$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa File: c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa (raw, json) Hash identifier: 5vJKqFxQkv56KJVhdXNGoEA7ivPAwzHUt+rFpdT+joQ= Subject key identifier: DC:77:F6:80:D9:CF:51:22:09:4C:1F:C8:77:3B:85:49:DD:0A:CB:D5 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F4328584E5FDF52E04DB98E9337753800 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 6939 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:52:e0:4d:b9:8e:93:37:75:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=22db3a32-83a8-409c-a892-49a01c106b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:f1:90:c5:d1:85:93:e7:b9:20:0e:56:19: e2:93:6a:b4:91:08:e3:17:bc:3a:cf:e8:a9:8f:a0: f7:98:e9:be:7c:b6:7f:30:9a:9f:f6:01:5e:b2:99: 42:4a:7c:da:0d:c4:c4:54:96:46:9f:f1:d2:bf:d9: c7:a6:1a:46:c4:d0:24:c2:ed:89:18:bd:b1:3d:80: a1:6a:e5:ce:d9:18:96:d4:a5:f0:f7:4a:3b:6a:7e: 9e:65:45:33:60:ec:75:e6:35:71:97:05:8a:40:72: f4:3a:a5:7b:49:ce:08:13:79:dd:dc:9b:b6:46:54: 46:f3:5f:ae:d2:07:3f:e3:d5:8e:f3:bf:48:a0:19: 55:6f:99:83:2b:1a:db:be:fb:0e:2a:4a:3e:8a:4e: 84:c3:66:ab:b2:7f:ab:c3:80:77:17:8b:7e:5a:23: 28:90:65:a4:b8:dc:04:b1:42:93:43:1f:18:35:b8: 40:7f:9e:2a:bb:a5:1c:fb:fe:9f:e1:fa:a1:fa:1d: 75:ea:ca:56:f1:6c:b9:7a:7c:0f:44:05:80:15:d2: 2f:d3:84:79:96:f3:38:93:67:6a:f6:43:44:17:7c: f7:f8:40:23:cb:43:11:3f:3e:17:e7:5b:38:5d:56: 0b:8b:d1:5b:ec:64:e8:57:2e:14:49:46:e6:c7:b6: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:F6:80:D9:CF:51:22:09:4C:1F:C8:77:3B:85:49:DD:0A:CB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c9f8d48a-c9f1-3ad8-a2b9-48e540a2f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:74:54:7c:18:e1:e2:88:c7:2f:14:0c:fa:c8:f2:77:65:e5: 1c:5e:c4:44:a2:18:5e:d5:b2:5f:7d:69:c4:2c:95:8e:2f:0e: 5d:ab:82:57:e9:55:38:4d:ad:a7:9e:12:ee:35:3e:1c:00:1e: 0c:92:de:83:e2:6a:3e:d7:94:d3:59:ad:17:14:6f:cd:1e:9e: 02:f0:1b:eb:c5:e9:ad:99:ce:7b:4f:b4:21:ec:71:20:87:89: c7:77:d1:d8:c2:06:a0:7d:cd:ab:b8:0b:14:52:d4:da:bc:21: 73:70:8a:94:7b:6d:d3:0a:57:7b:66:f8:03:70:b6:6b:ac:0c: 5b:34:1f:f4:1c:1b:ca:4d:91:a8:71:e2:d2:3c:99:7c:96:93: df:0b:ab:30:56:8d:f1:e1:da:8b:33:c6:e0:af:f6:77:b4:fe: 60:eb:e4:e7:98:a0:9c:57:0f:38:98:08:84:6c:06:48:04:9b: 34:d5:c8:5d:1b:0f:7e:93:65:b5:c3:07:4e:ff:03:d1:32:a9: 8f:73:3e:63:db:71:9a:c5:49:01:44:cb:bc:03:29:25:52:a0: 3d:b6:dc:77:49:84:a0:4c:83:b8:6d:5b:02:01:05:18:9f:4b: f5:da:44:39:ce:10:39:85:4e:1b:95:66:e4:71:22:ab:a8:f6: eb:be:25:a6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5f31LgTbmOkzd1OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MjJkYjNhMzItODNhOC00MDljLWE4OTItNDlhMDFjMTA2Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9HxkMXRhZPnuSAOVhnik2q0kQjjF7w6z+ip j6D3mOm+fLZ/MJqf9gFesplCSnzaDcTEVJZGn/HSv9nHphpGxNAkwu2JGL2xPYCh auXO2RiW1KXw90o7an6eZUUzYOx15jVxlwWKQHL0OqV7Sc4IE3nd3Ju2RlRG81+u 0gc/49WO879IoBlVb5mDKxrbvvsOKko+ik6Ew2arsn+rw4B3F4t+WiMokGWkuNwE sUKTQx8YNbhAf54qu6Uc+/6f4fqh+h116spW8Wy5enwPRAWAFdIv04R5lvM4k2dq 9kNEF3z3+EAjy0MRPz4X51s4XVYLi9Fb7GToVy4USUbmx7brdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNx39oDZz1EiCUwfyHc7hUndCsvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvYzlmOGQ0OGEtYzlmMS0z YWQ4LWEyYjktNDhlNTQwYTJmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbdFR8GOHiiMcvFAz6yPJ3ZeUcXsREohhe1bJffWnELJWOLw5dq4JX 6VU4Ta2nnhLuNT4cAB4Mkt6D4mo+15TTWa0XFG/NHp4C8Bvrxemtmc57T7Qh7HEg h4nHd9HYwgagfc2ruAsUUtTavCFzcIqUe23TCld7ZvgDcLZrrAxbNB/0HBvKTZGo ceLSPJl8lpPfC6swVo3x4dqLM8bgr/Z3tP5g6+TnmKCcVw84mAiEbAZIBJs01chd Gw9+k2W1wwdO/wPRMqmPcz5j23GaxUkBRMu8AyklUqA9ttx3SYSgTIO4bVsCAQUY n0v12kQ5zhA5hU4blWbkcSKrqPbrviWm -----END CERTIFICATE-----Generated at Fri Jul 24 10:14:39 2026 by rpki-client