$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa File: 30adc210-0124-3859-98d4-f0e66af7da0a.roa (raw, json) Hash identifier: PGrEca8E+wVCPb1CU7bYLWZ5uNRBMJlr/btozvUbLVA= Subject key identifier: 4B:72:B2:85:64:39:96:33:D7:06:D5:B4:6D:93:DE:A1:E5:AE:0D:0B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5A49FC8EF962012698FB8000 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 1225 IP address blocks: 2001:418:0:7000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:fc:8e:f9:62:01:26:98:fb:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=6b0fe43e-edcc-4b7a-b30e-d9bd0e6e4c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:66:e8:8c:5a:39:34:f3:71:09:3d:25:83: 49:a4:00:0e:6d:f6:71:dc:43:53:13:de:f4:73:8a: e4:30:e5:c7:95:b6:09:14:d2:0a:b8:36:3c:34:50: d9:e4:18:4e:f1:12:62:cb:8e:55:af:30:69:9d:53: 89:3b:29:05:01:cb:d5:2b:e3:66:ce:3a:29:50:80: c6:48:69:72:54:29:0c:89:7c:03:e5:47:0e:50:4a: 1c:83:cd:2b:1d:a9:af:ac:eb:36:cd:7e:a9:5a:4b: 9e:8c:61:96:b0:cc:6e:ff:40:8e:d8:6f:0c:23:b0: 5b:44:a2:ec:80:36:18:bb:42:48:f5:da:84:26:ca: 51:5c:08:7f:aa:37:a5:1a:03:bf:57:6d:72:f3:67: f0:a5:e8:c9:d0:01:2d:6e:27:4c:25:f2:2e:32:da: bd:8c:3f:17:fa:70:c3:33:b5:62:d0:38:0d:04:d2: ff:70:76:f6:97:17:0a:e8:60:b8:a6:3b:28:fc:56: 20:12:0a:a1:dd:e8:d1:6f:92:3d:56:87:84:48:09: 5b:62:38:e2:b7:5c:f9:21:1a:45:a2:d1:65:6f:e5: aa:33:59:aa:93:a5:a8:4a:32:5c:07:03:98:30:82: 08:cf:ce:e4:ef:c7:30:36:4c:2c:3e:b9:a7:b4:6a: 5a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:72:B2:85:64:39:96:33:D7:06:D5:B4:6D:93:DE:A1:E5:AE:0D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:0:7000::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ce:72:2c:6c:9c:7e:91:7d:81:59:d5:8f:3a:f6:66:dc:9f: 6e:d4:3e:d1:bc:84:5c:93:42:05:ae:24:78:bb:96:ab:ea:6d: 54:97:09:07:fb:94:d0:65:b6:3f:69:ce:d4:49:dc:65:95:ce: 24:5b:cc:22:ae:7f:bc:54:76:be:6f:48:b9:24:75:52:4e:5f: 81:79:74:c3:02:38:14:2d:1d:08:b0:d2:93:b2:17:93:2b:43: 9e:a4:46:e8:44:5a:8c:b2:12:74:e0:e6:5d:05:42:8b:ee:e0: d3:2d:7d:73:e9:76:71:9c:f6:bb:2f:49:c8:9d:c0:c8:9e:ae: 8d:66:77:80:3b:c0:44:6a:4f:f1:7c:16:f8:f6:1c:5e:74:26: e8:26:0d:ba:06:de:f4:5e:21:6f:c2:2e:b2:b2:5c:2c:b2:e8: 46:ac:00:5c:fc:86:ba:6c:68:dc:0e:5e:52:9b:96:7b:38:7d: 7e:e5:bf:a2:65:6e:08:a8:cf:3e:d7:d6:b8:2b:1f:64:19:02: aa:55:19:00:6b:4d:42:4a:86:95:38:25:71:fc:7e:ab:b0:6a: ba:e2:3b:b9:15:cb:ee:a6:af:0a:57:57:54:6a:e1:85:e8:3d: 91:4e:76:99:a2:26:d3:55:1a:14:53:50:98:8f:4b:03:8a:b6: 27:52:0f:b0 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE5aSfyO+WIBJpj7gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NmIwZmU0M2UtZWRjYy00YjdhLWIzMGUtZDliZDBlNmU0YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcNm6IxaOTTzcQk9JYNJpAAObfZx3ENTE970 c4rkMOXHlbYJFNIKuDY8NFDZ5BhO8RJiy45VrzBpnVOJOykFAcvVK+NmzjopUIDG SGlyVCkMiXwD5UcOUEocg80rHamvrOs2zX6pWkuejGGWsMxu/0CO2G8MI7BbRKLs gDYYu0JI9dqEJspRXAh/qjelGgO/V21y82fwpejJ0AEtbidMJfIuMtq9jD8X+nDD M7Vi0DgNBNL/cHb2lxcK6GC4pjso/FYgEgqh3ejRb5I9VoeESAlbYjjit1z5IRpF otFlb+WqM1mqk6WoSjJcBwOYMIIIz87k78cwNkwsPrmntGpaTQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFEtysoVkOZYz1wbVtG2T3qHlrg0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzBhZGMyMTAtMDEyNC0z ODU5LTk4ZDQtZjBlNjZhZjdkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAA cAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAos5yLGycfpF9gVnVjzr2ZtyfbtQ+0byEXJNCBa4keLuWq+pt VJcJB/uU0GW2P2nO1EncZZXOJFvMIq5/vFR2vm9IuSR1Uk5fgXl0wwI4FC0dCLDS k7IXkytDnqRG6ERajLISdODmXQVCi+7g0y19c+l2cZz2uy9JyJ3AyJ6ujWZ3gDvA RGpP8XwW+PYcXnQm6CYNugbe9F4hb8IusrJcLLLoRqwAXPyGumxo3A5eUpuWezh9 fuW/omVuCKjPPtfWuCsfZBkCqlUZAGtNQkqGlTglcfx+q7BquuI7uRXL7qavCldX VGrhheg9kU52maIm01UaFFNQmI9LA4q2J1IPsA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:37:43 2026 by rpki-client