$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa File: 3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa (raw, json) Hash identifier: cabikOF/VYx0IXbgoHqo12zTnohHQvOI45evjlbc+xQ= Subject key identifier: 63:6B:1C:19:58:02:4F:36:86:97:3A:AB:36:5A:BB:59:77:FA:EA:0F Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584E8F54EF648221F443300A4780 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 40382 IP address blocks: 2606:e540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ef:64:82:21:f4:43:30:0a:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=7d2d6c71-3bbe-4af3-9ef7-94ce02b5c79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:96:ff:f6:9c:31:cf:fa:eb:c5:69:4a:d0:8e: 80:1d:92:e8:d3:06:ec:bd:97:25:16:50:b1:82:3c: 43:28:b3:db:5d:bb:48:52:eb:d7:f9:81:ae:43:c3: 10:79:97:94:cf:69:84:38:c9:77:cb:68:79:6b:4a: 38:36:39:2a:ea:e2:b1:67:b5:09:c2:7a:03:fc:c8: 76:46:24:c4:cc:76:20:2b:2a:bc:ab:d7:d4:8c:be: 11:84:86:4f:9a:b4:0c:74:94:ec:76:ed:27:7d:fb: df:95:8e:f7:60:5e:1e:d5:e7:12:6f:ec:d1:48:c9: 12:ed:a7:01:5e:3e:bf:6f:f6:92:b9:03:88:f5:78: 12:16:ff:b3:ff:86:e5:f7:f5:1d:a0:a7:fc:c2:3a: 6c:6b:fa:3c:31:18:1a:c3:99:a0:8b:5d:27:5f:3f: 96:54:16:d7:c9:5b:42:55:87:90:2b:08:62:b7:c7: 3c:8d:4d:99:e6:95:cc:1e:0d:09:55:3c:1f:0d:cb: 93:59:1a:66:13:2c:af:0b:96:67:a2:38:fd:9a:5f: 71:0c:73:80:cb:6d:af:52:14:c4:02:a4:a9:9f:fb: f3:26:a0:ac:73:fb:28:a9:ca:d7:b9:7d:70:91:46: 49:29:0a:13:61:07:8d:c1:66:81:11:d8:89:97:61: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6B:1C:19:58:02:4F:36:86:97:3A:AB:36:5A:BB:59:77:FA:EA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/3a41c66c-7e29-38fb-9f24-8df2f5fd953f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d5:56:b6:ab:d8:71:9a:a2:27:59:bc:0f:2f:60:ba:2c:ea: c8:95:7c:bb:4a:ac:cc:04:ab:8e:c7:12:2f:57:57:fb:17:c7: a9:ca:42:3f:af:81:43:32:14:09:82:a2:0d:e2:97:c5:5c:26: 5f:59:4e:2c:35:c7:3e:f6:58:30:7e:e9:60:84:9c:0b:3b:a1: 77:fb:f3:b5:23:00:82:cf:fe:87:0d:aa:4a:79:a1:8b:54:db: c2:9a:5f:a7:ef:b3:51:c3:eb:2b:13:d3:01:76:42:98:fb:97: 89:82:30:35:15:59:0f:81:a6:2c:97:9e:85:e6:eb:c2:83:7c: 91:30:f2:ae:79:9c:4b:f9:5e:18:0a:3d:5e:05:6f:e7:98:a7: 7c:84:5b:bb:3c:bb:56:1c:1d:1e:27:d0:da:1b:63:e6:7f:33: f0:aa:ac:5b:68:69:59:38:a6:3e:43:90:01:01:07:87:95:ea: cd:fb:17:e7:77:67:ce:c2:0d:69:49:a0:7b:d2:7f:a4:6d:da: c8:56:dc:de:18:13:73:68:c7:55:12:f4:49:8a:3c:cd:78:09: 86:20:10:00:18:e0:71:34:e1:d1:ca:a4:0e:99:cd:c9:1f:01: d5:37:b5:fd:eb:b3:57:88:93:b3:02:84:1b:8c:3b:20:c8:d1: 29:26:4f:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6PVO9kgiH0QzAKR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk N2QyZDZjNzEtM2JiZS00YWYzLTllZjctOTRjZTAyYjVjNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpb/9pwxz/rrxWlK0I6AHZLo0wbsvZclFlCx gjxDKLPbXbtIUuvX+YGuQ8MQeZeUz2mEOMl3y2h5a0o4Njkq6uKxZ7UJwnoD/Mh2 RiTEzHYgKyq8q9fUjL4RhIZPmrQMdJTsdu0nffvflY73YF4e1ecSb+zRSMkS7acB Xj6/b/aSuQOI9XgSFv+z/4bl9/UdoKf8wjpsa/o8MRgaw5mgi10nXz+WVBbXyVtC VYeQKwhit8c8jU2Z5pXMHg0JVTwfDcuTWRpmEyyvC5Znojj9ml9xDHOAy22vUhTE AqSpn/vzJqCsc/soqcrXuX1wkUZJKQoTYQeNwWaBEdiJl2E9uQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGNrHBlYAk82hpc6qzZau1l3+uoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvM2E0MWM2NmMtN2UyOS0z OGZiLTlmMjQtOGRmMmY1ZmQ5NTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgblQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAF1Va2q9hxmqInWbwPL2C6LOrIlXy7SqzMBKuOxxIvV1f7F8epykI/ r4FDMhQJgqIN4pfFXCZfWU4sNcc+9lgwfulghJwLO6F3+/O1IwCCz/6HDapKeaGL VNvCml+n77NRw+srE9MBdkKY+5eJgjA1FVkPgaYsl56F5uvCg3yRMPKueZxL+V4Y Cj1eBW/nmKd8hFu7PLtWHB0eJ9DaG2PmfzPwqqxbaGlZOKY+Q5ABAQeHlerN+xfn d2fOwg1pSaB70n+kbdrIVtzeGBNzaMdVEvRJijzNeAmGIBAAGOBxNOHRyqQOmc3J HwHVN7X967NXiJOzAoQbjDsgyNEpJk+c -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:36 2026 by rpki-client