$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/4427c18d-8da2-36d8-9e9d-1789fc3e9931.roa File: 4427c18d-8da2-36d8-9e9d-1789fc3e9931.roa (raw, json) Hash identifier: vy0SmhLppYYEFaCdZ3UUoO+qaeYqkJyjbRC6K+q8wM4= Subject key identifier: BE:00:6D:E1:7C:07:95:04:75:1F:B2:D7:A8:A2:8F:C2:BD:EB:D1:DF Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584E38C9BC30B1744E1207E37F00 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/4427c18d-8da2-36d8-9e9d-1789fc3e9931.roa Signing time: Fri 19 Jun 2026 09:00:12 +0000 ROA not before: Fri 19 Jun 2026 09:00:12 +0000 ROA not after: Thu 17 Sep 2026 09:00:12 +0000 asID: 399728 IP address blocks: 2620:98:e00d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:38:c9:bc:30:b1:74:4e:12:07:e3:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Jun 19 09:00:12 2026 GMT Not After : Sep 17 09:00:12 2026 GMT Subject: CN=2dbd8bbc-4e45-4d47-9f65-d0b6ebac8fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:c5:09:a3:6c:1c:64:ea:9e:65:0d:04:96: be:64:a7:3a:84:12:29:1d:f3:df:2b:64:26:8d:ac: ce:5a:90:8c:66:da:48:36:2c:1c:ee:c7:38:04:c5: 55:c4:42:fd:73:23:55:7f:04:c1:95:3a:00:02:15: 1b:a5:2b:90:f1:cd:b5:1d:42:ff:a5:59:98:b0:7a: 4a:42:2e:21:5b:15:89:6d:56:eb:00:4b:25:c5:df: b2:08:ae:92:ec:10:71:aa:64:8e:11:2b:8f:b1:43: 3a:3c:1a:73:b9:9b:82:b3:40:b6:4c:93:04:26:24: a4:1e:1f:90:29:04:d4:11:6b:4a:6b:9a:9e:d3:72: 26:12:ae:a5:15:90:0b:d6:e3:ac:20:a8:e0:ea:5c: 4c:46:6e:6a:c0:4d:40:0b:f7:77:48:26:06:04:bc: 34:07:b7:d2:b5:5e:d8:94:e5:5a:d0:63:70:b5:29: b5:5c:b9:55:85:20:5a:08:b7:44:1b:74:b0:6b:eb: cb:0c:38:4b:38:f9:df:7a:40:a9:a7:29:2a:11:02: b6:f5:a1:cf:64:d8:8e:2c:c4:9e:23:16:de:e7:2a: c3:55:68:6f:5f:6e:e6:b9:24:9e:87:db:f4:5e:bb: 4d:d4:ef:ad:12:82:52:29:1c:67:a9:b0:dd:f9:ff: a9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:00:6D:E1:7C:07:95:04:75:1F:B2:D7:A8:A2:8F:C2:BD:EB:D1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/4427c18d-8da2-36d8-9e9d-1789fc3e9931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:18:ac:9b:bc:4c:d3:46:00:db:5e:3e:bb:fb:af:dd:d8:ef: 40:37:76:b1:5d:24:34:4c:8e:43:3e:76:e0:fc:81:6c:97:75: d8:0a:d2:90:bd:a3:1a:2f:55:28:3c:41:4e:63:bd:7b:11:00: bc:07:d3:be:2b:d0:d8:0a:5d:1e:c8:6b:f3:1a:15:0d:8b:16: 91:96:e0:94:97:04:ed:87:06:da:92:b7:f6:45:32:9b:47:05: 20:31:f2:b8:37:78:73:54:1f:20:cf:b5:d4:fa:c1:95:0b:49: 80:06:d9:67:9b:26:73:fa:46:8d:02:d9:16:c9:73:aa:dd:89: 28:c9:e5:59:c0:6e:84:da:61:fa:c4:78:fa:16:e5:a5:5c:e2: 22:55:9d:52:19:fc:9a:af:21:37:0c:17:f2:07:23:6e:f8:98: 8f:90:28:bb:5f:52:50:d7:bc:28:cd:4e:b9:99:e8:50:bc:2d: a7:bd:ad:9f:50:0b:6e:f0:cf:d5:e4:1e:1d:0e:81:2f:c3:a5: 42:c5:60:40:1c:4f:d8:6f:b4:4e:87:ac:06:aa:6c:7a:5c:ad: 7c:6a:cb:86:27:94:53:84:7a:ca:b1:ee:12:e2:87:5b:b6:82: 4e:bc:6c:7c:2e:bf:b9:82:2f:79:d2:c1:8e:40:62:66:56:69: c2:58:ab:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE44ybwwsXROEgfjfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk MmRiZDhiYmMtNGU0NS00ZDQ3LTlmNjUtZDBiNmViYWM4ZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncHFCaNsHGTqnmUNBJa+ZKc6hBIpHfPfK2Qm jazOWpCMZtpINiwc7sc4BMVVxEL9cyNVfwTBlToAAhUbpSuQ8c21HUL/pVmYsHpK Qi4hWxWJbVbrAEslxd+yCK6S7BBxqmSOESuPsUM6PBpzuZuCs0C2TJMEJiSkHh+Q KQTUEWtKa5qe03ImEq6lFZAL1uOsIKjg6lxMRm5qwE1AC/d3SCYGBLw0B7fStV7Y lOVa0GNwtSm1XLlVhSBaCLdEG3Swa+vLDDhLOPnfekCppykqEQK29aHPZNiOLMSe Ixbe5yrDVWhvX27muSSeh9v0XrtN1O+tEoJSKRxnqbDd+f+phQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4AbeF8B5UEdR+y16iij8K969HfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvNDQyN2MxOGQtOGRhMi0z NmQ4LTllOWQtMTc4OWZjM2U5OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQYrJu8TNNGANtePrv7r93Y70A3drFdJDRMjkM+duD8gWyXddgK 0pC9oxovVSg8QU5jvXsRALwH074r0NgKXR7Ia/MaFQ2LFpGW4JSXBO2HBtqSt/ZF MptHBSAx8rg3eHNUHyDPtdT6wZULSYAG2WebJnP6Ro0C2RbJc6rdiSjJ5VnAboTa YfrEePoW5aVc4iJVnVIZ/JqvITcMF/IHI274mI+QKLtfUlDXvCjNTrmZ6FC8Lae9 rZ9QC27wz9XkHh0OgS/DpULFYEAcT9hvtE6HrAaqbHpcrXxqy4YnlFOEesqx7hLi h1u2gk68bHwuv7mCL3nSwY5AYmZWacJYq3E= -----END CERTIFICATE-----Generated at Thu Jul 23 19:11:32 2026 by rpki-client