$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa File: df87bb72-dc52-3639-a0af-dcba3509be30.roa (raw, json) Hash identifier: wBy6QYWSBWaWRMkPN0F7BPHeUSHZTyQ3QOh4RknfiWU= Subject key identifier: E7:4D:BD:71:1B:20:8C:0A:08:DE:A0:E2:B9:24:E6:25:FE:41:D7:99 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584E7204C6F37619FEDD28544EC0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 36236 IP address blocks: 2620:49:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c6:f3:76:19:fe:dd:28:54:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=6777030c-a184-4c23-a5d8-c5dc64cb1b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:98:56:04:76:14:f8:d3:bb:37:d9:ec:46: cb:3d:72:42:c2:e2:4a:9b:bc:38:64:b7:b8:94:11: 56:b5:4c:02:d2:27:02:3c:74:99:1a:f0:87:00:89: df:94:71:40:14:89:00:bb:b7:d4:dc:c0:9c:f6:cb: 51:23:ed:4f:85:3c:6b:66:44:c5:58:af:ca:72:89: 89:55:c1:94:94:d5:39:05:a9:9c:5a:e0:96:73:71: 3f:93:de:f2:a6:fc:12:71:5d:81:1a:c3:a1:87:a3: 59:52:c8:36:f0:a6:a5:64:a1:a6:38:6d:2d:e8:f8: b4:ad:8f:28:4f:e7:1c:92:f8:43:9f:4f:4c:10:9d: 22:28:6a:5a:f4:19:5d:28:a0:aa:b4:e3:62:f1:81: 44:42:24:72:74:aa:f0:67:0e:d3:57:9e:b4:01:88: ff:65:d8:77:f2:2d:3f:25:8c:10:0a:0a:21:57:06: e3:91:27:e4:0b:04:34:10:1d:f1:b6:8f:60:19:3e: 09:f8:52:68:91:3f:c6:47:8d:86:92:50:70:21:3e: 70:44:e2:a0:04:73:10:b1:57:c5:17:75:44:aa:a5: 9d:4d:f9:88:a6:f7:d1:2d:1a:0e:ef:74:2f:3c:34: 9e:58:75:a1:bb:4c:88:ec:a1:da:02:8e:13:91:c9: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:BD:71:1B:20:8C:0A:08:DE:A0:E2:B9:24:E6:25:FE:41:D7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/df87bb72-dc52-3639-a0af-dcba3509be30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv6: 2620:49:4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b0:d6:0d:86:7a:eb:91:71:9c:72:3f:42:66:ca:f5:c2:60: cf:be:e8:73:9a:fe:18:73:06:85:3a:e9:a1:5c:c7:14:8e:bc: b2:7d:f8:e3:9d:d6:ab:2c:c8:aa:52:e0:17:3a:55:7a:6f:76: 73:c3:c8:fe:9c:97:ee:2a:dd:c1:1b:96:c5:33:05:aa:c3:c8: de:cd:a1:70:6d:93:59:0b:d8:49:24:39:39:f3:41:ae:65:0d: 35:29:1c:d8:da:b4:67:23:f2:29:5e:ff:06:23:75:42:b4:95: a3:a0:31:18:94:a7:bc:96:41:b1:fe:ef:b0:bd:81:e2:27:59: ca:71:97:6f:b0:54:9e:08:ed:2e:58:5d:1b:e7:ef:b3:f9:ab: ee:44:84:f5:c5:7d:de:70:a1:68:9d:2c:0c:d3:c5:ed:cc:b1: 12:c4:31:79:68:d8:a9:a8:c2:a3:3e:c0:99:4a:01:e6:58:b4: 03:a5:0e:69:d2:17:6a:ec:3b:17:0c:6c:31:a4:b1:91:e2:9a: 38:32:76:a5:7b:19:92:da:a4:16:a4:76:9c:f5:bd:89:70:f4: 5c:d8:44:e8:50:da:35:15:6b:8c:69:f3:ec:d7:70:e4:08:aa: 92:4c:5a:e3:76:de:8d:76:0c:dd:47:5a:87:ce:0b:26:2e:81: b2:c8:23:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMbzdhn+3ShUTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Njc3NzAzMGMtYTE4NC00YzIzLWE1ZDgtYzVkYzY0Y2IxYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopmYVgR2FPjTuzfZ7EbLPXJCwuJKm7w4ZLe4 lBFWtUwC0icCPHSZGvCHAInflHFAFIkAu7fU3MCc9stRI+1PhTxrZkTFWK/KcomJ VcGUlNU5BamcWuCWc3E/k97ypvwScV2BGsOhh6NZUsg28KalZKGmOG0t6Pi0rY8o T+cckvhDn09MEJ0iKGpa9BldKKCqtONi8YFEQiRydKrwZw7TV560AYj/Zdh38i0/ JYwQCgohVwbjkSfkCwQ0EB3xto9gGT4J+FJokT/GR42GklBwIT5wROKgBHMQsVfF F3VEqqWdTfmIpvfRLRoO73QvPDSeWHWhu0yI7KHaAo4TkcnoWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOdNvXEbIIwKCN6g4rkk5iX+QdeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZGY4N2JiNzItZGM1Mi0z NjM5LWEwYWYtZGNiYTM1MDliZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAASQAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqw1g2GeuuRcZxyP0JmyvXCYM++6HOa/hhzBoU66aFcxxSOvLJ9 +OOd1qssyKpS4Bc6VXpvdnPDyP6cl+4q3cEblsUzBarDyN7NoXBtk1kL2EkkOTnz Qa5lDTUpHNjatGcj8ile/wYjdUK0laOgMRiUp7yWQbH+77C9geInWcpxl2+wVJ4I 7S5YXRvn77P5q+5EhPXFfd5woWidLAzTxe3MsRLEMXlo2KmowqM+wJlKAeZYtAOl DmnSF2rsOxcMbDGksZHimjgydqV7GZLapBakdpz1vYlw9FzYROhQ2jUVa4xp8+zX cOQIqpJMWuN23o12DN1HWofOCyYugbLII3E= -----END CERTIFICATE-----Generated at Fri Jul 24 07:47:33 2026 by rpki-client