$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/536ceddb-5fea-30af-938c-932bd037a0d2.roa File: 536ceddb-5fea-30af-938c-932bd037a0d2.roa (raw, json) Hash identifier: gUYWeny7j/Voh/CQxUCNqYOxR8RGF2bsDvnyL7RtsyY= Subject key identifier: 72:8F:FA:1F:A1:2B:4F:74:10:6C:7B:A6:47:F1:C2:D6:34:B8:08:87 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E94EA85FE61F432411F4B7280 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/536ceddb-5fea-30af-938c-932bd037a0d2.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 2604:86c0:f500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:85:fe:61:f4:32:41:1f:4b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=ec97c65c-f63f-48ce-9720-27f1ba3379ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e2:2d:3c:7f:00:16:a1:ed:2a:d2:ae:28:cb: 96:c4:f9:c9:27:0a:f0:57:40:7a:b5:a1:b5:5a:1b: 22:b2:61:15:ac:32:f0:c4:3b:6e:93:d4:3b:ac:3c: 85:e6:20:3a:c7:84:28:fd:5a:55:31:7d:c1:1e:cb: b8:cd:35:fb:a9:39:f7:89:3b:14:5b:8c:f3:b2:04: 26:40:ba:3d:98:4b:4b:d5:8c:1c:7a:ca:42:fb:e3: 53:d1:8a:07:f4:c4:9c:02:3b:f7:07:fe:21:07:0b: 1c:36:6a:06:56:90:1d:47:2c:3a:8d:65:f8:a7:7c: 79:0a:ec:77:9f:a8:03:45:e7:85:f8:0a:b9:5f:d8: 91:28:e1:d9:b2:ec:9f:e3:f7:d2:47:2c:24:18:c5: 77:a2:44:41:f5:bc:15:e3:03:68:94:4f:12:ce:01: 2d:f7:2c:22:a3:48:94:51:b9:be:f5:9c:91:67:66: a9:d2:48:26:0c:33:ba:ef:fd:bd:47:67:6c:da:c7: 49:da:b3:22:f2:17:46:54:16:bc:b3:18:4f:d5:16: b8:ac:e3:7d:bc:51:ae:5b:49:f7:3f:f4:ee:bb:e9: 8f:cb:1f:da:39:cf:41:0c:47:1c:aa:ba:3b:19:8a: 5d:32:a9:3e:b4:08:90:50:77:d5:89:88:9e:56:46: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:FA:1F:A1:2B:4F:74:10:6C:7B:A6:47:F1:C2:D6:34:B8:08:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/536ceddb-5fea-30af-938c-932bd037a0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv6: 2604:86c0:f500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b6:11:db:a1:df:3e:be:ac:09:9d:2d:9d:8b:2a:a0:eb:58: ff:e3:a4:ba:38:d9:26:6f:cc:ca:ec:1a:c4:e2:5b:f3:45:46: fd:42:04:43:fe:36:a7:6a:3f:6d:a2:0c:a7:45:79:e3:2a:b4: 56:21:b6:cf:2c:43:15:a3:a1:e7:37:ca:02:33:aa:37:80:12: b9:43:66:35:71:76:65:f1:2f:95:a4:74:c4:93:0c:7f:a3:8d: 49:8e:23:6c:96:1e:62:ed:da:88:b8:da:09:c5:28:a2:8d:ff: 0e:34:a9:9a:f4:d7:fe:bc:94:72:71:49:10:b8:a4:6e:2a:66: 3e:67:02:63:18:b0:61:78:64:54:1f:d7:86:06:4a:d2:b9:45: c5:a8:86:f0:43:99:8b:d1:30:6f:4d:03:11:45:57:6a:6a:ba: 7f:05:91:64:07:14:fe:40:cd:e5:53:7e:fa:f0:fe:86:86:24: 8c:9f:ea:6e:cc:08:38:8d:be:b7:5c:4f:ac:dd:e8:c0:39:ce: b5:14:d2:ab:6f:91:7a:43:b4:0f:0c:df:a5:a3:a5:84:95:60: 37:f7:85:4e:d9:9a:4a:cc:d7:33:e4:3d:8f:78:39:57:a2:75: a2:9d:13:16:bf:9f:90:7f:9e:03:70:e1:a0:df:0c:57:38:77: 9a:69:83:cc -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6U6oX+YfQyQR9LcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZWM5N2M2NWMtZjYzZi00OGNlLTk3MjAtMjdmMWJhMzM3OWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ItPH8AFqHtKtKuKMuWxPnJJwrwV0B6taG1 WhsismEVrDLwxDtuk9Q7rDyF5iA6x4Qo/VpVMX3BHsu4zTX7qTn3iTsUW4zzsgQm QLo9mEtL1YwcespC++NT0YoH9MScAjv3B/4hBwscNmoGVpAdRyw6jWX4p3x5Cux3 n6gDReeF+Aq5X9iRKOHZsuyf4/fSRywkGMV3okRB9bwV4wNolE8SzgEt9ywio0iU Ubm+9ZyRZ2ap0kgmDDO67/29R2ds2sdJ2rMi8hdGVBa8sxhP1Ra4rON9vFGuW0n3 P/Tuu+mPyx/aOc9BDEccqro7GYpdMqk+tAiQUHfViYieVkYb+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHKP+h+hK090EGx7pkfxwtY0uAiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTM2Y2VkZGItNWZlYS0z MGFmLTkzOGMtOTMyYmQwMzdhMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATbYR26HfPr6sCZ0tnYsqoOtY/+OkujjZJm/MyuwaxOJb80VG/UIE Q/42p2o/baIMp0V54yq0ViG2zyxDFaOh5zfKAjOqN4ASuUNmNXF2ZfEvlaR0xJMM f6ONSY4jbJYeYu3aiLjaCcUooo3/DjSpmvTX/ryUcnFJELikbipmPmcCYxiwYXhk VB/XhgZK0rlFxaiG8EOZi9Ewb00DEUVXamq6fwWRZAcU/kDN5VN++vD+hoYkjJ/q bswIOI2+t1xPrN3owDnOtRTSq2+RekO0DwzfpaOlhJVgN/eFTtmaSszXM+Q9j3g5 V6J1op0TFr+fkH+eA3DhoN8MVzh3mmmDzA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:58:18 2026 by rpki-client