$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa File: 8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa (raw, json) Hash identifier: DCstXHpWpA3GxVn+8aSo/pmDUVL+YA04CpWVtmlqU9g= Subject key identifier: 68:B8:FD:AF:99:01:E0:E2:34:91:9C:9F:7A:4D:78:C3:8D:28:F6:E2 Certificate issuer: /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Certificate serial: 010D0C9F4328584E5E79FC8430AAE134BF50DA60 Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa Signing time: Thu 02 Jul 2026 21:00:12 +0000 ROA not before: Thu 02 Jul 2026 21:00:12 +0000 ROA not after: Wed 30 Sep 2026 21:00:12 +0000 asID: 30083 IP address blocks: 2605:de00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5e:79:fc:84:30:aa:e1:34:bf:50:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3 Validity Not Before: Jul 2 21:00:12 2026 GMT Not After : Sep 30 21:00:12 2026 GMT Subject: CN=1703a5a5-bc77-465f-be26-816988554037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:91:d5:b5:1a:ae:78:4d:05:61:7b:38:55: 1c:4a:70:f6:a3:87:92:89:29:53:7f:79:dd:58:0b: 0a:b1:55:f3:2c:cb:71:cb:00:5d:21:fb:1f:d9:4b: 00:de:88:87:9b:c8:70:e8:28:8f:dc:f7:b4:98:22: 50:fd:18:64:34:61:79:cd:b4:0f:48:ba:9f:25:b2: f3:22:b8:64:59:d7:cd:ad:81:4b:c3:f1:b8:53:74: c1:4d:29:59:72:64:2e:78:d4:34:08:1f:ca:c2:da: 43:f4:7e:e5:67:ab:69:8e:34:ca:f9:2e:56:4b:a0: ae:e6:d6:69:19:04:f8:37:60:dd:05:8c:9b:d5:a1: e4:25:bf:1c:60:62:94:1c:a6:81:ff:22:16:b9:69: 79:0f:a1:72:2c:bb:75:6e:fa:30:5e:42:37:f1:da: 15:32:14:02:cc:32:a3:cf:be:cf:89:85:a8:b4:7a: 6e:fa:06:29:9c:d2:66:29:c9:c3:1f:20:8c:6a:53: f5:7a:90:08:c6:7f:c3:44:04:d0:a3:d2:9c:cd:f3: 65:c9:36:5e:b6:32:9a:c2:13:06:45:c5:67:2a:ff: 79:bb:28:e1:92:99:a2:b6:72:61:9b:ec:ef:7b:d8: 42:8d:66:d1:52:01:7a:78:3e:c2:e6:20:2d:d3:a9: c5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:FD:AF:99:01:E0:E2:34:91:9C:9F:7A:4D:78:C3:8D:28:F6:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl X509v3 Authority Key Identifier: keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer sbgp-ipAddrBlock: critical IPv6: 2605:de00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a9:d3:6b:f0:2e:cc:a3:69:95:5d:a6:3b:98:af:c6:16:40: a3:9f:9b:5a:5e:e1:c0:ce:96:0d:1a:c3:be:08:0e:69:83:a4: 6a:ec:df:03:c0:47:a7:f7:86:e5:85:b4:22:0a:6f:52:a0:ae: 93:7c:6d:7d:4e:41:4a:44:dc:84:ab:62:93:b0:59:4a:13:4f: 5a:67:ce:67:dc:72:de:cf:76:ec:fd:1b:d2:3b:c2:aa:92:19: ad:de:3b:28:10:8e:73:20:53:6d:e1:9c:f5:31:92:02:ab:68: cf:ad:42:ac:d2:a1:f8:d7:43:00:3c:69:49:23:eb:7b:70:d8: 33:c7:8e:ac:f9:22:bb:f0:c6:2f:42:03:9c:ae:d6:db:3c:64: 48:9f:b6:6e:bc:86:2c:66:9f:66:fe:17:e9:9a:ee:24:9f:5d: 84:39:73:21:e0:a0:a3:f8:56:9e:27:9a:08:55:89:07:1e:54: f9:2f:09:8e:79:3e:a3:36:b6:2e:c9:0f:d4:88:56:21:ed:e4: 71:d0:c5:16:5e:88:8e:30:17:ad:02:d8:4f:ac:53:1d:ce:e9: 90:e9:06:42:a3:32:fc:d7:b2:b4:62:22:e0:91:e6:07:cd:5d: 46:52:12:0d:8b:59:49:cb:af:fb:d3:3f:f7:76:fd:b2:56:4c: ff:8e:76:a3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5eefyEMKrhNL9Q2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjNjhhYTMtYWJjNS00ZDM0LThmMWMtMTdiYjExZDky YmEzMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk MTcwM2E1YTUtYmM3Ny00NjVmLWJlMjYtODE2OTg4NTU0MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvyR1bUarnhNBWF7OFUcSnD2o4eSiSlTf3nd WAsKsVXzLMtxywBdIfsf2UsA3oiHm8hw6CiP3Pe0mCJQ/RhkNGF5zbQPSLqfJbLz IrhkWdfNrYFLw/G4U3TBTSlZcmQueNQ0CB/KwtpD9H7lZ6tpjjTK+S5WS6Cu5tZp GQT4N2DdBYyb1aHkJb8cYGKUHKaB/yIWuWl5D6FyLLt1bvowXkI38doVMhQCzDKj z77PiYWotHpu+gYpnNJmKcnDHyCMalP1epAIxn/DRATQo9KczfNlyTZetjKawhMG RcVnKv95uyjhkpmitnJhm+zve9hCjWbRUgF6eD7C5iAt06nFMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGi4/a+ZAeDiNJGcn3pNeMONKPbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2 OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2JiMTFkOTJiYTMvOGIyZjAzMmUtZjhkMS0z YTBhLWI1MTUtMjZhMzZkNjhmOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZjNjhhYTMtYWJjNS00ZDM0LThm MWMtMTdiYjExZDkyYmEzL2VmYzY4YWEzLWFiYzUtNGQzNC04ZjFjLTE3YmIxMWQ5 MmJhMy5jcmwwHwYDVR0jBBgwFoAUGjV0+uDTzjmDRIFr6CLuJyWOF6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmM2OGFhMy1hYmM1LTRkMzQtOGYxYy0xN2Ji MTFkOTJiYTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9qdNr8C7Mo2mVXaY7mK/GFkCjn5taXuHAzpYNGsO+CA5pg6Rq7N8D wEen94blhbQiCm9SoK6TfG19TkFKRNyEq2KTsFlKE09aZ85n3HLez3bs/RvSO8Kq khmt3jsoEI5zIFNt4Zz1MZICq2jPrUKs0qH410MAPGlJI+t7cNgzx46s+SK78MYv QgOcrtbbPGRIn7ZuvIYsZp9m/hfpmu4kn12EOXMh4KCj+FaeJ5oIVYkHHlT5LwmO eT6jNrYuyQ/UiFYh7eRx0MUWXoiOMBetAthPrFMdzumQ6QZCozL817K0YiLgkeYH zV1GUhINi1lJy6/70z/3dv2yVkz/jnaj -----END CERTIFICATE-----Generated at Tue Jul 21 15:02:51 2026 by rpki-client