$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa File: 897e5bf9-2680-3976-86db-3f623fa56f40.roa (raw, json) Hash identifier: 8g7rxn5jXsFk+h4b8iIeayjwhHaLAgry3st/BkK7Y3g= Subject key identifier: 45:52:E3:7E:0D:88:D4:A1:6D:4B:B3:D4:9E:A2:1E:AE:73:BA:59:F9 Certificate issuer: /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Certificate serial: 010D0C9F4328584E66D9FE43126328437468B680 Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 6517 IP address blocks: 2602:f5b0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:d9:fe:43:12:63:28:43:74:68:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=2110f6bd-2874-4281-817c-7a811d553755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:23:5f:42:d1:01:5b:5c:7e:9e:8f:4d:67: 6d:9d:2e:15:09:56:19:a3:ee:8f:91:ac:d1:fa:f1: 0a:9c:bc:cf:3b:a1:3c:72:33:84:73:80:f6:2f:64: e6:2b:12:1b:af:6e:47:76:57:ea:1b:5b:31:0b:2b: 18:48:6c:6b:b1:f6:11:e2:6d:25:14:26:17:1f:47: 07:5e:e9:46:2d:c3:aa:17:0b:2e:9a:82:1a:3e:df: 7b:6e:34:9d:3f:b8:85:49:51:62:38:2c:1f:de:70: ab:80:b2:8a:5a:cb:d0:5e:2f:28:75:bf:8a:3b:16: df:e1:de:19:d3:ec:63:a5:0d:38:39:7d:a8:8d:9d: e3:7e:74:e2:fc:25:c8:6c:d3:33:69:18:9f:41:c1: 90:d4:4b:7c:7f:32:26:bf:44:0f:93:57:ff:d2:f0: 2c:c7:79:53:96:65:a1:7d:66:ff:78:b7:41:94:ba: aa:0d:24:f8:ea:e2:e1:36:dc:a3:a0:26:f1:ec:0f: e1:47:ca:72:77:8b:18:17:c5:13:c4:77:38:a2:71: 61:49:46:f1:5a:c6:78:9f:77:96:21:63:0a:e7:d5: 18:d9:f6:48:d0:bf:0f:7d:e1:72:bc:5d:1b:e1:a2: 14:41:41:6d:e1:cc:6c:78:73:a9:4d:37:d4:ab:68: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:52:E3:7E:0D:88:D4:A1:6D:4B:B3:D4:9E:A2:1E:AE:73:BA:59:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/897e5bf9-2680-3976-86db-3f623fa56f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl X509v3 Authority Key Identifier: keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer sbgp-ipAddrBlock: critical IPv6: 2602:f5b0:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:89:92:de:d4:43:35:11:27:60:97:6e:38:ab:2e:ed:20:bc: 9a:9c:46:e9:38:43:7e:0c:54:a4:fa:19:ac:d2:64:8a:54:df: 0a:02:22:43:fe:79:c8:93:de:f6:b3:2e:82:99:d4:08:38:7e: 3a:e4:7d:b5:4e:c7:4d:76:4c:6a:fb:45:c5:1c:48:95:66:78: f3:64:fb:b3:ef:5d:76:86:39:a6:9e:e2:23:50:26:c9:43:70: 83:0c:fc:6a:75:44:10:8c:bc:a3:b6:95:15:59:18:bc:a8:f7: 86:90:db:66:12:2e:2d:6f:f8:6f:0e:49:4e:ae:8e:18:42:00: 24:cd:80:fe:58:dc:c1:d8:88:21:2d:cc:b4:7f:91:2d:8d:63: df:bb:13:81:77:32:57:0b:73:cc:e6:9f:59:41:73:c3:81:52: 8d:c3:0a:b6:61:4e:cc:2d:a3:69:73:f7:35:e8:00:45:c5:f8: 06:83:19:2f:63:98:14:19:f1:a5:0f:06:89:b6:a0:07:6f:5f: d7:da:b7:39:b2:47:67:a4:11:b0:0b:d8:d7:b8:80:b4:f2:1f: 7f:0a:44:be:0a:c3:d5:30:4c:5a:2f:1f:81:cd:7d:51:7c:f9: db:6c:11:a2:13:1e:65:80:53:20:4c:df:54:d3:77:d4:86:da: 10:e9:1d:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2f5DEmMoQ3RotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj MmQ0MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MjExMGY2YmQtMjg3NC00MjgxLTgxN2MtN2E4MTFkNTUzNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGMjX0LRAVtcfp6PTWdtnS4VCVYZo+6PkazR +vEKnLzPO6E8cjOEc4D2L2TmKxIbr25HdlfqG1sxCysYSGxrsfYR4m0lFCYXH0cH XulGLcOqFwsumoIaPt97bjSdP7iFSVFiOCwf3nCrgLKKWsvQXi8odb+KOxbf4d4Z 0+xjpQ04OX2ojZ3jfnTi/CXIbNMzaRifQcGQ1Et8fzImv0QPk1f/0vAsx3lTlmWh fWb/eLdBlLqqDST46uLhNtyjoCbx7A/hR8pyd4sYF8UTxHc4onFhSUbxWsZ4n3eW IWMK59UY2fZI0L8PfeFyvF0b4aIUQUFt4cxseHOpTTfUq2gKcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEVS434NiNShbUuz1J6iHq5zuln5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvODk3ZTViZjktMjY4MC0z OTc2LTg2ZGItM2Y2MjNmYTU2ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3 M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5 YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4 ZTI3OWMyZDQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1sAAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACGJkt7UQzURJ2CXbjirLu0gvJqcRuk4Q34MVKT6GazSZIpU3woC IkP+eciT3vazLoKZ1Ag4fjrkfbVOx012TGr7RcUcSJVmePNk+7PvXXaGOaae4iNQ JslDcIMM/Gp1RBCMvKO2lRVZGLyo94aQ22YSLi1v+G8OSU6ujhhCACTNgP5Y3MHY iCEtzLR/kS2NY9+7E4F3MlcLc8zmn1lBc8OBUo3DCrZhTswto2lz9zXoAEXF+AaD GS9jmBQZ8aUPBom2oAdvX9fatzmyR2ekEbAL2Ne4gLTyH38KRL4Kw9UwTFovH4HN fVF8+dtsEaITHmWAUyBM31TTd9SG2hDpHdI= -----END CERTIFICATE-----Generated at Tue Jul 21 23:35:22 2026 by rpki-client