$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa File: cf900358-a274-3b37-a41d-296981ab2973.roa (raw, json) Hash identifier: y2mz8Rg9N/Id1zZ1fZ2isRow/9i2HQnyhZKka2j1gJ4= Subject key identifier: 49:3B:41:3B:AE:41:42:A6:5F:B8:19:6F:7E:CE:86:FF:7C:86:DC:54 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B946F85DC7933241B25E800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 2605:4300:2700::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:6f:85:dc:79:33:24:1b:25:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=4fd7d424-dc9a-43ae-b810-f078cd866d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:5a:1b:52:16:03:ba:32:05:1c:ad:21:bd: 6f:13:4f:43:8a:e4:57:7b:ae:d2:b9:9d:57:b9:d3: ab:22:1c:b0:72:23:90:a3:b6:78:cf:9f:1c:5e:3a: fd:be:b6:df:02:29:b8:72:91:e4:cf:c1:45:60:03: 81:1a:a0:ac:44:0d:36:ec:50:c0:b7:f3:02:ca:cd: cc:7c:8a:09:b8:67:41:d1:ea:4d:11:9b:72:bf:19: 9d:d0:4b:fe:08:23:d0:98:b2:5d:1d:5a:5d:f1:9e: 01:9d:c9:67:86:ba:c6:45:9c:a5:44:03:8b:3b:32: 42:c9:1f:6f:f9:1b:61:a9:fc:f6:91:db:93:c6:5f: ef:bb:5b:33:1e:fd:51:65:6d:e8:00:eb:f7:e4:4c: 1c:f0:c3:b8:1b:69:b3:d3:44:f3:56:cc:d5:4e:13: 01:3a:07:a4:8e:81:d6:6e:51:91:91:b4:ba:77:0b: 63:d8:06:35:8d:9c:d2:14:10:3c:79:90:02:5a:c9: 8d:a7:2b:fa:2b:fe:ec:24:40:53:2c:68:79:bf:00: 31:c8:08:21:2a:5c:9a:51:d6:9d:48:b3:6a:aa:e1: c3:e7:59:36:f8:f8:92:8e:5c:7e:1e:5b:8b:fd:2c: f7:ae:24:00:5e:50:4a:7c:96:cf:98:ed:d0:fb:80: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:41:3B:AE:41:42:A6:5F:B8:19:6F:7E:CE:86:FF:7C:86:DC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cf900358-a274-3b37-a41d-296981ab2973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2700::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d1:7c:5d:d5:08:4e:ba:cf:db:96:1e:27:1c:97:8e:2f:38: 07:fc:87:31:4a:ef:52:d9:85:91:14:7a:53:d1:26:86:cf:58: 49:74:0c:c5:53:62:50:41:51:45:b6:0b:79:4a:6a:db:8c:64: 20:a3:c5:2c:58:a3:b0:4c:5d:0e:d0:75:d9:62:47:ab:79:6c: 6f:04:a3:3b:77:fe:0e:a5:6d:5e:8a:37:8a:28:9e:bb:09:3b: b5:6b:d9:5e:c9:9c:bc:78:c2:d0:a7:9b:07:f9:c3:b1:25:76: a4:35:49:6b:69:1f:db:61:c5:a3:2c:cd:55:25:36:d8:e6:23: c0:54:db:97:8d:19:34:a8:f5:1a:75:50:77:ad:02:83:f4:d5: fd:e4:ec:4a:ee:86:f6:33:f6:6e:c6:98:5a:94:91:28:6b:69: e9:73:0c:d1:88:ee:2b:0c:49:34:a2:26:81:10:df:f5:b4:79: 30:01:55:ac:fc:1d:45:93:f3:b4:83:b5:17:22:f2:37:b2:39: cd:a8:8f:56:0d:4c:7c:c1:70:7a:c5:ec:46:f0:6b:95:9f:4c: 0e:43:0e:b0:08:34:30:64:18:a8:f1:b2:15:36:63:28:69:01: 0f:57:93:64:3f:81:e9:18:a9:0b:33:e1:a8:6b:9a:32:03:15: 08:48:20:2b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE47lG+F3HkzJBsl6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk NGZkN2Q0MjQtZGM5YS00M2FlLWI4MTAtZjA3OGNkODY2ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmxaG1IWA7oyBRytIb1vE09DiuRXe67SuZ1X udOrIhywciOQo7Z4z58cXjr9vrbfAim4cpHkz8FFYAOBGqCsRA027FDAt/MCys3M fIoJuGdB0epNEZtyvxmd0Ev+CCPQmLJdHVpd8Z4BnclnhrrGRZylRAOLOzJCyR9v +Rthqfz2kduTxl/vu1szHv1RZW3oAOv35Ewc8MO4G2mz00TzVszVThMBOgekjoHW blGRkbS6dwtj2AY1jZzSFBA8eZACWsmNpyv6K/7sJEBTLGh5vwAxyAghKlyaUdad SLNqquHD51k2+PiSjlx+HluL/Sz3riQAXlBKfJbPmO3Q+4CRhQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEk7QTuuQUKmX7gZb37Ohv98htxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2Y5MDAzNTgtYTI3NC0z YjM3LWE0MWQtMjk2OTgxYWIyOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDACcw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAItF8XdUITrrP25YeJxyXji84B/yHMUrvUtmFkRR6U9Emhs9YSXQM xVNiUEFRRbYLeUpq24xkIKPFLFijsExdDtB12WJHq3lsbwSjO3f+DqVtXoo3iiie uwk7tWvZXsmcvHjC0KebB/nDsSV2pDVJa2kf22HFoyzNVSU22OYjwFTbl40ZNKj1 GnVQd60Cg/TV/eTsSu6G9jP2bsaYWpSRKGtp6XMM0YjuKwxJNKImgRDf9bR5MAFV rPwdRZPztIO1FyLyN7I5zaiPVg1MfMFwesXsRvBrlZ9MDkMOsAg0MGQYqPGyFTZj KGkBD1eTZD+B6RipCzPhqGuaMgMVCEggKw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:48:39 2026 by rpki-client