$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa File: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (raw, json) Hash identifier: yeBSaKITKLq+KFbFqA0dNkRbexgxbJ4/gqVHn9csJKc= Subject key identifier: 5C:37:3F:C8:73:1D:E0:CA:B5:4C:E2:14:3F:4A:80:04:45:9F:8B:59 Certificate issuer: /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Certificate serial: 010D0C9F4328584E7634DC349E550CE23C1C9180 Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 396996 IP address blocks: 2602:f9c8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dc:34:9e:55:0c:e2:3c:1c:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=6e77447e-779f-46e5-be62-cb8d238532ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:80:36:02:ef:80:1f:dd:92:b1:53:8d:d6: 8e:6f:0a:34:99:b1:79:aa:e6:f4:76:57:e6:81:d9: 3d:55:b2:ec:31:01:9d:75:13:1b:d4:f9:5a:46:52: 19:67:73:af:d0:56:57:7c:c0:34:b0:97:ee:18:65: dc:a8:53:cd:19:9b:e7:d9:df:b7:56:a9:d5:41:78: fd:18:0e:34:a2:26:94:3b:e5:2b:56:22:00:04:fb: ad:7b:9f:1a:e5:44:7c:77:c7:79:7b:63:5a:8c:36: cd:12:b5:c7:8b:9e:4c:38:11:59:c4:c8:4a:e4:2c: 2c:30:3d:e4:65:25:55:45:b7:f5:fa:a6:b5:1b:f5: 87:8d:d8:48:b1:c6:01:b2:22:21:d8:15:33:c2:b3: 14:d6:29:48:de:85:ed:c0:db:12:4d:72:a2:c4:7e: e0:8e:81:a1:cc:60:e4:6f:1b:8e:ef:1e:85:02:da: 4d:47:57:3e:4c:99:2b:be:7b:af:e2:0b:6f:de:3e: 20:87:9f:81:d4:a1:a2:39:32:24:fa:5d:0c:a0:16: 94:78:9c:f2:de:c8:89:1a:c2:b4:17:f1:02:f5:e4: bc:e0:1b:9d:cb:dd:8d:b3:02:81:a5:fa:d6:d2:60: 6c:4e:0f:54:ca:65:05:b3:82:9c:67:6a:46:20:28: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:37:3F:C8:73:1D:E0:CA:B5:4C:E2:14:3F:4A:80:04:45:9F:8B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl X509v3 Authority Key Identifier: keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer sbgp-ipAddrBlock: critical IPv6: 2602:f9c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:45:61:fd:6d:2f:34:65:fc:dc:84:c1:01:fa:a8:5f:09:4b: 18:f5:03:41:ae:cd:2d:20:34:12:3a:6a:b6:a8:90:ee:26:c8: 33:3f:3f:cb:42:16:35:f1:d9:af:8b:2e:f2:d9:63:4c:8e:4e: 6a:88:2b:b5:22:a2:7c:0f:4b:a6:95:35:cf:9b:f7:c9:f9:c0: 7b:1c:e3:0a:70:de:42:29:f3:f0:e5:9b:68:18:d3:bc:7f:53: 88:65:c9:81:e4:71:25:de:35:31:2a:21:9e:50:74:8d:3e:80: 23:7c:97:6c:08:69:56:21:df:fc:b4:11:68:5b:06:58:db:fd: 6e:51:21:06:7c:11:27:77:cc:af:50:4e:f7:61:90:6f:ec:81: 84:7a:d7:ad:92:ce:f8:9f:c6:2a:54:2d:f6:38:5d:69:aa:f9: 8f:bd:8f:7d:47:2f:d6:5e:30:6e:7f:a9:2d:41:51:d2:59:15: f2:5a:82:85:98:2a:db:e3:0d:8c:2f:87:bb:76:e4:33:f8:c3: 15:e7:0f:62:8f:06:d8:61:8f:52:f8:ac:35:80:9f:14:5a:74: 69:76:98:db:a2:13:f3:0d:8c:6a:7a:f6:6d:ac:70:f5:52:a5: 32:f6:1a:17:38:19:d8:4d:bd:3f:fd:73:9b:d8:00:f6:bc:8e: 41:e0:ac:99 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE52NNw0nlUM4jwckYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk5ZjlkMzYtZjk3MC00ODFmLWFlNTItZTc0YTZmOGE3 NTQxMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NmU3NzQ0N2UtNzc5Zi00NmU1LWJlNjItY2I4ZDIzODUzMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbyANgLvgB/dkrFTjdaObwo0mbF5qub0dlfm gdk9VbLsMQGddRMb1PlaRlIZZ3Ov0FZXfMA0sJfuGGXcqFPNGZvn2d+3VqnVQXj9 GA40oiaUO+UrViIABPute58a5UR8d8d5e2NajDbNErXHi55MOBFZxMhK5CwsMD3k ZSVVRbf1+qa1G/WHjdhIscYBsiIh2BUzwrMU1ilI3oXtwNsSTXKixH7gjoGhzGDk bxuO7x6FAtpNR1c+TJkrvnuv4gtv3j4gh5+B1KGiOTIk+l0MoBaUeJzy3siJGsK0 F/EC9eS84Budy92NswKBpfrW0mBsTg9UymUFs4KcZ2pGICi8bwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFw3P8hzHeDKtUziFD9KgARFn4tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlm OWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRhNmY4YTc1NDEvZGRkMTlkMzMtZWYwMi0z NGMxLWFiZDEtYWVmMjkwNGI3YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTk5ZjlkMzYtZjk3MC00ODFmLWFl NTItZTc0YTZmOGE3NTQxL2E5OWY5ZDM2LWY5NzAtNDgxZi1hZTUyLWU3NGE2Zjhh NzU0MS5jcmwwHwYDVR0jBBgwFoAUvMRVQVuDs9BtufBxgJNbtCGZ05swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hOTlmOWQzNi1mOTcwLTQ4MWYtYWU1Mi1lNzRh NmY4YTc1NDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5yAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAaUVh/W0vNGX83ITBAfqoXwlLGPUDQa7NLSA0EjpqtqiQ7ibIMz8/ y0IWNfHZr4su8tljTI5OaogrtSKifA9LppU1z5v3yfnAexzjCnDeQinz8OWbaBjT vH9TiGXJgeRxJd41MSohnlB0jT6AI3yXbAhpViHf/LQRaFsGWNv9blEhBnwRJ3fM r1BO92GQb+yBhHrXrZLO+J/GKlQt9jhdaar5j72PfUcv1l4wbn+pLUFR0lkV8lqC hZgq2+MNjC+Hu3bkM/jDFecPYo8G2GGPUvisNYCfFFp0aXaY26IT8w2Manr2baxw 9VKlMvYaFzgZ2E29P/1zm9gA9ryOQeCsmQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:08:08 2026 by rpki-client