$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa File: 7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json) Hash identifier: xOQ12hHVTYFmwxz0cjIrrqY5PDrHir5QT/5GxzhPVqQ= Subject key identifier: C0:6E:54:59:15:1F:10:7F:0A:B4:AD:65:28:27:F7:5C:48:46:47:B0 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584E7204D7CFA68A6180CC169600 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 4226 IP address blocks: 2604:f580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d7:cf:a6:8a:61:80:cc:16:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=b5f267fa-bef2-40ff-978e-157633c6bfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:67:40:fc:85:b6:2e:01:85:61:0c:df:8d: 9c:72:69:88:32:4b:1b:d0:79:59:97:1b:f6:02:5f: 86:31:21:91:6d:f0:d0:1f:b5:b6:90:40:01:e1:dc: 21:43:80:bb:31:90:f0:69:d2:6f:6b:2e:d2:e2:02: 20:04:64:1f:7e:f9:1d:05:d3:95:d6:7e:9c:a7:db: 16:d9:fc:8b:b0:e3:2b:a1:3b:fa:dc:61:d0:c9:48: b0:9e:a2:98:77:3b:88:d7:22:97:9b:15:ab:e2:b7: e1:40:89:5b:aa:af:7d:97:a0:5a:d9:18:2f:4c:59: a5:40:19:c5:9d:78:c8:a9:b8:4a:1f:73:84:77:d1: f9:57:f3:ad:01:1f:c7:3e:92:39:8a:9d:99:bb:e3: 92:11:3b:0c:64:37:87:d8:6e:fa:c1:ee:18:c5:a9: 05:49:30:b5:9b:e5:fb:40:b5:09:ef:1d:43:79:01: 87:70:e4:dc:84:2b:ae:fa:7a:1e:fa:7b:42:36:c0: 2c:cb:4d:2f:54:18:e8:b9:24:02:59:0c:cf:51:d1: a8:b0:10:6f:d1:e6:f5:be:f0:0d:dd:2b:ce:cd:a3: 45:e9:fb:0b:91:51:ee:3a:ca:ed:7b:c7:32:6e:6b: ca:14:47:e9:52:31:03:49:96:63:14:79:28:7e:e2: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:54:59:15:1F:10:7F:0A:B4:AD:65:28:27:F7:5C:48:46:47:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f580::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:18:85:67:e7:42:22:4d:ca:30:15:a0:14:c2:cb:55:e3:34: 30:85:a1:4a:d6:b0:1a:ed:55:a5:56:cf:1b:ff:8a:b4:70:3f: a5:8a:86:55:ed:cf:ca:f6:c1:71:d3:b2:e5:a7:da:8b:d3:53: 53:1a:40:f8:cd:75:23:2a:69:75:95:10:5e:6d:c6:f1:1a:f9: d5:1e:ec:b4:d9:ba:8a:39:c8:2e:8e:87:b5:a1:5e:ac:33:9d: 0c:b3:43:d3:9a:10:fc:8c:e8:46:57:d6:80:7b:d2:e2:40:7d: 3e:77:06:2a:91:11:2e:44:6a:cf:62:02:d7:dd:f0:86:76:65: 23:48:25:aa:14:7a:bb:da:b0:50:a2:45:4c:4c:91:ec:d3:b0: 91:64:66:1a:4c:7f:05:9d:d4:27:88:7f:8e:c7:a5:97:9c:32: 7d:39:e9:5d:70:c2:05:c2:1a:c1:77:3d:6f:de:38:77:43:63: 0a:79:95:e0:42:2d:37:66:14:2a:a6:56:83:69:b6:7a:44:ff: 88:df:0a:b0:ee:ec:6f:27:7c:52:4f:a5:a7:8a:f3:ac:b5:c4: dd:72:25:2f:1c:48:47:57:9e:ad:9e:90:0e:9e:2f:3a:8c:da: 9b:d0:60:f4:0a:34:90:a5:60:68:a4:ae:09:95:3b:fb:96:1b: 06:f3:61:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5yBNfPpophgMwWlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YjVmMjY3ZmEtYmVmMi00MGZmLTk3OGUtMTU3NjMzYzZiZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+xnQPyFti4BhWEM342ccmmIMksb0HlZlxv2 Al+GMSGRbfDQH7W2kEAB4dwhQ4C7MZDwadJvay7S4gIgBGQffvkdBdOV1n6cp9sW 2fyLsOMroTv63GHQyUiwnqKYdzuI1yKXmxWr4rfhQIlbqq99l6Ba2RgvTFmlQBnF nXjIqbhKH3OEd9H5V/OtAR/HPpI5ip2Zu+OSETsMZDeH2G76we4YxakFSTC1m+X7 QLUJ7x1DeQGHcOTchCuu+noe+ntCNsAsy00vVBjouSQCWQzPUdGosBBv0eb1vvAN 3SvOzaNF6fsLkVHuOsrte8cybmvKFEfpUjEDSZZjFHkofuLLLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMBuVFkVHxB/CrStZSgn91xIRkewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNzUyMWE2MTQtMTg3Yy0z MTIzLWI3N2UtYmQ1OGQ1NmJmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaGIVn50IiTcowFaAUwstV4zQwhaFK1rAa7VWlVs8b/4q0cD+lioZV 7c/K9sFx07Llp9qL01NTGkD4zXUjKml1lRBebcbxGvnVHuy02bqKOcgujoe1oV6s M50Ms0PTmhD8jOhGV9aAe9LiQH0+dwYqkREuRGrPYgLX3fCGdmUjSCWqFHq72rBQ okVMTJHs07CRZGYaTH8FndQniH+Ox6WXnDJ9OeldcMIFwhrBdz1v3jh3Q2MKeZXg Qi03ZhQqplaDabZ6RP+I3wqw7uxvJ3xST6WnivOstcTdciUvHEhHV56tnpAOni86 jNqb0GD0CjSQpWBopK4JlTv7lhsG82FZ -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:41 2026 by rpki-client