$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa File: d6380c44-3d1d-381d-b9e1-f4928664013c.roa (raw, json) Hash identifier: otNprK40lPxKNxZTR36xGOWTCulpZZXBvwcYc0dSWJE= Subject key identifier: 77:08:30:62:26:1E:30:DF:81:4A:BA:FD:07:C3:C0:68:4B:36:82:70 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584E997A131B5A853413D5909560 Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa Signing time: Fri 24 Jul 2026 00:13:09 +0000 ROA not before: Fri 24 Jul 2026 00:13:09 +0000 ROA not after: Thu 22 Oct 2026 00:13:09 +0000 asID: 46733 IP address blocks: 2602:f9f4:20::/48 maxlen: 48 2602:f9f4:21::/48 maxlen: 48 2602:f9f4:22::/48 maxlen: 48 2602:f9f4:23::/48 maxlen: 48 2602:f9f4:24::/48 maxlen: 48 2602:f9f4:25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:99:7a:13:1b:5a:85:34:13:d5:90:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Jul 24 00:13:09 2026 GMT Not After : Oct 22 00:13:09 2026 GMT Subject: CN=309f37bc-00e9-4be4-9007-8b849d64d202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:bf:d9:c1:fb:54:03:d1:fc:f0:f6:ad:bb: ea:79:d0:fc:31:6b:3f:ea:1d:20:c8:39:09:3a:cd: 56:6e:a2:c9:1b:bc:9c:84:e5:d3:26:e8:bc:7c:a8: 21:a4:31:17:f7:6b:6f:bc:b2:32:ca:28:fe:49:86: 65:ea:68:69:c9:5a:a2:99:89:b9:63:45:46:37:85: 83:51:36:83:f5:92:25:f1:ad:23:2a:3b:13:4f:c4: 1b:ef:6c:e8:66:11:da:10:82:07:8a:eb:de:92:89: a3:ec:da:23:52:71:0a:e3:51:ab:8f:75:e9:e2:cd: 3c:f3:c3:e5:ec:74:d6:46:2c:de:d4:0b:7c:fd:04: 7a:01:24:5d:f7:d7:a4:8e:fd:15:11:91:35:57:bc: 87:83:25:be:ee:c4:68:f7:81:a5:8f:fd:48:a3:4c: 9b:ce:77:b2:29:93:6e:e9:da:ff:69:33:25:b7:e9: ed:dd:e3:f9:bb:03:3d:2c:8c:be:55:55:e1:1a:52: 01:2e:60:50:ed:2b:85:dc:b3:bb:1e:a3:c6:d5:0f: 86:c1:31:c4:28:f3:80:36:96:a1:a3:b7:36:23:7c: 46:2c:fb:7c:4f:a6:61:65:5f:fe:25:c4:a4:a5:c3: d0:17:57:f4:da:53:6b:7b:42:99:b2:4c:fc:c2:95: 5e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:08:30:62:26:1E:30:DF:81:4A:BA:FD:07:C3:C0:68:4B:36:82:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/d6380c44-3d1d-381d-b9e1-f4928664013c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f4:20::-2602:f9f4:25:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1c:a6:83:81:34:30:11:20:a5:f4:fd:35:a1:41:cc:86:33: 8d:c8:ec:3e:fc:36:4c:6b:6a:d8:e8:d9:a2:37:9d:c0:00:dd: cd:3c:9c:e8:0c:e9:77:a5:2e:6e:13:8e:32:4d:da:ef:ba:a4: 4b:e7:6f:39:74:d1:d7:bd:d6:f8:6e:26:d2:30:9c:6c:0b:b5: 9e:6d:29:0c:11:91:3f:f9:f3:d1:01:0f:2a:6d:ff:8e:ee:a3: 54:cd:6c:ae:d4:9c:2a:43:cd:39:73:25:ff:85:46:da:ba:84: dc:32:8e:ad:09:5d:5a:7c:31:63:22:4d:7e:68:64:22:95:4f: 37:8b:ef:4a:c7:7d:94:d4:91:97:7f:0c:c9:ff:45:2a:f9:c7: 86:62:89:b9:40:8d:a1:a8:84:b5:ed:1b:d1:7e:00:c8:19:fb: f9:00:69:ee:b9:ad:c0:44:7f:c7:6e:b9:20:0d:92:a5:6d:e1: e6:d4:7f:50:d1:b5:36:2f:b4:5b:78:8e:5a:99:e0:4f:5d:75: e4:ce:ce:fa:25:91:2f:6c:fe:24:ef:26:e0:66:40:50:ca:f7: ba:df:21:a8:14:b7:28:79:fe:de:40:2e:6a:81:59:04:2c:fa: dd:94:f6:51:2c:c6:a3:00:e9:3c:72:78:33:50:ff:f9:5b:45: 9c:6b:c3:5b -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6ZehMbWoU0E9WQlWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MDcyNDAwMTMwOVoXDTI2MTAyMjAwMTMwOVowLzEtMCsGA1UEAxMk MzA5ZjM3YmMtMDBlOS00YmU0LTkwMDctOGI4NDlkNjRkMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN2/2cH7VAPR/PD2rbvqedD8MWs/6h0gyDkJ Os1WbqLJG7ychOXTJui8fKghpDEX92tvvLIyyij+SYZl6mhpyVqimYm5Y0VGN4WD UTaD9ZIl8a0jKjsTT8Qb72zoZhHaEIIHiuvekomj7NojUnEK41Grj3Xp4s0888Pl 7HTWRize1At8/QR6ASRd99ekjv0VEZE1V7yHgyW+7sRo94Glj/1Io0ybzneyKZNu 6dr/aTMlt+nt3eP5uwM9LIy+VVXhGlIBLmBQ7SuF3LO7HqPG1Q+GwTHEKPOANpah o7c2I3xGLPt8T6ZhZV/+JcSkpcPQF1f02lNre0KZskz8wpVeYQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFHcIMGImHjDfgUq6/QfDwGhLNoJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvZDYzODBjNDQtM2QxZC0z ODFkLWI5ZTEtZjQ5Mjg2NjQwMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUmAvn0 ACADBwEmAvn0ACQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAEBymg4E0MBEgpfT9NaFBzIYzjcjsPvw2TGtq 2OjZojedwADdzTyc6Azpd6UubhOOMk3a77qkS+dvOXTR173W+G4m0jCcbAu1nm0p DBGRP/nz0QEPKm3/ju6jVM1srtScKkPNOXMl/4VG2rqE3DKOrQldWnwxYyJNfmhk IpVPN4vvSsd9lNSRl38Myf9FKvnHhmKJuUCNoaiEte0b0X4AyBn7+QBp7rmtwER/ x265IA2SpW3h5tR/UNG1Ni+0W3iOWpngT1115M7O+iWRL2z+JO8m4GZAUMr3ut8h qBS3KHn+3kAuaoFZBCz63ZT2USzGowDpPHJ4M1D/+VtFnGvDWw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:01:40 2026 by rpki-client