$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa File: 890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa (raw, json) Hash identifier: K397mlw1KhWOP03S3s/i0RaHCk1wWr5+IFVDMWB/wFQ= Subject key identifier: 87:73:EF:AB:26:39:EA:8E:78:BA:96:E3:D4:46:9D:3E:CA:A9:1D:8E Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584E7204D7C44883A9CB26E26B00 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 4226 IP address blocks: 2604:f586::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d7:c4:48:83:a9:cb:26:e2:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=1bd8cda3-0d37-458e-86df-9de4b74eeafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:6f:01:7d:2a:4a:c5:ad:2f:ff:f0:9a:c8: 4e:42:05:03:c4:ff:3d:e2:32:8e:8c:73:9f:af:9b: ef:c9:fa:43:d0:65:19:8c:fa:0a:d9:ec:52:19:30: a2:9a:ce:cc:8f:a5:0e:30:98:c4:c6:ee:24:c8:fd: a9:5f:b7:5d:f4:27:26:5c:8f:9a:ee:03:e3:e9:9f: 72:92:be:37:d4:c7:ee:2e:c3:c1:e5:2b:49:28:11: d6:10:bc:6d:2f:01:fc:f1:49:09:a3:d1:88:95:86: 8f:b7:e5:19:37:51:c0:90:98:3e:59:16:e6:c0:ea: ae:d9:42:e2:99:15:b3:7b:de:2e:bf:f2:9d:3c:f5: d8:86:37:7c:48:bd:da:2a:03:3a:29:c4:4b:10:5a: 97:84:c3:fd:6c:0d:ed:62:05:a9:8c:35:fc:71:3c: 7b:f9:15:83:c4:21:dc:a8:3b:f0:35:35:8e:66:98: 0d:02:7e:ba:4b:05:a3:21:aa:ed:28:23:5e:37:dc: 51:22:a8:cc:cd:8c:b6:a1:91:80:a0:c8:a4:b5:a2: 3d:ee:0e:8a:f5:18:fc:ef:2d:b5:9b:d5:9e:9e:b3: 3d:b6:14:44:3c:6c:0e:af:63:c9:f0:d8:d6:48:87: f6:f9:57:34:9f:13:c2:8d:4e:4f:95:8a:b4:7d:35: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:73:EF:AB:26:39:EA:8E:78:BA:96:E3:D4:46:9D:3E:CA:A9:1D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/890f9c2e-4246-312b-a869-ebb2cfbdd7fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f586::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:4f:12:52:e0:7a:33:09:14:65:45:13:1a:f5:75:75:26:50: eb:a0:c6:ee:1c:cd:43:96:10:f1:7a:76:c0:5e:0b:64:c2:68: 9e:8f:f8:13:d6:a9:19:69:f1:06:6d:da:06:b3:84:df:24:b7: df:e3:c5:ab:46:cd:d0:3a:b2:13:a6:6a:58:be:0e:ec:ba:7c: 04:fe:10:3b:bb:a5:d4:52:4c:1c:9e:b5:82:91:19:d1:32:65: 0a:ab:a4:df:60:dc:82:c6:54:ef:e6:da:04:6a:f0:af:23:01: bf:ef:cb:bb:df:0a:a9:87:a0:d3:dd:0b:d7:f7:4c:c3:ce:ad: 38:43:fe:e7:2a:e7:01:d2:b3:7e:b0:b1:b7:b9:fa:fa:06:85: 41:69:ec:8e:15:0b:1c:fa:bc:69:c8:90:35:1e:43:2b:7a:11: 23:bf:2b:d4:15:df:b8:8f:ef:7f:32:50:a8:bd:72:65:95:e1: 0c:2e:ac:fd:50:a1:e8:4e:28:05:6e:46:27:58:cb:4b:f1:fd: 8c:fe:0c:af:80:31:95:91:b1:1a:6e:09:0e:5b:78:af:52:43: 7c:ac:57:16:5c:23:8e:84:af:7a:df:22:e4:e8:e4:96:9a:12: 50:fe:92:ed:db:ad:6d:45:b9:c7:1a:c7:ea:65:73:54:ee:78: 7a:3f:fa:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5yBNfESIOpyybiawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk MWJkOGNkYTMtMGQzNy00NThlLTg2ZGYtOWRlNGI3NGVlYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE5vAX0qSsWtL//wmshOQgUDxP894jKOjHOf r5vvyfpD0GUZjPoK2exSGTCims7Mj6UOMJjExu4kyP2pX7dd9CcmXI+a7gPj6Z9y kr431MfuLsPB5StJKBHWELxtLwH88UkJo9GIlYaPt+UZN1HAkJg+WRbmwOqu2ULi mRWze94uv/KdPPXYhjd8SL3aKgM6KcRLEFqXhMP9bA3tYgWpjDX8cTx7+RWDxCHc qDvwNTWOZpgNAn66SwWjIartKCNeN9xRIqjMzYy2oZGAoMiktaI97g6K9Rj87y21 m9WenrM9thREPGwOr2PJ8NjWSIf2+Vc0nxPCjU5PlYq0fTWzOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIdz76smOeqOeLqW49RGnT7KqR2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvODkwZjljMmUtNDI0Ni0z MTJiLWE4NjktZWJiMmNmYmRkN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1hjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6TxJS4HozCRRlRRMa9XV1JlDroMbuHM1DlhDxenbAXgtkwmiej/gT 1qkZafEGbdoGs4TfJLff48WrRs3QOrITpmpYvg7sunwE/hA7u6XUUkwcnrWCkRnR MmUKq6TfYNyCxlTv5toEavCvIwG/78u73wqph6DT3QvX90zDzq04Q/7nKucB0rN+ sLG3ufr6BoVBaeyOFQsc+rxpyJA1HkMrehEjvyvUFd+4j+9/MlCovXJlleEMLqz9 UKHoTigFbkYnWMtL8f2M/gyvgDGVkbEabgkOW3ivUkN8rFcWXCOOhK963yLk6OSW mhJQ/pLt261tRbnHGsfqZXNU7nh6P/rs -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:58 2026 by rpki-client