVd2QK0p+DeVwKLrhHNnfgtp5kxnStcexXvvDpiv 0l7UaBF4QOk7eZSuuhbIAUMTYwP3dUFNrDBEsFqoumUKbbRYiiZVQCf8cKjdAHph yOHPi8PhiykrFuCQk1HIm5o+L2FM3G3bjb/cliqlv7Tdrzwoc3SBa3oDB1RenZ1k ddDWRdZ/Yv1zEFkhdK/wkhHfvuLUW5EAJIyq3tFBI8O29dAYdVZf6udwkOooCgQq Mqa7S0AGBW+1RG7iKse5tiPCDsqk293U1A== -----END CERTIFICATE-----Generated at Tue Jul 21 16:57:16 2026 by rpki-client