$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa File: 2153f012-918f-3df3-b502-a1f6d458aa6a.roa (raw, json) Hash identifier: 3AocaOcCEWIL+riz8Zx1j4kfHjrTiP/00Lpt1M0sCas= Subject key identifier: A8:F0:91:A2:D0:97:31:EC:3C:8C:12:0E:DE:07:F3:29:1F:DF:0F:EF Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F4328584E7FFA290485263E7C9DDB6000 Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 402387 IP address blocks: 2602:f9f6:460::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:29:04:85:26:3e:7c:9d:db:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=d6cd0a92-5a79-4a3a-a5bb-bb80a7a60137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:77:c1:03:89:a7:41:2c:a7:d6:4a:bd:1c: d5:69:e4:8c:56:25:80:de:26:de:8e:cd:07:52:7b: 6f:dd:f0:58:07:24:99:7a:d4:71:ff:a7:e2:8c:f1: c2:e3:a6:d7:52:52:41:6c:a9:5f:c3:c0:5f:36:fc: 2b:af:97:d3:3b:0f:d3:f2:df:b4:45:06:93:9c:76: fe:b7:86:a4:e5:ad:d4:9a:6e:88:e0:3c:95:d1:07: 11:ca:e8:eb:84:f1:04:b0:02:9e:cc:3c:16:76:d0: fd:ca:e7:5d:b2:e4:41:a4:8c:e0:16:a5:0c:65:83: ef:02:4d:be:30:3b:2f:7d:d0:32:e1:71:ed:a1:d2: 1a:14:fc:87:75:e2:03:f5:94:39:3d:18:b0:96:0d: 82:d2:d7:cf:bb:5b:d8:11:20:e2:ec:a5:38:9c:11: 4b:22:e4:c8:99:d0:77:5d:58:5a:97:7c:36:41:62: ad:ca:3f:5a:4d:9a:5c:62:12:fe:c2:54:4f:04:67: c5:5c:26:e3:be:43:85:40:7f:58:32:cf:b6:9a:d5: 37:72:7d:51:88:57:1b:07:36:47:34:cd:4d:8d:70: a8:82:23:99:3e:cf:ce:a1:2f:46:2e:60:1a:3c:56: ae:da:8d:fc:d7:a0:0b:3b:74:4e:31:06:8f:b0:59: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:91:A2:D0:97:31:EC:3C:8C:12:0E:DE:07:F3:29:1F:DF:0F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/2153f012-918f-3df3-b502-a1f6d458aa6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9f6:460::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:52:a9:39:95:f7:52:c5:d2:db:ac:7a:9f:9c:10:ed:01:dd: 67:ea:45:e8:7c:49:30:c9:a5:2f:83:ed:00:70:b8:e6:98:c7: 59:1e:2a:4f:0b:01:1b:db:4a:c3:38:cb:d5:9d:cc:c2:45:9e: ee:eb:39:7c:94:4e:56:11:b8:20:25:f3:55:d2:d9:a8:58:7f: 44:6c:39:96:5d:9c:44:48:63:81:e4:fe:66:ab:8d:19:d9:ae: e0:54:3f:60:64:52:d6:5c:04:7f:fd:90:7f:d5:e5:dc:3c:c8: ce:ca:9a:84:eb:72:64:27:85:89:84:71:ca:31:fe:dd:d3:a6: 3a:90:5c:92:05:23:c0:bb:a0:12:a4:38:27:65:fd:ce:79:6a: ae:de:91:1f:c4:99:64:db:7f:1d:82:68:9c:dd:62:d5:61:6e: 18:05:e6:84:81:9c:90:f4:05:5e:10:6e:bf:ba:61:b7:44:d5: c2:e1:8d:95:d5:f4:10:5a:1c:6e:b9:20:5d:29:fb:36:bf:5d: 46:25:24:fe:5c:f0:34:19:a1:ea:b0:2a:11:d1:43:bc:37:06: 03:2e:d9:03:65:5f:d9:5e:48:f8:f6:b7:ef:a5:c8:c1:db:3b: cb:21:32:b3:81:a8:f0:d0:4f:a0:de:c8:dd:17:71:1c:a2:28: 93:94:9a:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+ikEhSY+fJ3bYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDZjZDBhOTItNWE3OS00YTNhLWE1YmItYmI4MGE3YTYwMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvt3wQOJp0Esp9ZKvRzVaeSMViWA3ibejs0H Untv3fBYBySZetRx/6fijPHC46bXUlJBbKlfw8BfNvwrr5fTOw/T8t+0RQaTnHb+ t4ak5a3Umm6I4DyV0QcRyujrhPEEsAKezDwWdtD9yuddsuRBpIzgFqUMZYPvAk2+ MDsvfdAy4XHtodIaFPyHdeID9ZQ5PRiwlg2C0tfPu1vYESDi7KU4nBFLIuTImdB3 XVhal3w2QWKtyj9aTZpcYhL+wlRPBGfFXCbjvkOFQH9YMs+2mtU3cn1RiFcbBzZH NM1NjXCogiOZPs/OoS9GLmAaPFau2o3816ALO3ROMQaPsFmIHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjwkaLQlzHsPIwSDt4H8ykf3w/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMjE1M2YwMTItOTE4Zi0z ZGYzLWI1MDItYTFmNmQ0NThhYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL59gRg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxSqTmV91LF0tusep+cEO0B3WfqReh8STDJpS+D7QBwuOaYx1ke Kk8LARvbSsM4y9WdzMJFnu7rOXyUTlYRuCAl81XS2ahYf0RsOZZdnERIY4Hk/mar jRnZruBUP2BkUtZcBH/9kH/V5dw8yM7KmoTrcmQnhYmEccox/t3TpjqQXJIFI8C7 oBKkOCdl/c55aq7ekR/EmWTbfx2CaJzdYtVhbhgF5oSBnJD0BV4Qbr+6YbdE1cLh jZXV9BBaHG65IF0p+za/XUYlJP5c8DQZoeqwKhHRQ7w3BgMu2QNlX9leSPj2t++l yMHbO8shMrOBqPDQT6DeyN0XcRyiKJOUmps= -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:22 2026 by rpki-client