$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa File: 9fd150ce-2142-3c1e-a371-3207dc1e5083.roa (raw, json) Hash identifier: yrUfLtxqvakhoODi4jqergCHR1tuCF5noWQYr8kiG1c= Subject key identifier: DE:AA:78:C0:54:83:6E:23:3D:78:59:6C:8E:27:42:9B:40:26:CC:DE Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584E86F4F4E6E13A0BF11D77DCC0 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 14270 IP address blocks: 2607:f118::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:f4:e6:e1:3a:0b:f1:1d:77:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=5f1cbdc6-a8b0-462b-b344-116ef7531862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:61:20:3a:a6:52:87:57:79:ae:20:c5:df: 11:87:fb:1c:cb:b7:2e:ea:af:da:14:da:b2:14:ca: 53:b2:ee:f8:67:ed:c5:cf:29:c7:c4:5a:9f:0b:84: 30:18:62:ab:5c:80:b9:5f:53:bd:e8:0d:03:56:5c: 4d:db:5e:73:07:96:54:d8:45:9b:a3:99:7c:63:af: 26:e2:56:d0:73:28:1a:73:15:39:6b:9d:6a:40:43: 7a:f7:b2:34:14:c4:ff:e2:c4:60:a1:a4:0d:b3:43: 33:43:4f:2f:14:90:ef:0c:7d:c1:8d:be:be:30:55: f6:75:2b:ed:84:0f:46:bc:b2:27:db:e6:db:3a:cd: db:76:05:32:58:9d:9f:3d:3c:01:d8:14:99:9a:b9: 04:b2:fa:d5:2b:a8:6d:ca:51:e1:48:e5:18:06:2c: c0:3b:e1:81:0a:42:9f:37:a2:26:f7:79:e1:16:a3: 9c:13:05:cc:cc:a7:77:d4:5b:5a:e2:82:f9:6d:af: 30:23:30:b9:f1:b7:23:fc:b1:35:cd:eb:43:e0:d5: d7:38:e8:a1:14:b9:d8:e1:42:a3:1f:06:20:18:b3: b4:c4:c8:e6:19:42:45:3f:f5:29:eb:58:42:da:79: 07:47:3b:3f:cf:f9:00:d9:b4:1e:5d:1c:e0:92:8f: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:78:C0:54:83:6E:23:3D:78:59:6C:8E:27:42:9B:40:26:CC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/9fd150ce-2142-3c1e-a371-3207dc1e5083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv6: 2607:f118::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:8b:1b:e2:73:8c:94:ca:2b:c3:65:39:92:05:14:1d:74:c5: a5:8a:78:68:49:d4:f4:a4:7e:89:1e:f0:ee:91:ce:ca:7f:ac: 74:2e:87:cb:aa:0c:81:6b:b3:9f:39:bb:c7:78:2b:7c:7d:ea: 78:49:15:58:09:8d:7d:65:26:90:cc:20:16:a8:b8:34:3d:b2: 61:39:40:59:59:72:6a:3c:63:92:8d:fa:a1:3f:62:4b:a0:9a: 68:c4:34:52:8a:94:f2:8c:ed:c3:6e:20:bc:2a:e9:df:33:5d: 55:c7:5a:26:cb:3c:c4:85:b8:bd:6b:a2:37:34:a8:16:27:42: f3:6a:04:bc:d4:12:bb:be:99:ca:aa:21:48:64:9e:f1:0e:93: 05:18:e6:8c:e8:02:96:a1:27:22:de:38:8d:91:4d:cf:74:90: 71:ca:81:e0:55:19:c1:75:ce:f1:58:7d:b2:4a:bc:32:db:ee: 5a:f3:15:11:17:fe:8a:b0:41:2e:ba:e1:2f:3d:f8:97:f2:97: 4a:9f:a1:d2:64:25:70:37:86:ce:3b:fd:13:7b:26:5c:9c:93: 9c:ec:58:25:4a:55:0d:f3:21:e6:8d:7b:25:81:b3:21:47:22: 36:46:d5:d4:50:34:94:87:0e:e7:c4:02:c2:58:63:21:56:47: 1d:31:06:c1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6G9PTm4ToL8R133MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk NWYxY2JkYzYtYThiMC00NjJiLWIzNDQtMTE2ZWY3NTMxODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCphIDqmUodXea4gxd8Rh/scy7cu6q/aFNqy FMpTsu74Z+3FzynHxFqfC4QwGGKrXIC5X1O96A0DVlxN215zB5ZU2EWbo5l8Y68m 4lbQcygacxU5a51qQEN697I0FMT/4sRgoaQNs0MzQ08vFJDvDH3Bjb6+MFX2dSvt hA9GvLIn2+bbOs3bdgUyWJ2fPTwB2BSZmrkEsvrVK6htylHhSOUYBizAO+GBCkKf N6Im93nhFqOcEwXMzKd31Fta4oL5ba8wIzC58bcj/LE1zetD4NXXOOihFLnY4UKj HwYgGLO0xMjmGUJFP/Up61hC2nkHRzs/z/kA2bQeXRzgko9SewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN6qeMBUg24jPXhZbI4nQptAJszeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOWZkMTUwY2UtMjE0Mi0z YzFlLWEzNzEtMzIwN2RjMWU1MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfxGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBixvic4yUyivDZTmSBRQddMWlinhoSdT0pH6JHvDukc7Kf6x0LofL qgyBa7OfObvHeCt8fep4SRVYCY19ZSaQzCAWqLg0PbJhOUBZWXJqPGOSjfqhP2JL oJpoxDRSipTyjO3DbiC8KunfM11Vx1omyzzEhbi9a6I3NKgWJ0LzagS81BK7vpnK qiFIZJ7xDpMFGOaM6AKWoSci3jiNkU3PdJBxyoHgVRnBdc7xWH2ySrwy2+5a8xUR F/6KsEEuuuEvPfiX8pdKn6HSZCVwN4bOO/0TeyZcnJOc7FglSlUN8yHmjXslgbMh RyI2RtXUUDSUhw7nxALCWGMhVkcdMQbB -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:10 2026 by rpki-client