$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa File: 706a369f-74a7-310b-b9f6-4d2f898435d9.roa (raw, json) Hash identifier: lHn9CVv3XEl5aijgYNrZ/kYZAoQafRp2HixT/TyOgVU= Subject key identifier: E4:9F:43:ED:70:0A:B0:A7:A6:45:EF:06:C1:E9:6D:CA:EE:E4:D4:E9 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584E5BAF56711BF9EAB3D6E1E560 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa Signing time: Wed 01 Jul 2026 21:00:12 +0000 ROA not before: Wed 01 Jul 2026 21:00:12 +0000 ROA not after: Tue 29 Sep 2026 21:00:12 +0000 asID: 40160 IP address blocks: 2604:3000::/32 maxlen: 48 2604:d380::/32 maxlen: 48 2605:6d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:af:56:71:1b:f9:ea:b3:d6:e1:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Jul 1 21:00:12 2026 GMT Not After : Sep 29 21:00:12 2026 GMT Subject: CN=162c2e3d-af7a-4d72-812e-ef7ccae0d3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:99:b4:f1:fb:6e:95:27:60:0b:46:e2:5b:e6: c6:80:f9:28:2b:e8:08:ab:b2:2b:07:21:5b:e2:b9: c7:7d:49:0b:ea:4d:c8:73:5d:de:64:09:da:77:fb: bb:ee:be:20:6c:5b:f6:fb:3a:d0:fe:23:20:34:20: e6:92:63:ce:c9:55:df:98:54:ed:cd:dc:f4:74:b5: ed:5d:57:53:94:41:8d:45:04:73:1a:ac:94:a1:03: a0:9b:c8:a8:44:8d:24:ee:76:12:79:f7:97:14:dc: 2f:07:17:45:20:12:dd:75:af:e2:77:fe:7a:87:6d: 74:cb:ca:99:8e:c7:a0:6a:e1:45:99:15:ae:40:98: 1e:27:6a:62:8e:5c:d7:b9:08:8f:97:5d:5b:eb:0e: f8:cb:2f:14:5e:0a:25:e5:d2:e9:2a:b8:a1:76:74: 8f:c4:51:9b:2c:a2:e1:26:c2:20:42:65:56:60:18: 74:ac:bc:ea:f0:49:84:a0:5d:aa:91:27:f0:0c:a5: 53:ce:7a:5d:cd:f5:c9:f8:0d:bb:16:4f:ca:76:30: bd:7f:fe:52:86:33:be:08:15:f5:30:61:dc:a8:5e: 6c:84:a2:c4:19:78:c5:77:c6:d8:50:6c:cf:b8:24: 0f:28:74:a6:e0:f7:f9:3c:a3:9d:ae:cc:f7:d5:fc: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9F:43:ED:70:0A:B0:A7:A6:45:EF:06:C1:E9:6D:CA:EE:E4:D4:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/706a369f-74a7-310b-b9f6-4d2f898435d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv6: 2604:3000::/32 2604:d380::/32 2605:6d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:23:33:d7:cc:c3:27:06:2e:f0:93:e0:ed:b5:f8:38:3e:f8: de:8d:55:7b:12:e5:03:55:e9:16:83:bc:da:82:50:4b:ea:40: 22:ce:5a:c2:50:e4:3d:f5:e8:33:a4:5c:8d:8b:34:44:3c:85: ad:45:93:92:55:85:1c:ec:41:1f:b9:44:85:51:e7:bc:c5:e0: 33:e2:21:a5:e5:0b:5e:cd:54:8b:ae:3a:f6:ad:2f:10:a3:46: 6d:eb:29:d0:9c:93:0f:af:67:a3:83:e6:d5:aa:03:34:7a:e1: 66:af:10:e5:d4:5b:56:4a:47:fe:eb:1b:a3:ec:5f:bb:57:02: 49:03:67:d6:0d:8d:35:19:0d:47:78:fe:b6:86:35:11:52:92: 19:d9:61:e2:5d:6a:a2:46:e0:bb:cd:c6:26:60:a1:33:43:8b: 27:72:89:d0:d6:e3:8a:2c:ef:17:61:30:c2:21:f9:d3:0a:9d: 0d:3c:44:3d:1b:15:1d:1d:79:87:6c:c8:80:99:fb:52:e2:49: 64:39:c1:e9:18:85:cc:6e:c9:d6:d0:77:27:8b:0f:54:5f:c5: c4:39:fe:37:2f:ea:43:16:bd:31:98:c1:a6:ff:54:61:a1:b3: 90:88:d0:62:d1:c5:84:55:c0:60:93:f0:f0:0b:e5:f4:15:7e: 67:ec:0a:b1 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE5br1ZxG/nqs9bh5WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk MTYyYzJlM2QtYWY3YS00ZDcyLTgxMmUtZWY3Y2NhZTBkM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZm08ftulSdgC0biW+bGgPkoK+gIq7IrByFb 4rnHfUkL6k3Ic13eZAnad/u77r4gbFv2+zrQ/iMgNCDmkmPOyVXfmFTtzdz0dLXt XVdTlEGNRQRzGqyUoQOgm8ioRI0k7nYSefeXFNwvBxdFIBLdda/id/56h210y8qZ jsegauFFmRWuQJgeJ2pijlzXuQiPl11b6w74yy8UXgol5dLpKrihdnSPxFGbLKLh JsIgQmVWYBh0rLzq8EmEoF2qkSfwDKVTznpdzfXJ+A27Fk/KdjC9f/5ShjO+CBX1 MGHcqF5shKLEGXjFd8bYUGzPuCQPKHSm4Pf5PKOdrsz31fzbkwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFOSfQ+1wCrCnpkXvBsHpbcru5NTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvNzA2YTM2OWYtNzRhNy0z MTBiLWI5ZjYtNGQyZjg5ODQzNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAJgQwAAMF ACYE04ADBQAmBW2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADMjM9fMwycGLvCT4O21+Dg++N6NVXsS5QNV 6RaDvNqCUEvqQCLOWsJQ5D316DOkXI2LNEQ8ha1Fk5JVhRzsQR+5RIVR57zF4DPi IaXlC17NVIuuOvatLxCjRm3rKdCckw+vZ6OD5tWqAzR64WavEOXUW1ZKR/7rG6Ps X7tXAkkDZ9YNjTUZDUd4/raGNRFSkhnZYeJdaqJG4LvNxiZgoTNDiydyidDW44os 7xdhMMIh+dMKnQ08RD0bFR0deYdsyICZ+1LiSWQ5wekYhcxuydbQdyeLD1RfxcQ5 /jcv6kMWvTGYwab/VGGhs5CI0GLRxYRVwGCT8PAL5fQVfmfsCrE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:30:16 2026 by rpki-client