$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa File: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json) Hash identifier: OtheYtj+8j0gkTW/72xpo7ep1lZE2e05hr47EOD4M2g= Subject key identifier: 44:F3:29:34:83:31:EF:B8:96:A4:3F:76:60:94:41:08:CC:40:32:3F Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584E9384F38E50A3F3DD13F1A380 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f3:8e:50:a3:f3:dd:13:f1:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=0fb13e64-fe8b-47da-839b-4e9673261c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:7b:52:e5:07:fd:b8:b5:18:dc:18:d5:ff: dd:e3:45:09:e8:d9:98:0d:fd:69:9d:49:ab:44:58: bd:cb:76:80:72:ed:cf:da:bd:51:1a:d5:37:d5:13: 18:93:fc:30:24:eb:6b:42:d8:c0:12:79:7d:ed:45: 41:81:c7:eb:a2:7e:b2:4f:b9:21:86:2c:9c:10:15: cf:40:7c:83:65:47:8e:18:6f:22:d0:43:47:da:2c: 4d:35:8c:48:75:8f:50:e7:91:80:49:35:bd:be:a3: ff:85:03:a8:19:d1:ea:b4:73:f9:c7:9c:9f:d4:c4: a7:23:2e:a6:cb:b2:10:f0:6a:c3:ff:db:07:32:64: d1:e5:fd:3d:a8:14:2a:7a:4d:d4:54:04:0c:28:22: 71:b0:3c:48:49:0e:bb:ba:83:84:7d:81:f2:15:e5: fc:1d:31:54:05:8e:00:42:06:66:3a:e7:dd:13:91: 23:cb:42:a1:92:d5:1d:9a:35:67:16:90:8e:6e:c9: fb:e2:93:ad:0b:e7:74:e2:e1:f9:76:3a:db:d8:53: ec:b9:c4:06:54:93:bf:73:84:49:51:0d:d9:25:f5: 44:3e:cc:c1:78:22:3c:0a:bc:b2:27:9f:aa:c1:15: 79:46:c8:16:a6:e6:94:bb:ff:20:db:74:16:2a:58: 57:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F3:29:34:83:31:EF:B8:96:A4:3F:76:60:94:41:08:CC:40:32:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:18:4a:c4:5d:84:a0:20:6f:5a:c1:b7:d8:b9:03:e8:ee:ff: 94:a4:f1:66:21:0e:20:ae:f6:77:8b:3e:c4:db:63:3f:bb:44: 1a:ee:72:f6:db:c9:89:77:32:f6:e5:40:32:d6:2d:5d:ae:4e: 65:de:0a:e4:13:7a:25:c8:a8:e0:33:81:72:9f:c5:af:70:ea: a2:cf:92:35:8a:e1:1c:9b:80:86:26:77:cc:fb:d9:19:06:08: 76:47:25:3a:da:27:26:94:a8:af:5b:d7:19:07:e8:df:8a:9b: 90:50:c3:88:b3:12:91:ef:df:70:49:d4:62:f1:a7:c8:4e:9c: 28:32:f7:16:32:f1:9e:b1:c9:9e:80:4f:fa:c1:6d:79:db:48: 0a:89:9d:b1:4f:04:f9:31:0b:9b:a2:35:ad:93:e0:35:ce:08: 17:b8:b6:92:b9:55:a1:48:a7:a6:cc:bd:d2:69:c2:21:17:af: 3c:7e:f4:7e:2a:43:b1:dc:e8:e0:f1:de:9e:6b:6b:4d:3c:36: 17:dc:21:7d:8d:0f:13:b7:64:bf:8a:99:5c:09:be:81:be:f0: cd:90:54:b5:2b:e2:b7:5e:64:04:3f:2f:2e:f0:63:3f:23:fa: 35:da:b1:53:09:c6:a9:91:75:a4:5b:1f:0e:94:c0:77:31:85: b5:37:d9:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ThPOOUKPz3RPxo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk MGZiMTNlNjQtZmU4Yi00N2RhLTgzOWItNGU5NjczMjYxYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie97UuUH/bi1GNwY1f/d40UJ6NmYDf1pnUmr RFi9y3aAcu3P2r1RGtU31RMYk/wwJOtrQtjAEnl97UVBgcfron6yT7khhiycEBXP QHyDZUeOGG8i0ENH2ixNNYxIdY9Q55GASTW9vqP/hQOoGdHqtHP5x5yf1MSnIy6m y7IQ8GrD/9sHMmTR5f09qBQqek3UVAQMKCJxsDxISQ67uoOEfYHyFeX8HTFUBY4A QgZmOufdE5Ejy0KhktUdmjVnFpCObsn74pOtC+d04uH5djrb2FPsucQGVJO/c4RJ UQ3ZJfVEPszBeCI8CryyJ5+qwRV5RsgWpuaUu/8g23QWKlhXJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFETzKTSDMe+4lqQ/dmCUQQjMQDI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMWRiNTlhZGYtMWMzZi0z MDVkLWJhMTEtN2NmZDAxZmMyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkYSsRdhKAgb1rBt9i5A+ju/5Sk8WYhDiCu9neLPsTbYz+7RBru cvbbyYl3MvblQDLWLV2uTmXeCuQTeiXIqOAzgXKfxa9w6qLPkjWK4RybgIYmd8z7 2RkGCHZHJTraJyaUqK9b1xkH6N+Km5BQw4izEpHv33BJ1GLxp8hOnCgy9xYy8Z6x yZ6AT/rBbXnbSAqJnbFPBPkxC5uiNa2T4DXOCBe4tpK5VaFIp6bMvdJpwiEXrzx+ 9H4qQ7Hc6ODx3p5ra008NhfcIX2NDxO3ZL+KmVwJvoG+8M2QVLUr4rdeZAQ/Ly7w Yz8j+jXasVMJxqmRdaRbHw6UwHcxhbU32XI= -----END CERTIFICATE-----Generated at Fri Jul 24 03:12:21 2026 by rpki-client