$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa File: 3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa (raw, json) Hash identifier: 3ErwC7mgcQg+2cgnTPrajxrtmBz1h8t3jLnX3+Vn2cQ= Subject key identifier: F1:27:4F:E1:A1:0D:D0:27:21:80:0C:B7:3D:2F:B3:18:F2:BA:16:1A Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584E736A1FC7A94977D50CFE2680 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 19528 IP address blocks: 2605:14c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:1f:c7:a9:49:77:d5:0c:fe:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=0db4c5d4-1293-4b93-a4ac-38c8c350df2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bf:96:a4:5b:91:2b:98:fa:b8:11:8d:f7:d7: 99:4b:62:7f:71:c2:12:51:fc:5b:9c:41:26:3c:b9: 78:c4:1e:a6:93:b7:b1:5e:b7:a0:bb:1f:0a:a0:dd: 96:8b:47:61:76:4e:dd:2a:93:ab:fa:b6:10:e5:68: 51:60:68:08:da:84:74:1f:0e:f5:77:e8:b9:44:35: 4f:be:10:a2:c5:10:8a:86:d4:e9:4e:01:5f:2e:39: 63:f6:16:f4:2c:dd:d3:fd:39:d5:d0:c0:ad:47:e8: ea:5c:b6:62:d1:86:da:56:fd:e2:99:d8:ad:75:b9: 70:11:46:1c:d0:ae:6e:43:6b:b5:e6:9a:fe:fc:e4: 43:9d:7b:b1:18:ac:aa:b5:bf:a5:c8:96:06:9d:f2: 78:21:9b:31:19:41:0f:99:91:26:4f:fb:b1:c4:74: 58:88:6b:3c:38:5e:29:63:01:7d:ec:98:1c:a3:2f: b1:2c:74:94:57:ee:22:60:70:25:a1:7f:5d:42:13: ad:f0:d3:4d:b3:d9:e2:ab:52:03:55:5a:ab:05:88: b4:33:f4:0a:db:0e:f8:ae:8e:3e:9a:54:57:9a:1a: e9:ca:cc:03:fc:c5:03:5e:4a:7b:bb:08:d7:a5:77: 04:89:8c:26:da:53:1d:4e:ac:17:6d:30:de:81:14: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:27:4F:E1:A1:0D:D0:27:21:80:0C:B7:3D:2F:B3:18:F2:BA:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/3a2d7274-4236-30bd-9654-d9ab9dfd3cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv6: 2605:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9f:e6:4c:81:bf:38:94:ae:e4:fc:56:54:16:36:3c:a8:51: f3:ff:9d:2d:4e:7b:63:fe:d2:f7:5b:cf:82:de:d7:0d:d2:67: 11:f2:e9:cd:f8:22:93:53:fd:d5:a5:51:91:67:35:e2:6e:ff: 23:10:3a:52:06:5e:f4:04:6a:32:a6:81:57:fa:f3:a8:87:1a: b2:90:b7:72:71:78:69:16:e1:5b:b7:9a:f8:41:24:8b:50:de: b5:af:15:22:22:ef:7e:bf:e1:c4:69:36:f7:27:03:38:cb:dd: ed:5e:9b:e2:25:2c:57:6a:d6:82:c2:80:a6:0f:d3:da:5f:1b: c1:9b:97:4c:28:75:66:34:58:1e:e8:54:65:08:d8:bc:8e:95: 47:ad:47:ac:7a:cb:9e:a8:bf:6b:a2:28:bf:3f:dc:96:80:35: 8a:45:e9:03:4e:f4:14:40:62:1a:67:6c:12:1d:29:ba:70:35: b6:f1:99:ad:2e:37:40:e6:1d:91:47:7b:01:e0:d7:e4:0b:d9: b5:00:dd:35:d6:4c:d0:ce:0b:cf:e5:3b:b7:e8:a5:18:3d:82: 6a:51:5e:fd:56:22:dc:e0:2e:2d:d6:5b:89:6f:1f:49:1b:35: 78:9d:6a:1e:7e:92:4f:3c:2d:cf:3e:a7:31:7e:25:63:74:13: 58:7c:6a:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5zah/HqUl31Qz+JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk MGRiNGM1ZDQtMTI5My00YjkzLWE0YWMtMzhjOGMzNTBkZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL+WpFuRK5j6uBGN99eZS2J/ccISUfxbnEEm PLl4xB6mk7exXregux8KoN2Wi0dhdk7dKpOr+rYQ5WhRYGgI2oR0Hw71d+i5RDVP vhCixRCKhtTpTgFfLjlj9hb0LN3T/TnV0MCtR+jqXLZi0YbaVv3imditdblwEUYc 0K5uQ2u15pr+/ORDnXuxGKyqtb+lyJYGnfJ4IZsxGUEPmZEmT/uxxHRYiGs8OF4p YwF97Jgcoy+xLHSUV+4iYHAloX9dQhOt8NNNs9niq1IDVVqrBYi0M/QK2w74ro4+ mlRXmhrpyswD/MUDXkp7uwjXpXcEiYwm2lMdTqwXbTDegRR6uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPEnT+GhDdAnIYAMtz0vsxjyuhYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvM2EyZDcyNzQtNDIzNi0z MGJkLTk2NTQtZDlhYjlkZmQzY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUUwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXn+ZMgb84lK7k/FZUFjY8qFHz/50tTntj/tL3W8+C3tcN0mcR8unN +CKTU/3VpVGRZzXibv8jEDpSBl70BGoypoFX+vOohxqykLdycXhpFuFbt5r4QSSL UN61rxUiIu9+v+HEaTb3JwM4y93tXpviJSxXataCwoCmD9PaXxvBm5dMKHVmNFge 6FRlCNi8jpVHrUesesueqL9roii/P9yWgDWKRekDTvQUQGIaZ2wSHSm6cDW28Zmt LjdA5h2RR3sB4NfkC9m1AN011kzQzgvP5Tu36KUYPYJqUV79ViLc4C4t1luJbx9J GzV4nWoefpJPPC3PPqcxfiVjdBNYfGqb -----END CERTIFICATE-----Generated at Fri Jul 24 03:01:16 2026 by rpki-client