$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa File: aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa (raw, json) Hash identifier: +mdYeIEdcE/+HST2qQfF7R62yXMyL1dqkbzg+QcXQAA= Subject key identifier: A5:A4:70:A7:F9:DE:D8:79:5B:2B:7B:9C:3F:3E:AF:81:E2:0F:0C:14 Certificate issuer: /CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Certificate serial: 010D0C9F4328584E5D14A169D2CD5E78D3DD7100 Authority key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 2620:85:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:a1:69:d2:cd:5e:78:d3:dd:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=dbd4fd24-b38f-45b6-938e-4bc39d6425d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:24:40:bc:ce:2d:c5:01:a0:a9:7c:37:12: 5a:4a:ed:d7:26:bf:b5:21:08:5f:4e:24:91:4c:b5: c0:36:e5:19:cf:2f:32:47:02:a7:77:2c:2e:54:10: c3:d0:07:8f:1d:2a:fe:47:1a:29:e4:ee:0c:00:cb: 2f:43:ea:14:ce:10:2b:0a:6c:da:19:dc:2b:04:71: 21:4d:2c:fa:1c:5f:d0:cb:09:7a:f5:27:b3:f0:22: e0:2e:7c:f2:37:ee:e6:58:ab:e6:f8:27:c6:30:17: 9a:c9:63:63:ab:d4:76:31:76:9b:96:48:79:35:74: 87:22:af:e9:fd:5c:44:87:be:f3:0b:4e:f6:43:e9: 28:3f:ff:e7:aa:6f:21:92:4f:26:b8:11:52:03:fc: 81:9e:80:e4:89:f3:72:fa:b2:ab:6b:a2:91:c1:24: a6:31:01:2c:05:f7:ae:b5:06:ee:7f:07:0a:4a:2c: 82:a3:59:9b:08:3d:62:a6:1c:df:3c:a0:20:3b:c9: 4a:e0:89:17:e8:7d:ed:35:7e:40:5e:f8:7f:64:46: b7:b0:fc:e8:3d:3f:c6:e7:8e:a1:44:44:af:5f:94: 10:7b:53:21:c6:96:b8:b0:a2:6a:05:0b:86:86:cf: 46:75:3f:db:9f:9a:2f:2b:71:ce:4e:fc:8b:79:cb: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A4:70:A7:F9:DE:D8:79:5B:2B:7B:9C:3F:3E:AF:81:E2:0F:0C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/aa7ca5fc-2ca8-3b1f-89be-923c5a72206e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.crl X509v3 Authority Key Identifier: keyid:58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer sbgp-ipAddrBlock: critical IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:94:0f:c6:d3:df:98:54:fc:8c:66:57:72:eb:fb:2c:fd:2a: 95:b4:aa:8f:29:80:e6:80:42:46:36:fe:33:2c:24:52:20:6a: 50:f0:10:4e:df:4a:ac:d7:48:5a:49:d8:42:2b:04:cf:c7:18: d4:e7:67:18:8b:60:ee:b1:8e:a6:6b:61:9a:25:64:45:7b:ff: 25:ef:4d:ef:d6:1a:a2:fe:23:e9:90:e6:9c:95:83:82:03:a3: 0b:0a:c9:3d:01:f0:35:02:71:b6:b8:a9:9a:1f:f7:54:50:93: b0:99:20:8a:6c:4a:bf:68:37:75:91:89:05:5c:a8:43:63:92: 18:bf:41:78:94:90:26:8d:e7:33:c1:25:9d:b3:df:9b:ca:0e: ec:bd:19:74:d2:7c:77:30:b1:eb:55:f9:21:ad:81:99:de:3d: c9:e4:6e:6f:5b:29:d6:06:42:db:99:0d:3a:95:73:7b:2f:90: c9:1c:07:86:74:64:8a:ef:fd:17:65:63:99:97:dd:3b:1c:da: ce:3a:f8:6b:ce:3f:f1:7a:2e:12:f0:85:af:6c:10:2b:e8:bf: 08:7a:ce:82:d0:51:3f:f1:19:11:e7:ec:ad:bf:1e:a4:e3:c0: 53:89:5c:8e:3d:63:e4:8f:5f:2f:59:55:71:c8:32:7e:2f:ac: aa:2a:94:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5dFKFp0s1eeNPdcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYy NmIxMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk ZGJkNGZkMjQtYjM4Zi00NWI2LTkzOGUtNGJjMzlkNjQyNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkAkQLzOLcUBoKl8NxJaSu3XJr+1IQhfTiSR TLXANuUZzy8yRwKndywuVBDD0AePHSr+Rxop5O4MAMsvQ+oUzhArCmzaGdwrBHEh TSz6HF/Qywl69Sez8CLgLnzyN+7mWKvm+CfGMBeayWNjq9R2MXablkh5NXSHIq/p /VxEh77zC072Q+koP//nqm8hkk8muBFSA/yBnoDkifNy+rKra6KRwSSmMQEsBfeu tQbufwcKSiyCo1mbCD1iphzfPKAgO8lK4IkX6H3tNX5AXvh/ZEa3sPzoPT/G546h RESvX5QQe1Mhxpa4sKJqBQuGhs9GdT/bn5ovK3HOTvyLecvciQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKWkcKf53th5Wyt7nD8+r4HiDwwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEy MWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvYWE3Y2E1ZmMtMmNhOC0z YjFmLTg5YmUtOTIzYzVhNzIyMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2VhMjFhN2ItNTk2Yy00NWY4LTg5 OWUtNjg3OTgxNWYyNmIxLzdlYTIxYTdiLTU5NmMtNDVmOC04OTllLTY4Nzk4MTVm MjZiMS5jcmwwHwYDVR0jBBgwFoAUWNXVMusQAMS/ihkzzuqjhi139KkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5 ODE1ZjI2YjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhaAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+UD8bT35hU/IxmV3Lr+yz9KpW0qo8pgOaAQkY2/jMsJFIgalDw EE7fSqzXSFpJ2EIrBM/HGNTnZxiLYO6xjqZrYZolZEV7/yXvTe/WGqL+I+mQ5pyV g4IDowsKyT0B8DUCcba4qZof91RQk7CZIIpsSr9oN3WRiQVcqENjkhi/QXiUkCaN 5zPBJZ2z35vKDuy9GXTSfHcwsetV+SGtgZnePcnkbm9bKdYGQtuZDTqVc3svkMkc B4Z0ZIrv/RdlY5mX3Tsc2s46+GvOP/F6LhLwha9sECvovwh6zoLQUT/xGRHn7K2/ HqTjwFOJXI49Y+SPXy9ZVXHIMn4vrKoqlII= -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:43 2026 by rpki-client